Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://manage.acces-contr0l.com.de/main

Overview

General Information

Sample URL:	https://manage.acces-contr0l.com.de/main
Analysis ID:	1633963
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 4992 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5536 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,6830529872345700264,3490396282763105487,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://manage.acces-contr0l.com.de/main" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://manage.acces-contr0l.com.de/main	Joe Sandbox AI: Score: 9 Reasons: The brand 'Netflix' is well-known and typically associated with the domain 'netflix.com'., The URL 'manage.acces-contr0l.com.de' does not match the legitimate domain for Netflix., The URL contains suspicious elements such as 'acces-contr0l' which is a misspelling of 'access-control'., The domain extension '.com.de' is unusual for Netflix, which typically uses '.com'., The presence of input fields for 'Email or mobile number' and 'Password' is common in phishing attempts targeting Netflix users. DOM: 1.3.pages.csv
Source: https://manage.acces-contr0l.com.de/main	Joe Sandbox AI: Score: 9 Reasons: The URL 'manage.acces-contr0l.com.de' does not match the legitimate domain 'netflix.com'., The URL contains suspicious elements such as 'acces-contr0l' which is a misspelling of 'access-control'., The domain extension '.com.de' is unusual for Netflix, which typically uses '.com'., The presence of input fields for 'Email or mobile number' and 'Password' is typical for phishing attempts targeting Netflix users., The brand 'Netflix' is well-known and commonly targeted by phishing attacks. DOM: 1.5.pages.csv

Source: https://manage.acces-contr0l.com.de/main

HTTP Parser: Number of links: 0

Source: https://manage.acces-contr0l.com.de/main

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://manage.acces-contr0l.com.de/main

HTTP Parser: Base64 decoded: 1741623625.000000

Source: https://manage.acces-contr0l.com.de/main

HTTP Parser: Title: does not match URL

Source: https://manage.acces-contr0l.com.de/assets/index-cd1hGY-p.js

HTTP Parser: var a6=object.defineproperty;var l6=(e,t,n)=>t in e?a6(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var ct=(e,t,n)=>l6(e,typeof t!="symbol"?t+"":t,n);function ye(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!array.isarray(r)){for(const o in r)if(o!=="default"&&!(o in e)){const i=object.getownpropertydescriptor(r,o);i&&object.defineproperty(e,o,i.get?i:{enumerable:!0,get:()=>r[o]})}}}return object.freeze(object.defineproperty(e,symbol.tostringtag,{value:"module"}))}(function(){const t=document.createelement("link").rellist;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.queryselectorall('link[rel="modulepreload"]'))r(o);new mutationobserver(o=>{for(const i of o)if(i.type==="childlist")for(const s of i.addednodes)s.tagname==="link"&&s.rel==="modulepreload"&&r(s)}).observe(document,{childlist:!0,subtree:!0});function n(o){const i={};return o.integrity&&(i.integrity=o.integrity),o.referrerpolicy&&(i.referrerpolicy=o.referrerpolicy),o.crossori...

Source: https://manage.acces-contr0l.com.de/main

HTTP Parser: <input type="password" .../> found

Source: https://manage.acces-contr0l.com.de/main

HTTP Parser: No favicon

Source: https://manage.acces-contr0l.com.de/main	HTTP Parser: No <meta name="author".. found
Source: https://manage.acces-contr0l.com.de/main	HTTP Parser: No <meta name="author".. found
Source: https://manage.acces-contr0l.com.de/main	HTTP Parser: No <meta name="author".. found

Source: https://manage.acces-contr0l.com.de/main	HTTP Parser: No <meta name="copyright".. found
Source: https://manage.acces-contr0l.com.de/main	HTTP Parser: No <meta name="copyright".. found
Source: https://manage.acces-contr0l.com.de/main	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.12:49703 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.5
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: manage.acces-contr0l.com.de
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=%2BN3MYkCJZRyZkPr%2Feo%2FIyRGElQ91gs9je7mcbBkHd5JyFG%2F6vgyvdVmpdPBaa%2F8IgDNYOuqfafMcTJCieYnR2mk7grPV0Ul1IJKND8eJaMtegziZBWlKxyIkAeN8yHKJFSfHmVqs3ID%2FzT32oaA%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 522Content-Type: application/reports+jsonOrigin: https://manage.acces-contr0l.com.deUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49685
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown

HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.12:49703 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir4992_208453335

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir4992_208453335

Jump to behavior

Source: classification engine

Classification label: mal48.phis.win@23/23@16/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,6830529872345700264,3490396282763105487,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://manage.acces-contr0l.com.de/main"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1960,i,6830529872345700264,3490396282763105487,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://manage.acces-contr0l.com.de/main	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
manage.acces-contr0l.com.de	172.67.152.103	true	true		unknown
a.nel.cloudflare.com	35.190.80.1	true	false		high
beacons-handoff.gcp.gvt2.com	142.251.143.35	true	false		high
www.google.com	142.250.185.100	true	false		high
beacons.gcp.gvt2.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://otelrules.svc.static.microsoft/rules/rule704001v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/other-Win32-v19.bundle	false		high
https://otelrules.svc.static.microsoft/rules/rule704151v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702001v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704200v0s19.xml	false		high
https://manage.acces-contr0l.com.de/	false		unknown
https://otelrules.svc.static.microsoft/rules/rule700451v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703200v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702451v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703301v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703050v3s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700650v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702601v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701650v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700950v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120119v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703201v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701901v1s19.xml	false		high
https://a.nel.cloudflare.com/report/v4?s=%2BN3MYkCJZRyZkPr%2Feo%2FIyRGElQ91gs9je7mcbBkHd5JyFG%2F6vgyvdVmpdPBaa%2F8IgDNYOuqfafMcTJCieYnR2mk7grPV0Ul1IJKND8eJaMtegziZBWlKxyIkAeN8yHKJFSfHmVqs3ID%2FzT32oaA%3D	false		high
https://otelrules.svc.static.microsoft/rules/rule703250v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700651v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701651v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702101v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702000v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703300v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700101v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701551v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701101v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702701v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701750v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700300v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702401v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120607v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702600v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704000v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule224900v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703251v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701900v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704100v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704150v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700250v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704201v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703550v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120128v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120603v8s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702400v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704101v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700251v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703551v0s19.xml	false		high
https://manage.acces-contr0l.com.de/main	true		unknown
https://otelrules.svc.static.microsoft/rules/rule700951v1s19.xml	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
35.190.80.1	a.nel.cloudflare.com	United States		15169	GOOGLEUS	false
142.250.185.100	www.google.com	United States		15169	GOOGLEUS	false
172.67.152.103	manage.acces-contr0l.com.de	United States		13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.12
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1633963
Start date and time:	2025-03-10 17:18:48 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://manage.acces-contr0l.com.de/main
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@23/23@16/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.238, 216.58.206.67, 64.233.184.84, 142.250.185.110, 142.250.186.110, 172.217.18.14, 172.217.16.142, 199.232.214.172, 216.58.206.78, 142.250.184.238, 142.250.186.174, 142.250.186.106, 142.250.186.74, 142.250.74.202, 142.250.181.234, 142.250.185.202, 142.250.186.138, 142.250.185.74, 216.58.212.170, 142.250.185.106, 216.58.206.42, 216.58.212.138, 142.250.185.138, 142.250.186.42, 172.217.16.202, 142.250.185.170, 142.250.185.234, 142.250.185.174, 142.250.186.78, 216.58.212.131, 88.221.110.121, 4.175.87.197
Excluded domains from analysis (whitelisted): clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, content-autofill.googleapis.com, otelrules.svc.static.microsoft, slscr.update.microsoft.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://manage.acces-contr0l.com.de/main

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 60

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.066108939837481
Encrypted:	false
SSDEEP:	3:C0NY:u
MD5:	D59DE2F2B1F18AFAAB6EFBB5E8D7DB42
SHA1:	77587B981A047955407905358D39950877368CC9
SHA-256:	E5D91D35F7D93D22881F28575657D7928D6A63A6381EB58B9759935171CD6A0D
SHA-512:	8D1BFAB6D22907F036BA0B8B5AF1B8FA1738C2F761B7373B93DBEF8790131844379206060CEA0CB059AA6D566A2FCDA102D391B0740F4618A573047BE660808A
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIgCcSKo3EHE2S2EgUNCIRn8RIFDcWTxCQhSuDWAP96W2I=?alt=proto
Preview:	ChIKBw0IhGfxGgAKBw3Fk8QkGgA=

Chrome Cache Entry: 61

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	478411
Entropy (8bit):	7.996801917652566
Encrypted:	true
SSDEEP:	12288:9hApfCIfHkyRhBdurHLIN6zibZ/EQfVe/dTjPm:opfCXyRhBdIHLQ6GbJEWVe/dPu
MD5:	CF9ED01B1E28FC1103062A47A9011040
SHA1:	DF049492690B987B2BD0634AD3C535A9654A8972
SHA-256:	602324B5D20C6BCFDA07BCBF34762A8AE145000AC2B7013123BB09E11F47184C
SHA-512:	B99867FDB8A60EDE74316C2D4EC8A337C1CE4E79734DC95850C925CEAD8FB6C62CF07577EFA3EC87B11189661E5F905499E066A512CECA763CD0EEE1887B638B
Malicious:	false
Reputation:	low
URL:	https://manage.acces-contr0l.com.de/assets/index-cd1hGY-p.js
Preview:	(./..X,l.~....4.F.. ....~...j....B.E.:g..p....K...^.F..D...#.p.........}...u.ip...K.....(P...L3..`...F..yI....u.>..\..^..........{..xf..<;.7..F..hS.N...e4...x.\|x.......~.o.T....lF.g...du>..s.......g.Uj7..}.\~.m........s6.....z3.l....(......X/...m.^t_...+.^...NF9...W....vZ........Pnz.q?..~3;.}...G.......=...v.k9.....f}p<....@.,......\|\|........>4k...i6=..8..M'....4f.Yig.hS)..9.=8...>..l.=.]N...\..,....G.].=2.1.\|<5.....<r.=......yOj:.3.5.......;=.SOuz...N..x..s.;..9.M...jS6e.%...u....M=e..f..g.a.\7.G.{6.v....J...W....M..{.F.F..\T_.('.<.Dw..u....\.g.E...rF+4.E..."...."........e..gT.ov.q_...9M..9...i....-.[...........i....SO.i..f^m.).4V..\..4U.5...._....k#..sz.nN`<.l.&{......2.LZR.[RW....B.h..r..L....0@..._..p'{.D...!q..K....?{.S..M.`.e....v..X4...i..A.~W..2.:.M._.nN\|.4..yH.=.`...m.r..........t!.$w..Q.D.q.X...-.......3.o..U..r."...q..........8{.e.R%.eI..UW..JQ.v.I.%5&^...D.(.c.!......".#...T"...<........"$.I%.>..x........a.M%""".... ...Q.....

Chrome Cache Entry: 62

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	290
Entropy (8bit):	7.1542014939302225
Encrypted:	false
SSDEEP:	6:3Tf1n6aJwZGpbhRDOjLgxMkR9SeYOWjZvSOMJrh5zH4jr:TQa+85hRDoUKo9TWdvSn5Mv
MD5:	9BE455CC14F021CA8D02845C6D172EF8
SHA1:	E2FD7D1DF551AD575D5656FD2872C1BD974315DC
SHA-256:	3ECDB285B987EE6BCFB4E4BFE125D5234280D3702E98CE030742149D60346DAF
SHA-512:	B4E0D70E9EB764A25806E23D5CCAD2348EDE4792418D621AAE1FC11B523C88F0EC5E13228780B140653BA5F79CB0A1F963B4156B692D0FE87293048332845262
Malicious:	false
Reputation:	low
URL:	https://manage.acces-contr0l.com.de/favicon.ico
Preview:	(./..X.....9.@M.@O..c+d.....3*..H!X..w...&x.0./...,...3......g..-U....)nG.H.y...S...#..Myi......=....0..qYp.E..T.'.=...M.=F.2..^/..0.^.....gwe.-..[i..\.."X\|..\nNb...I..S....... .z2.Gr.9f63'..(.......1.+a....^...9..9i].,H.BK..08..GG\|....ol...!.8..P!..&0#0.X...`5x(l0L#....o(@..

Chrome Cache Entry: 63

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	dropped
Size (bytes):	781
Entropy (8bit):	7.658058634278719
Encrypted:	false
SSDEEP:	12:zaxTd0zmQBFLSaQ1hV839t7kiIiX37Is92c+YIKXi1Q7zYPzcaDVSgEconTZZO0e:ex509BFeq3HuNc+LSfOTbRoTZZtAZ
MD5:	627F5930FC18752874F0EB6C02D31B24
SHA1:	1231727768915D844E695E4474031EAB2B990540
SHA-256:	337C2C3B1567B7F84C969D4182CBD5171BBD551DBDD5058739306F91F04608DA
SHA-512:	A7D742C85308CD6C9417A571BF401AA71C19DD27AF184A90A10939B5071E88C69C51AB3EFB26FE0BC234717B4653B547B0FC6A37029D7ED6B91A541EAAE2E03B
Malicious:	false
Reputation:	low
Preview:	(./..X......$ ........7._...8..G..6.Rdc......X8.......p.b.".s.!Q.@H.@.X.F....yr.8O.rI.@...5...4..M.6Y2.XD...C.jr...<.....B1.3A...H......%.b&..q(. ..b(S.H%E..Z+/$O%j..H..jRM$..8PtI.L\&.T.H.,.s..b..5..@..jB!1.c.\.s.+**....4Q.#U ...PH...............`./.........~'.....m./.7......M..2(&.j.@..L(...IR&....,x<...<..\|....`..{..g......\|`...M...P...h.(..AQ.,.$..`...I"...MR..T..)f/R.ls...T..._S.Z...n..-.W..q...A..t...X.&k..q......{[..B..9_..t..1...Z.9..w%t{.(k...wq...r.A}..ba4..a.c...;...... .[.......P3..._.....i.n6.g..s..-.K..L......`..a{.....{...k..S.U.+.w^.]W.~.u}...........h_;/..mA.....t..w.r..........&w\|K~....sn.s...F....]uA..5..w.....&.{.f...\|...l.\..% ... ....A>...Z,..../>.5{..:B.:X..+:?.....\@.&.VB.....f].;.!.....y}........x?x.#~d...I....Eq1.

Chrome Cache Entry: 64

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	3879
Entropy (8bit):	7.935206106751296
Encrypted:	false
SSDEEP:	96:E7vRao36uEzFYAHLTC4tt1iiDWKh1UQoFClWSN4:E7vV36h6yLnZh1oIwSN4
MD5:	9B26F935DE260BFD371D578FDDCAC056
SHA1:	F6CE5A262ED7767E0E31264EFF51F377B6303EA4
SHA-256:	CF4798D2BDC4C6AC76490856B7CCCAA162DD357FEA20ED549D88F5B7E7597C6C
SHA-512:	59C961800F97D82B66C1D7BFD4F6C01DBB62BA27EEBC514FE36C4601BC94D608E1A697705AC707EB4AC49CA4C5AE547C3E15BEA181D3886D7A7C6647B2B8AC0B
Malicious:	false
Reputation:	low
URL:	https://manage.acces-contr0l.com.de/assets/index-DpeLI5jd.css
Preview:	(./..X.x..`...l.....n..B...(.$g.h..alG.N..(oA)..o.O.O..\...........'.A3I.'A.{.%...!.rw.......qjE4..AO........H..........M..D..+]..;.Sj....w..{.G2.x...a+..~7..~7..$.t.........``.5O..P..d(....>....Z..i<.{.fr].3~.d...G...RO.u.....f>e..v.v.J...=.9..\|g........q( .!yp..C../.A.u.\|HJ....[u...\...4d.........4..x..S..:w.....'.(...../..G..L......`....@p...B....z.ly'..(.p..T>@.M.....se....I.h.P....p....P...@.[.+....\.P.{......G...... V.J.?...s..R.R....Qzq....4.^.d#.<-..y...k..TDK0.c..h..e.+t.....-.....fr)..(."Z.[R.\.....x..jx.-%...f.....+..x]I;WgA.>Rs...O.'..N}o.....)o......ky;~...w.~I.$...-=.K.FI\.r.yZs..c{..y.c.~.D...os.W.1.....-....vOy.e....6.........../~..e..4.....g.%g....$ot6.......;o.N..1Q[..D.F...3e...O..w~..N..`..m.(..(....4....v......K.#.......g....Jig.9.m......=+..n.R.....g.!$...!K.0.Wk.......W.U..;.%wv....);."P...r.m...s4.c{..s..zt%$...G.s...<]..}..{.....gl...W.....).8..x...U.7G...C.\.\|zr...>..!l)..1.2j.h.......3J...<..fX...6.t.

Chrome Cache Entry: 65

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1188)
Category:	dropped
Size (bytes):	3733
Entropy (8bit):	5.354283368428775
Encrypted:	false
SSDEEP:	96:EyJoZBdyhXanFiteY9DLiBoi0FAa2nx/IJ:1oHxYzQnx/0
MD5:	A493472111D3922A5FB0522E10D8B1F7
SHA1:	84255D2470EEC8C1B8DB0281C56041C26CEC7F89
SHA-256:	3753DAA6C9F248FA3BE1860331E50C7A15231F4275D6013B74566CBA304808FC
SHA-512:	883AE08FC9AC2D5B4BF006DBC7A70218FFE8A6DF44E1906AA7A5379FF50A8FDBD8918DECBFED5F2EB18033BF7D62F69CC87F2A9774D57AD87D1485AD737CB764
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>405 Method Not Allowed</title> <style> body{margin:0;padding:30px;font:12px/1.5 Helvetica,Arial,Verdana,sans-serif} h1{margin:0;font-size:48px;font-weight:normal;line-height:48px} strong{display:inline-block;width:65px} </style> </head> <body> <h1>405 Method Not Allowed</h1> <div><p>The application could not run because of the following error:</p><h2>Details</h2><div><strong>Type:</strong> Slim\Exception\HttpMethodNotAllowedException</div><div><strong>Code:</strong> 405</div><div><strong>Message:</strong> Method not allowed. Must be one of: POST</div><div><strong>File:</strong> /home/pmwrrvld/public_html/manage.acces-contr0l.com.de/backend/vendor/slim/slim/Slim/Middleware/RoutingMiddleware.php</div><div><strong>Line:</strong> 79</div><h2>Trace</h2><pre>#0 /home

Chrome Cache Entry: 66

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	dropped
Size (bytes):	294
Entropy (8bit):	7.167093583200351
Encrypted:	false
SSDEEP:	6:31n6aJwZGpbhRDOjLgxMkR9SeYOWjZvSOMJrh5zH4jX:3Qa+85hRDoUKo9TWdvSn5Mb
MD5:	DE56C067E1FBBF7994CF78E07316435C
SHA1:	E910EFF98265171C49D6360F7171337CD1CBABFF
SHA-256:	D27434480EB63477F31D4C73941243C5917628C0C310220F6CBD4A63DE0B691F
SHA-512:	A8512619AAB6062F3B3D04E1D9619F6240B5D0D46988987E29C8A5717842663FE2DBD90A7DAAA9D87635D0C1F4D3D7B6267462792E925B394827785EFC9AF095
Malicious:	false
Reputation:	low
Preview:	(./..X.....9.@M.@O..c+d.....3*..H!X..w...&x.0./...,...3......g..-U....)nG.H.y...S...#..Myi......=....0..qYp.E..T.'.=...M.=F.2..^/..0.^.....gwe.-..[i..\.."X\|..\nNb...I..S....... .z2.Gr.9f63'..(.......1.+a....^...9..9i].,H.BK..08..GG\|....ol...!.8..P!..&0#0.X...`5x(l0L#....o(@.....

Chrome Cache Entry: 67

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Category:	downloaded
Size (bytes):	304285
Entropy (8bit):	7.988467268355303
Encrypted:	false
SSDEEP:	6144:qEhu2rancjxceL0h+xBetUZInvZtrb5MflVPfZp0r3u9ahiv8zVz:Tricvcav2nhtrNefZye9ahiS
MD5:	18B3E16B0F649AC5AE9BA5A3CD0BAAEC
SHA1:	5793B1EBD3E3891491D095E6A0714EDEBD86B367
SHA-256:	C498734D932CD53D7BE996C240BBE057C4395F1540ACF8A2F51EC972C67D339E
SHA-512:	C61AF0A1FCDA98CB0257EB2D040F9C89B570E585608EC1795D43B8E0946130CEB44450C74EB9FDDBD30F55BC758FF2419A92D15D017755BF22857FFD260410BA
Malicious:	false
Reputation:	low
URL:	https://manage.acces-contr0l.com.de/assets/bg-img-DshQzFTz.jpg
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........e....".................................................\...$x[..1.y.Z.....q.T:.IC...C..N.o..3.j=,..w]9Q..j...?W.....q..K.9/\|....../'.B.Y.tx:..C.Vl].....]..p......bT\|.H...YG.x.I.v.o.Ba..\|....W...{.x}....H....._../K..9.H...Y....E.C..4.B....Y."t=".],..7.E#[...@LD.[Y.z.....A\|`......n.!.%....b...."nS...,.\.^4..l..c.Lm...;..^.......K..=&o8...e.......Ze...+.qw..S..8[.=....A.#\..S....5..0..^.36.'..}...W.9.^!.&..Z.T...T..ig.......k.6-...6V..\|.NA/tQD(..V...z..;..3'.Y.v..w,..j.y..[../...w...\g.......KSE...n.M.1i..3YD/...\|].'T.'..m./3.._.k;...TgK..e.P.?.s.../......#G>...9......f`c..H..v...S_n......)x6\.5n.....{....{...Ak\G.sso....=..I.'..sd.R&"wE.B..uEp......."1....I.Y.-,&.c.....g=..Vn...UI5.-......*]_..n<..0..:.=.T..].......k..8....k.x?..v.Y<=k.~Cp.n..c..wqg....,...;...U-...fm..e...m..`..s...

Chrome Cache Entry: 68

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	71
Entropy (8bit):	5.177640781354625
Encrypted:	false
SSDEEP:	3:WhgUuyRNAWHpqP09jwHJQkXdn:wNPJSEQn
MD5:	59B6AA33EF8789A88A7E217B160A917B
SHA1:	BA4BD9245C6FB5AF79C341AB1E6A67EA3139C148
SHA-256:	83D56858111B1BB7A07BB0A4A437AFB30153A6D091F0A146AFDBC8932BE24740
SHA-512:	73A1AA641A3FCFCB079235C81FC3C3E7512D4825B99167C0003A56C6AA03F949D4B1037CEC7914FBDA6DFF4C33B6C380BEC751020D62997E871EAD2DEB3258FC
Malicious:	false
Reputation:	low
URL:	https://manage.acces-contr0l.com.de/api/config
Preview:	(./..X.....{"panel":true,"page":{"LOGINEXPLAINFO":true}}..2........H..3

Chrome Cache Entry: 69

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	dropped
Size (bytes):	71
Entropy (8bit):	5.177640781354625
Encrypted:	false
SSDEEP:	3:WhgUuyRNAWHpqP09jwHJQkXdn:wNPJSEQn
MD5:	59B6AA33EF8789A88A7E217B160A917B
SHA1:	BA4BD9245C6FB5AF79C341AB1E6A67EA3139C148
SHA-256:	83D56858111B1BB7A07BB0A4A437AFB30153A6D091F0A146AFDBC8932BE24740
SHA-512:	73A1AA641A3FCFCB079235C81FC3C3E7512D4825B99167C0003A56C6AA03F949D4B1037CEC7914FBDA6DFF4C33B6C380BEC751020D62997E871EAD2DEB3258FC
Malicious:	false
Reputation:	low
Preview:	(./..X.....{"panel":true,"page":{"LOGINEXPLAINFO":true}}..2........H..3

Chrome Cache Entry: 70

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	297
Entropy (8bit):	7.139111777363755
Encrypted:	false
SSDEEP:	6:GM1JteGwdxdnMEHYC2QxXtR9a5JB+qcu/Vljyz4+uzH4joV:GMendxJpHYDSD9YJBSmN7+uMcV
MD5:	04FABA53CEE0D9C7AF381C70C81A095F
SHA1:	FC9F7ECB0FE1DD40A7DDED0DB5C1B21224B7487E
SHA-256:	D1921467C0839F1499E7AB78AF1C6A4418F7BC8C69F8C52CA5EE026F7F8C5CCE
SHA-512:	E2B0180229B62FEF6DB15ADB397C94C4C3DC7951C89706210F206C80E75375021C07358BC57AE1881E591B92E6452608B7920C5DF1AD94EC186A44DE9EC53EED
Malicious:	false
Reputation:	low
URL:	https://manage.acces-contr0l.com.de/main
Preview:	(./..X.....8.@M.@O..c+d.....3*..H!X..w......0./...,...3......g..-U..&.S.j"-.E.TN..v..o...+2...=k...0..Qap.E..L.#.=...M.F@2.p.^/bey].W/r....gwe.-..;i..\.."X\|..\nNb......S.........z2..o......\.Zg..E.c.........<ssv.9i}.(G.BS.u48..GG\|....ol...!.8..P!..&0#0.X...`5x(l0L#....o(@..........

Chrome Cache Entry: 71

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	781
Entropy (8bit):	7.658058634278719
Encrypted:	false
SSDEEP:	12:zaxTd0zmQBFLSaQ1hV839t7kiIiX37Is92c+YIKXi1Q7zYPzcaDVSgEconTZZO0e:ex509BFeq3HuNc+LSfOTbRoTZZtAZ
MD5:	627F5930FC18752874F0EB6C02D31B24
SHA1:	1231727768915D844E695E4474031EAB2B990540
SHA-256:	337C2C3B1567B7F84C969D4182CBD5171BBD551DBDD5058739306F91F04608DA
SHA-512:	A7D742C85308CD6C9417A571BF401AA71C19DD27AF184A90A10939B5071E88C69C51AB3EFB26FE0BC234717B4653B547B0FC6A37029D7ED6B91A541EAAE2E03B
Malicious:	false
Reputation:	low
URL:	https://manage.acces-contr0l.com.de/vite.svg
Preview:	(./..X......$ ........7._...8..G..6.Rdc......X8.......p.b.".s.!Q.@H.@.X.F....yr.8O.rI.@...5...4..M.6Y2.XD...C.jr...<.....B1.3A...H......%.b&..q(. ..b(S.H%E..Z+/$O%j..H..jRM$..8PtI.L\&.T.H.,.s..b..5..@..jB!1.c.\.s.+**....4Q.#U ...PH...............`./.........~'.....m./.7......M..2(&.j.@..L(...IR&....,x<...<..\|....`..{..g......\|`...M...P...h.(..AQ.,.$..`...I"...MR..T..)f/R.ls...T..._S.Z...n..-.W..q...A..t...X.&k..q......{[..B..9_..t..1...Z.9..w%t{.(k...wq...r.A}..ba4..a.c...;...... .[.......P3..._.....i.n6.g..s..-.K..L......`..a{.....{...k..S.U.+.w^.]W.~.u}...........h_;/..mA.....t..w.r..........&w\|K~....sn.s...F....]uA..5..w.....&.{.f...\|...l.\..% ... ....A>...Z,..../>.5{..:B.:X..+:?.....\@.&.VB.....f].;.!.....y}........x?x.#~d...I....Eq1.

Chrome Cache Entry: 72

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zstandard compressed data (v0.8+), Dictionary ID: None
Category:	downloaded
Size (bytes):	4014
Entropy (8bit):	7.926304437203493
Encrypted:	false
SSDEEP:	96:lM3V/4kI1dWx/ErJE3ueMww29NtPwtBCsL1omc/k0RUiO4A:lMwWxsK3PMgNxwoJRrA
MD5:	4447BA086E4E77C78934C357B96751C5
SHA1:	6835B6D5F5716D6BD202361D74018C0801FD64EE
SHA-256:	737E30DE0566561EBB1377D072D449617EA050CF169FFD029B54F4CAA64B2341
SHA-512:	8F2F748969EBA34FE072D8B81AA303E791CE96CA4A42BF61E8FD2B112F31451B3C942544F7EC5E36994E92830EDB750ADC1596E38B743C8AE94272A3BF1343E5
Malicious:	false
Reputation:	low
URL:	https://manage.acces-contr0l.com.de/cdn-cgi/challenge-platform/h/g/scripts/jsd/f3b948d8acb8/main.js?
Preview:	(./..X.\|...T-..D....-G..;.Go.\.\|..BSp.......O.G...)..(.............V.~.C...;E.I.......D.O&..:=.5.U.w!).......=L..N1...z;.d...-].r.h\....*..`..l....o9.t.nbp.\K.zS..-...@..-~+..-....`...T..+.z[..bOq.c..`......Oo...........4mN..U...}....R+..z;r.Ze.V..}mY.p.z."...W.....s....4......5.iP.. ...W.7.M..`04.O..o.Ak.;3z._.......z.oL..mY.a..M!P..G...B...D ..x_j....FG.[.N.....jt:...N..ng.....w.}Y.^.......s$.z.v!.D&..mKc0ng..d....z..d..../...}a.#....B.I%.R.....YB....'...?.....8.H...+(.z....c.....S\|......N....T..],..0.kK.HvnTI.mHf+......~;b...D/:8...E......qMO=."..^.]QP...........s.\..f....ne.U..."....B....n..X$k....d5.[e..u4..n....6G.......(y..I.VP<.L...-.\..A...j..C..g.<..S...K.p..].J.".%....BJ"..P...R.Q...z.<&..'.$.$<.(.....+.L,J..&.".{.a......3..N.G.<..$.8...P2.d.yH...G..\|.yf.+.>...(F=..g..#2*zD..(......;...C....A.....T.......}.`.=..').d.....n...nq.......VA...f.......w....J.7.mk..^U...oo6...D.9..5\M]..k...YOO.z..............Dv.ih....TP$

Chrome Cache Entry: 73

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Category:	dropped
Size (bytes):	304285
Entropy (8bit):	7.988467268355303
Encrypted:	false
SSDEEP:	6144:qEhu2rancjxceL0h+xBetUZInvZtrb5MflVPfZp0r3u9ahiv8zVz:Tricvcav2nhtrNefZye9ahiS
MD5:	18B3E16B0F649AC5AE9BA5A3CD0BAAEC
SHA1:	5793B1EBD3E3891491D095E6A0714EDEBD86B367
SHA-256:	C498734D932CD53D7BE996C240BBE057C4395F1540ACF8A2F51EC972C67D339E
SHA-512:	C61AF0A1FCDA98CB0257EB2D040F9C89B570E585608EC1795D43B8E0946130CEB44450C74EB9FDDBD30F55BC758FF2419A92D15D017755BF22857FFD260410BA
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........e....".................................................\...$x[..1.y.Z.....q.T:.IC...C..N.o..3.j=,..w]9Q..j...?W.....q..K.9/\|....../'.B.Y.tx:..C.Vl].....]..p......bT\|.H...YG.x.I.v.o.Ba..\|....W...{.x}....H....._../K..9.H...Y....E.C..4.B....Y."t=".],..7.E#[...@LD.[Y.z.....A\|`......n.!.%....b...."nS...,.\.^4..l..c.Lm...;..^.......K..=&o8...e.......Ze...+.qw..S..8[.=....A.#\..S....5..0..^.36.'..}...W.9.^!.&..Z.T...T..ig.......k.6-...6V..\|.NA/tQD(..V...z..;..3'.Y.v..w,..j.y..[../...w...\g.......KSE...n.M.1i..3YD/...\|].'T.'..m./3.._.k;...TgK..e.P.?.s.../......#G>...9......f`c..H..v...S_n......)x6\.5n.....{....{...Ak\G.sso....=..I.'..sd.R&"wE.B..uEp......."1....I.Y.-,&.c.....g=..Vn...UI5.-......*]_..n<..0..:.=.T..].......k..8....k.x?..v.Y<=k.~Cp.n..c..wqg....,...;...U-...fm..e...m..`..s...

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 10, 2025 17:20:05.461201906 CET	49679	443	192.168.2.12	20.189.173.5
Mar 10, 2025 17:20:11.508121967 CET	49675	443	192.168.2.12	2.23.227.208
Mar 10, 2025 17:20:17.137682915 CET	49700	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:17.137731075 CET	443	49700	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:17.137988091 CET	49700	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:17.138251066 CET	49700	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:17.138278008 CET	443	49700	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:17.816632032 CET	49700	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:17.860337019 CET	443	49700	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:17.986421108 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:17.986453056 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:17.986512899 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:17.986958027 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:17.986968040 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:17.987339020 CET	49702	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:17.987360954 CET	443	49702	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:17.987859964 CET	49702	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:17.988195896 CET	49702	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:17.988204002 CET	443	49702	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:19.145471096 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:19.145528078 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:19.145651102 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:19.146573067 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:19.146589041 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:19.398977995 CET	443	49700	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:19.399144888 CET	443	49700	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:19.399158955 CET	49700	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:19.399247885 CET	49700	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:21.306929111 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.307002068 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:21.311240911 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:21.311253071 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.311494112 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.326093912 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:21.372334003 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.784128904 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:21.789159060 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:21.789222956 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:21.789251089 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:21.798202991 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:21.798243046 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:21.798497915 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:21.798508883 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:21.799798012 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:21.799823046 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:21.835022926 CET	443	49702	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:21.835086107 CET	49702	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:21.835093975 CET	443	49702	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:21.849287987 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.849312067 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.849328041 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.849425077 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:21.849425077 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:21.849447966 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.849498034 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:21.879878998 CET	49702	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:21.879889965 CET	443	49702	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:21.880573034 CET	49702	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:21.880582094 CET	443	49702	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:21.922625065 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.922653913 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.922708035 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:21.922719002 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.922779083 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:21.922779083 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:21.964827061 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.964890003 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.964919090 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:21.964936972 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:21.964977026 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:21.964977026 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.009779930 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.009830952 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.009918928 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.009918928 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.009932041 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.009991884 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.027483940 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.027507067 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.027581930 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.027591944 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.027637959 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.051044941 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.051078081 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.051131010 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.051146030 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.051198959 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.051198959 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.070760012 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.070784092 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.070844889 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.070861101 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.070909023 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.070962906 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.092597961 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.092622042 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.092705965 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.092705965 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.092724085 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.092763901 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.111525059 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.111551046 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.111648083 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.111648083 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.111666918 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.111697912 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.122798920 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.122823954 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.122865915 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.122889042 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.122920036 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.123013973 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.135529041 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.135551929 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.135598898 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.135622978 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.135660887 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.135660887 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.147536993 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.147559881 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.147651911 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.147666931 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.147710085 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.156593084 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.156615019 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.156725883 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.156725883 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.156739950 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.156811953 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.160165071 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.160227060 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.160240889 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.160322905 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.160454988 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.160485029 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.160564899 CET	49703	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.160573006 CET	443	49703	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.215886116 CET	49706	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.215935946 CET	443	49706	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.216012955 CET	49706	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.216681957 CET	49707	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.216732025 CET	443	49707	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.216788054 CET	49707	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.217029095 CET	49706	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.217041969 CET	443	49706	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.217320919 CET	49707	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.217331886 CET	443	49707	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.217464924 CET	49708	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.217499971 CET	443	49708	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.217549086 CET	49708	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.217658997 CET	49708	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.217665911 CET	443	49708	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.218115091 CET	49709	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.218162060 CET	443	49709	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.218189001 CET	49710	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.218204021 CET	443	49710	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.218332052 CET	49710	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.218353033 CET	49709	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.218432903 CET	49709	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.218445063 CET	443	49709	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.218564987 CET	49710	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:22.218574047 CET	443	49710	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:22.244103909 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:22.244426012 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:22.244452953 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:22.304696083 CET	443	49702	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:22.347845078 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:22.358365059 CET	49702	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:22.389324903 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:22.747092962 CET	49685	443	192.168.2.12	2.23.227.208
Mar 10, 2025 17:20:22.747327089 CET	49685	443	192.168.2.12	2.23.227.208
Mar 10, 2025 17:20:22.747677088 CET	49685	443	192.168.2.12	2.23.227.208
Mar 10, 2025 17:20:22.752151966 CET	443	49685	2.23.227.208	192.168.2.12
Mar 10, 2025 17:20:22.752365112 CET	443	49685	2.23.227.208	192.168.2.12
Mar 10, 2025 17:20:22.752661943 CET	443	49685	2.23.227.208	192.168.2.12
Mar 10, 2025 17:20:23.051179886 CET	443	49685	2.23.227.208	192.168.2.12
Mar 10, 2025 17:20:23.051282883 CET	49685	443	192.168.2.12	2.23.227.208
Mar 10, 2025 17:20:24.369494915 CET	443	49708	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.370038986 CET	49708	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.370049000 CET	443	49708	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.370609999 CET	49708	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.370615959 CET	443	49708	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.412533998 CET	443	49707	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.413100958 CET	443	49706	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.413125038 CET	49707	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.413152933 CET	443	49707	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.413520098 CET	49706	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.413568974 CET	443	49706	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.413587093 CET	49707	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.413593054 CET	443	49707	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.414066076 CET	49706	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.414079905 CET	443	49706	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.423785925 CET	443	49709	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.424190998 CET	49709	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.424211025 CET	443	49709	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.425354958 CET	49709	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.425364971 CET	443	49709	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.427505016 CET	443	49710	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.427943945 CET	49710	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.427966118 CET	443	49710	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.428376913 CET	49710	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.428384066 CET	443	49710	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.880335093 CET	443	49708	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.880362988 CET	443	49708	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.880417109 CET	443	49708	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.880426884 CET	49708	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.880462885 CET	49708	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.880784988 CET	49708	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.880799055 CET	443	49708	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.880810022 CET	49708	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.880815983 CET	443	49708	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.884053946 CET	49711	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.884104967 CET	443	49711	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.884377956 CET	49711	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.884512901 CET	49711	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.884533882 CET	443	49711	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.927083969 CET	443	49706	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.930248022 CET	443	49707	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.930341959 CET	443	49707	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.930520058 CET	49707	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.930629969 CET	49707	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.930649042 CET	443	49707	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.930663109 CET	49707	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.930668116 CET	443	49707	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.933820963 CET	49712	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.933845043 CET	443	49712	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.933943033 CET	49712	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.934103966 CET	49712	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.934113979 CET	443	49712	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.934967995 CET	443	49706	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.935034037 CET	49706	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.935122967 CET	49706	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.935122967 CET	49706	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.935148954 CET	443	49706	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.935163975 CET	443	49706	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.937716007 CET	49713	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.937762022 CET	443	49713	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.937887907 CET	49713	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.938057899 CET	49713	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.938071012 CET	443	49713	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.944865942 CET	443	49709	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.944919109 CET	443	49709	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.944968939 CET	49709	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.945137978 CET	49709	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.945157051 CET	443	49709	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.945183039 CET	49709	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.945190907 CET	443	49709	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.945631981 CET	443	49710	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.945686102 CET	443	49710	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.945738077 CET	49710	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.945836067 CET	49710	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.945852041 CET	443	49710	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.945863962 CET	49710	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.945868969 CET	443	49710	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.947957039 CET	49714	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.947989941 CET	443	49714	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.948093891 CET	49715	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.948118925 CET	49714	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.948128939 CET	443	49715	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.948169947 CET	49715	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.948283911 CET	49714	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.948295116 CET	443	49714	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:24.948324919 CET	49715	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:24.948338032 CET	443	49715	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:25.336755037 CET	49717	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:25.336792946 CET	443	49717	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:25.336886883 CET	49717	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:25.337207079 CET	49717	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:25.337219954 CET	443	49717	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:25.628503084 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:25.638153076 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:25.638334990 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:25.638355970 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:25.680613995 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:25.712780952 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:25.753988028 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:25.804930925 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:25.852368116 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:27.040098906 CET	443	49711	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.040715933 CET	49711	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.040740013 CET	443	49711	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.042324066 CET	49711	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.042329073 CET	443	49711	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.114027023 CET	443	49715	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.114804029 CET	49715	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.114825964 CET	443	49715	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.115228891 CET	49715	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.115232944 CET	443	49715	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.120774031 CET	443	49712	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.121143103 CET	49712	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.121165991 CET	443	49712	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.121541977 CET	49712	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.121547937 CET	443	49712	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.122769117 CET	443	49714	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.123013973 CET	49714	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.123043060 CET	443	49714	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.123338938 CET	49714	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.123344898 CET	443	49714	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.136881113 CET	443	49713	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.137398005 CET	49713	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.137424946 CET	443	49713	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.137792110 CET	49713	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.137799025 CET	443	49713	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.545747042 CET	443	49711	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.545782089 CET	443	49711	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.545830011 CET	443	49711	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.545924902 CET	49711	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.545957088 CET	49711	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.549850941 CET	443	49717	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:27.556289911 CET	49717	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:27.556324959 CET	443	49717	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:27.557470083 CET	443	49717	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:27.557538033 CET	49717	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:27.558475018 CET	49717	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:27.558542967 CET	443	49717	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:27.559063911 CET	49711	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.559087038 CET	443	49711	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.559093952 CET	49711	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.559098959 CET	443	49711	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.562808990 CET	49718	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.562853098 CET	443	49718	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.562918901 CET	49718	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.563154936 CET	49718	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.563172102 CET	443	49718	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.601826906 CET	49717	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:27.601851940 CET	443	49717	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:27.642987967 CET	443	49712	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.647758961 CET	49717	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:27.648152113 CET	443	49715	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.648219109 CET	443	49715	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.648272991 CET	49715	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.648400068 CET	49715	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.648413897 CET	443	49715	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.648443937 CET	49715	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.648449898 CET	443	49715	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.651520014 CET	49719	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.651540995 CET	443	49719	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.651639938 CET	49719	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.651778936 CET	49719	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.651792049 CET	443	49719	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.652012110 CET	443	49712	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.652065992 CET	49712	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.652127028 CET	49712	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.652147055 CET	443	49712	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.652168989 CET	49712	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.652175903 CET	443	49712	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.653656006 CET	443	49713	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.653683901 CET	443	49713	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.653729916 CET	443	49713	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.653750896 CET	49713	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.653786898 CET	49713	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.654160976 CET	49713	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.654160976 CET	49713	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.654186010 CET	443	49713	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.654198885 CET	443	49713	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.654616117 CET	49720	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.654649973 CET	443	49720	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.654726028 CET	49720	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.654866934 CET	49720	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.654877901 CET	443	49720	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.656537056 CET	49721	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.656570911 CET	443	49721	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.656631947 CET	49721	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.656780958 CET	49721	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.656795979 CET	443	49721	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.937983990 CET	443	49714	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.938055992 CET	443	49714	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.938111067 CET	49714	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.938390970 CET	49714	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.938411951 CET	443	49714	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.938422918 CET	49714	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.938429117 CET	443	49714	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.947621107 CET	49722	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.947653055 CET	443	49722	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:27.947712898 CET	49722	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.947925091 CET	49722	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:27.947937965 CET	443	49722	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:29.657888889 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:29.657919884 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:29.759078979 CET	443	49720	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:29.759597063 CET	49720	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:29.759630919 CET	443	49720	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:29.760073900 CET	49720	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:29.760082006 CET	443	49720	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:29.808783054 CET	443	49718	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:29.809300900 CET	49718	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:29.809345007 CET	443	49718	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:29.809752941 CET	49718	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:29.809772015 CET	443	49718	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:29.813525915 CET	443	49719	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:29.813827038 CET	49719	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:29.813864946 CET	443	49719	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:29.815438986 CET	49719	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:29.815450907 CET	443	49719	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:29.823997021 CET	443	49721	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:29.824337006 CET	49721	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:29.824352980 CET	443	49721	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:29.824723005 CET	49721	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:29.824728966 CET	443	49721	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.102463961 CET	443	49722	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.109682083 CET	49722	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.109704018 CET	443	49722	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.118966103 CET	49722	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.118985891 CET	443	49722	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.151066065 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:30.154023886 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:30.154067993 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:30.265021086 CET	443	49720	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.265096903 CET	443	49720	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.265177011 CET	49720	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.265403032 CET	49720	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.265429974 CET	443	49720	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.265492916 CET	49720	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.265501976 CET	443	49720	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.269722939 CET	49726	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.269824982 CET	443	49726	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.269963026 CET	49726	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.270139933 CET	49726	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.270179987 CET	443	49726	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.331077099 CET	443	49719	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.331150055 CET	443	49719	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.331245899 CET	49719	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.331473112 CET	49719	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.331486940 CET	443	49719	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.331496000 CET	49719	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.331501961 CET	443	49719	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.333257914 CET	443	49721	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.334641933 CET	49727	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.334687948 CET	443	49727	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.334753990 CET	49727	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.334913015 CET	49727	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.334945917 CET	443	49727	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.345020056 CET	443	49721	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.345067978 CET	443	49721	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.345124006 CET	49721	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.345174074 CET	49721	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.345253944 CET	49721	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.345272064 CET	443	49721	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.345287085 CET	49721	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.345293045 CET	443	49721	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.349138021 CET	49728	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.349176884 CET	443	49728	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.349309921 CET	49728	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.349437952 CET	49728	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.349453926 CET	443	49728	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.355351925 CET	443	49718	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.358771086 CET	443	49718	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.358828068 CET	443	49718	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.358881950 CET	49718	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.358938932 CET	49718	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.358997107 CET	49718	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.359016895 CET	443	49718	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.359028101 CET	49718	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.359034061 CET	443	49718	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.365115881 CET	49729	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.365154982 CET	443	49729	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.365271091 CET	49729	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.365659952 CET	49729	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.365669966 CET	443	49729	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.615989923 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:30.616061926 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:30.616092920 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:30.617552042 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:30.617568970 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:30.645064116 CET	443	49722	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.645133018 CET	443	49722	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.645184994 CET	49722	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.646012068 CET	49722	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.646028042 CET	443	49722	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.646039963 CET	49722	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.646045923 CET	443	49722	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.657565117 CET	49730	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.657610893 CET	443	49730	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.657672882 CET	49730	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.657951117 CET	49730	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:30.657960892 CET	443	49730	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:30.707741022 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:30.752384901 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:30.849097967 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:30.849126101 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:30.849312067 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:30.849327087 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:30.849334002 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:30.849339962 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:30.869874954 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:30.869896889 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:31.352111101 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:31.399018049 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:31.411915064 CET	49733	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:31.411979914 CET	443	49733	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:31.412061930 CET	49733	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:31.412542105 CET	49733	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:31.412573099 CET	443	49733	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:31.836138010 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:31.877235889 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:31.928374052 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:31.932246923 CET	49734	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:31.932302952 CET	443	49734	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:31.932410002 CET	49734	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:31.932821989 CET	49734	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:31.932837963 CET	443	49734	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:31.970995903 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:32.468945026 CET	443	49726	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.473824978 CET	49726	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:32.473866940 CET	443	49726	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.474303007 CET	49726	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:32.474309921 CET	443	49726	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.558049917 CET	443	49728	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.563601017 CET	49728	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:32.563642025 CET	443	49728	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.566781044 CET	49728	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:32.566788912 CET	443	49728	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.607794046 CET	443	49727	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.609929085 CET	443	49729	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.612883091 CET	49727	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:32.612917900 CET	443	49727	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.615763903 CET	49727	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:32.615770102 CET	443	49727	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.616727114 CET	49729	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:32.616741896 CET	443	49729	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.617146969 CET	49729	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:32.617151976 CET	443	49729	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.798547983 CET	443	49730	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.799304008 CET	49730	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:32.799325943 CET	443	49730	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:32.799799919 CET	49730	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:32.799806118 CET	443	49730	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.011562109 CET	443	49726	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.012388945 CET	443	49726	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.012450933 CET	443	49726	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.012470007 CET	49726	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.012655973 CET	49726	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.012655973 CET	49726	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.012655973 CET	49726	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.015275955 CET	49735	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.015311956 CET	443	49735	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.015403986 CET	49735	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.015554905 CET	49735	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.015568018 CET	443	49735	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.088165045 CET	443	49728	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.088238955 CET	443	49728	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.088362932 CET	49728	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.088536978 CET	49728	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.088562012 CET	443	49728	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.088577986 CET	49728	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.088586092 CET	443	49728	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.091099024 CET	49736	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.091151953 CET	443	49736	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.091252089 CET	49736	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.091376066 CET	49736	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.091391087 CET	443	49736	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.126836061 CET	443	49729	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.126900911 CET	443	49729	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.126997948 CET	49729	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.127325058 CET	49729	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.127341986 CET	443	49729	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.127370119 CET	49729	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.127374887 CET	443	49729	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.130197048 CET	49737	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.130239010 CET	443	49737	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.130338907 CET	49737	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.130510092 CET	49737	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.130525112 CET	443	49737	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.130527973 CET	443	49727	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.130585909 CET	443	49727	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.130637884 CET	49727	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.130810976 CET	49727	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.130820990 CET	443	49727	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.130830050 CET	49727	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.130834103 CET	443	49727	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.132903099 CET	49738	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.132930994 CET	443	49738	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.133006096 CET	49738	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.133131027 CET	49738	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.133141041 CET	443	49738	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.314806938 CET	49726	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.314843893 CET	443	49726	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.332519054 CET	443	49730	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.332549095 CET	443	49730	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.332597971 CET	443	49730	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.332660913 CET	49730	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.332840919 CET	49730	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.332870007 CET	443	49730	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.332885027 CET	49730	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.332892895 CET	443	49730	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.335802078 CET	49739	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.335850000 CET	443	49739	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:33.335980892 CET	49739	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.336160898 CET	49739	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:33.336173058 CET	443	49739	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:34.226022005 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:34.226054907 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.095093966 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.144340038 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:35.185488939 CET	443	49733	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.185617924 CET	49733	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:35.188117981 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.235972881 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:35.237617016 CET	49733	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:35.237653017 CET	443	49733	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.238251925 CET	49733	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:35.238260984 CET	443	49733	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.279853106 CET	443	49735	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.288583994 CET	49734	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:35.288692951 CET	443	49734	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.288805962 CET	49734	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:35.289227962 CET	49733	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:35.289258003 CET	443	49733	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.289280891 CET	49733	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:35.289288998 CET	443	49733	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.294694901 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:35.294706106 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.295083046 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:35.295089960 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.295687914 CET	49735	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.295702934 CET	443	49735	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.296119928 CET	49735	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.296124935 CET	443	49735	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.326695919 CET	443	49737	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.328298092 CET	443	49736	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.328808069 CET	49737	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.328831911 CET	443	49737	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.329252958 CET	49737	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.329257965 CET	443	49737	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.329341888 CET	443	49738	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.329473972 CET	49736	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.329508066 CET	443	49736	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.329798937 CET	49736	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.329804897 CET	443	49736	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.329971075 CET	49738	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.329984903 CET	443	49738	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.330310106 CET	49738	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.330316067 CET	443	49738	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.525126934 CET	443	49739	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.528881073 CET	49739	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.528899908 CET	443	49739	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.529403925 CET	49739	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.529412985 CET	443	49739	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.679302931 CET	443	49733	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.679676056 CET	49733	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:35.679694891 CET	443	49733	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.776951075 CET	443	49733	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.815244913 CET	443	49735	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.815329075 CET	443	49735	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.815418959 CET	49735	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.815622091 CET	49735	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.815644026 CET	443	49735	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.815660954 CET	49735	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.815665960 CET	443	49735	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.819039106 CET	49740	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.819072008 CET	443	49740	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.819154024 CET	49740	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.819334984 CET	49740	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.819350004 CET	443	49740	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.820432901 CET	49733	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:35.839802980 CET	443	49737	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.839850903 CET	443	49737	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.839900017 CET	49737	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.840074062 CET	49737	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.840087891 CET	443	49737	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.840097904 CET	49737	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.840102911 CET	443	49737	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.843153954 CET	49741	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.843170881 CET	443	49741	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.843246937 CET	49741	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.843442917 CET	49741	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.843463898 CET	443	49741	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.847167015 CET	443	49736	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.847191095 CET	443	49736	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.847223043 CET	443	49736	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.847233057 CET	49736	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.847273111 CET	49736	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.847378016 CET	49736	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.847399950 CET	443	49736	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.847410917 CET	49736	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.847418070 CET	443	49736	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.850053072 CET	49742	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.850080967 CET	443	49742	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.850136995 CET	49742	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.850336075 CET	49742	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.850349903 CET	443	49742	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.855201006 CET	443	49738	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.855221987 CET	443	49738	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.855258942 CET	443	49738	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.855263948 CET	49738	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.855300903 CET	49738	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.855472088 CET	49738	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.855483055 CET	443	49738	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.855494976 CET	49738	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.855500937 CET	443	49738	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.858078957 CET	49743	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.858119011 CET	443	49743	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.858185053 CET	49743	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.858330011 CET	49743	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:35.858342886 CET	443	49743	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:35.908572912 CET	443	49733	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:35.918288946 CET	49744	443	192.168.2.12	35.190.80.1
Mar 10, 2025 17:20:35.918322086 CET	443	49744	35.190.80.1	192.168.2.12
Mar 10, 2025 17:20:35.918384075 CET	49744	443	192.168.2.12	35.190.80.1
Mar 10, 2025 17:20:35.918776989 CET	49744	443	192.168.2.12	35.190.80.1
Mar 10, 2025 17:20:35.918788910 CET	443	49744	35.190.80.1	192.168.2.12
Mar 10, 2025 17:20:35.956442118 CET	49733	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.052366972 CET	443	49733	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.060877085 CET	443	49739	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:36.060945988 CET	443	49739	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:36.061022043 CET	49739	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:36.061276913 CET	49739	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:36.061276913 CET	49739	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:36.061300039 CET	443	49739	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:36.061310053 CET	443	49739	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:36.064431906 CET	49745	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:36.064474106 CET	443	49745	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:36.064579964 CET	49745	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:36.064846039 CET	49745	443	192.168.2.12	13.107.253.72
Mar 10, 2025 17:20:36.064857960 CET	443	49745	13.107.253.72	192.168.2.12
Mar 10, 2025 17:20:36.097361088 CET	49733	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.141483068 CET	443	49733	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.184329987 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.189817905 CET	49733	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.235733032 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.306174040 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.322804928 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.322930098 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.332484007 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.332504988 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.398049116 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.441880941 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.724446058 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.724484921 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.724545002 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.731534004 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.731584072 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.734801054 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.734847069 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.734854937 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.742727995 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.742773056 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.742867947 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.747967005 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.748032093 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.754753113 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.754838943 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.761512995 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.761595964 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.768474102 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.768629074 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.775047064 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.775134087 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.821257114 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.821472883 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.828197956 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.828263044 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.828411102 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.828435898 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.831656933 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.831752062 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.838344097 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.838433027 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.838443995 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.845808029 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.845904112 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.851973057 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.852005959 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.852040052 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.852063894 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.852099895 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.858823061 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.858890057 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.865418911 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.865478992 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.871463060 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.871520042 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.877602100 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.877659082 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.883483887 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.883595943 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.889111042 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.889239073 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.896267891 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.896379948 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.900510073 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.900578976 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.900605917 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.906383038 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.906466961 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.913256884 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.913357019 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.918152094 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.918255091 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.918278933 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.918334007 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.924046040 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.924524069 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.924573898 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.928050995 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.928138018 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.931869984 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.931947947 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.935731888 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.935803890 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.939281940 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.939352036 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.942694902 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.942764044 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.946376085 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.946491957 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.946538925 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.950212955 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.950280905 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.953680038 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.953835964 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.953881979 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.957180023 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.957439899 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.957493067 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.961642981 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.961723089 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.964488983 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.965070963 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.965120077 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.968195915 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.968267918 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.968291044 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.972134113 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.972189903 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.975446939 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.975524902 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.976763010 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.976878881 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.980000019 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.980077028 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.983612061 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.983644962 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.983690023 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.987018108 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.987082958 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.987097979 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.987142086 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.990345955 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.990406036 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.990417957 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.993705034 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.993737936 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.993874073 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.997536898 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.997607946 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:36.997838020 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:36.997886896 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.000363111 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.000413895 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.003707886 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.003767967 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.006443977 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.006501913 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.009921074 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.009978056 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.013036966 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.013091087 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.015876055 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.015943050 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.017694950 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.017851114 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.017901897 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.017918110 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.019828081 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.019897938 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.025360107 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.025434017 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.164096117 CET	443	49717	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:37.164192915 CET	443	49717	142.250.185.100	192.168.2.12
Mar 10, 2025 17:20:37.164239883 CET	49717	443	192.168.2.12	142.250.185.100
Mar 10, 2025 17:20:37.249114990 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.258198023 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.258259058 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.258292913 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.258316040 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.258327007 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.259301901 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.259357929 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.290955067 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.291032076 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.291088104 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.291098118 CET	49701	443	192.168.2.12	172.67.152.103
Mar 10, 2025 17:20:37.292057991 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.292100906 CET	443	49701	172.67.152.103	192.168.2.12
Mar 10, 2025 17:20:37.29211